Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Q1UZ7iVHx2mlyWFnnu7LIP5rDfU.roa
File: Q1UZ7iVHx2mlyWFnnu7LIP5rDfU.roa (raw, json)
Hash identifier: OdQCClIfzJnFc5xyOBfv2izpWLcoccc3Ad6LzOpfmSI=
Subject key identifier: 43:55:19:EE:25:47:C7:69:A5:C9:61:67:9E:EE:CB:20:FE:6B:0D:F5
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 0191986949DAF8F9729F2050A94EC1124449
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Q1UZ7iVHx2mlyWFnnu7LIP5rDfU.roa
Signing time: Wed 28 Aug 2024 09:55:22 +0000
ROA not before: Wed 28 Aug 2024 09:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57305
IP address blocks: 91.227.212.0/22 maxlen: 22
195.149.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:69:49:da:f8:f9:72:9f:20:50:a9:4e:c1:12:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Aug 28 09:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=435519ee2547c769a5c961679eeecb20fe6b0df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:fb:f0:c5:57:ce:5d:85:0d:f1:17:2c:e7:
83:f3:80:d8:20:97:01:80:3e:57:9e:f0:29:24:6c:
b9:d9:64:d2:d0:ca:db:2e:83:c0:e7:bd:46:3d:f1:
39:4f:b0:89:15:ec:93:17:55:5e:4b:19:eb:63:7d:
c1:47:0b:e0:5e:36:6d:a6:4b:6d:3f:8a:98:c3:16:
65:62:67:4f:f9:00:56:66:5d:24:93:0a:96:eb:ae:
d3:13:7a:67:82:17:00:bc:43:18:ba:08:b4:2f:b5:
f3:90:67:0d:c5:ff:c9:16:e6:44:66:6b:13:eb:cb:
68:85:9c:a0:e8:7c:cb:cf:3b:9c:a5:0d:aa:f8:ff:
37:12:36:60:69:fb:b6:db:3f:9c:cd:d6:55:0e:a0:
17:c6:45:31:03:de:c0:4e:f9:a7:4d:6b:b7:2a:e1:
08:4e:d8:91:18:e0:75:1c:a1:8e:c4:5c:57:49:73:
cd:0b:6d:2f:20:0a:9b:a7:32:f0:86:b1:a0:5a:19:
87:4c:da:85:65:36:18:a5:63:6b:05:d9:a0:81:81:
18:59:05:e4:37:1b:78:29:32:19:d1:84:cd:21:94:
bc:68:ab:44:39:6a:7f:8e:23:cf:e0:40:0a:fb:55:
5f:b9:a0:0b:16:c1:ef:f8:b2:45:b6:2c:5e:34:18:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:19:EE:25:47:C7:69:A5:C9:61:67:9E:EE:CB:20:FE:6B:0D:F5
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Q1UZ7iVHx2mlyWFnnu7LIP5rDfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.212.0/22
195.149.100.0/24
Signature Algorithm: sha256WithRSAEncryption
06:b2:b8:97:cf:35:88:11:01:64:48:5c:b0:b8:86:aa:a1:8a:
f3:c2:78:2d:5b:4a:36:58:21:4c:d4:1a:3a:bd:17:7d:1d:ee:
f4:4b:9f:3f:54:e6:d7:d6:dd:3e:74:93:f5:fc:39:4f:70:32:
bb:04:58:38:d3:65:0c:1a:9f:69:f4:71:13:b8:71:0a:dd:93:
f6:e7:c0:50:4e:d4:e9:21:df:aa:e7:cd:b9:7c:65:a5:b8:f8:
04:1c:ec:45:6a:b4:ac:89:f8:8c:7e:c7:fa:52:e0:3c:46:0f:
eb:8b:70:75:6f:e9:fd:5c:77:6f:38:c3:ec:2f:17:ba:fc:ba:
69:dc:a5:45:e2:3c:d2:6e:c6:13:a6:22:62:47:73:10:f7:42:
f5:8b:07:b4:d2:a1:18:a2:c2:30:0f:0f:d4:de:5a:e9:8e:37:
93:3e:09:fa:19:c5:ee:f7:e3:b3:17:88:69:cd:51:6a:1e:bd:
af:dd:20:87:8a:0f:42:15:7e:63:4b:b4:8d:b0:f7:1c:12:5d:
dc:c6:cd:c4:b3:c0:86:4a:20:70:32:a8:3c:92:de:ec:78:24:
48:c7:48:62:aa:fc:f4:4f:81:54:b2:0b:c5:26:56:23:f0:9f:
52:d3:6f:fa:8f:d4:64:14:b1:c3:da:cd:a3:3f:2b:a3:bc:1f:
b7:f7:5e:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGYaUna+PlynyBQqU7BEkRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjQwODI4MDk1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzU1MTllZTI1NDdjNzY5YTVjOTYxNjc5ZWVlY2IyMGZlNmIwZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobn78MVXzl2FDfEXLOeD84DYIJcB
gD5XnvApJGy52WTS0MrbLoPA571GPfE5T7CJFeyTF1VeSxnrY33BRwvgXjZtpktt
P4qYwxZlYmdP+QBWZl0kkwqW667TE3pnghcAvEMYugi0L7XzkGcNxf/JFuZEZmsT
68tohZyg6HzLzzucpQ2q+P83EjZgafu22z+czdZVDqAXxkUxA97ATvmnTWu3KuEI
TtiRGOB1HKGOxFxXSXPNC20vIAqbpzLwhrGgWhmHTNqFZTYYpWNrBdmggYEYWQXk
Nxt4KTIZ0YTNIZS8aKtEOWp/jiPP4EAK+1VfuaALFsHv+LJFtixeNBhqIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFENVGe4lR8dppclhZ57uyyD+aw31MB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvUTFVWjdpVkh4Mm1seVdGbm51N0xJUDVyRGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+PUAwQA
w5VkMA0GCSqGSIb3DQEBCwUAA4IBAQAGsriXzzWIEQFkSFywuIaqoYrzwngtW0o2
WCFM1Bo6vRd9He70S58/VObX1t0+dJP1/DlPcDK7BFg402UMGp9p9HETuHEK3ZP2
58BQTtTpId+q5825fGWluPgEHOxFarSsifiMfsf6UuA8Rg/ri3B1b+n9XHdvOMPs
Lxe6/Lpp3KVF4jzSbsYTpiJiR3MQ90L1iwe00qEYosIwDw/U3lrpjjeTPgn6GcXu
9+OzF4hpzVFqHr2v3SCHig9CFX5jS7SNsPccEl3cxs3Es8CGSiBwMqg8kt7seCRI
x0hiqvz0T4FUsgvFJlYj8J9S02/6j9RkFLHD2s2jPyujvB+39170
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:24 2024 by rpki-client on console-ams.rpki-client.org