Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/qwuSQf4ciryKBOuiKEF-AhEJRuE.roa
File: qwuSQf4ciryKBOuiKEF-AhEJRuE.roa (raw, json)
Hash identifier: oEZ8wowrWK8s8YzAc1dmM13nrhQ6iTCzS9ZdmT6fIYU=
Subject key identifier: AB:0B:92:41:FE:1C:8A:BC:8A:04:EB:A2:28:41:7E:02:11:09:46:E1
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 018CCA2A5A7A312A5BE641CF98B08ABFCA46
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/qwuSQf4ciryKBOuiKEF-AhEJRuE.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8290
IP address blocks: 195.28.128.0/19 maxlen: 21
185.77.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5a:7a:31:2a:5b:e6:41:cf:98:b0:8a:bf:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab0b9241fe1c8abc8a04eba228417e02110946e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:2f:db:d0:2f:6f:f1:2a:c2:4d:34:06:75:
2a:37:46:6b:05:82:81:df:68:75:24:b9:e6:bb:91:
15:c0:f7:74:31:f8:46:81:a6:1d:7c:d6:8c:54:0f:
b2:bf:63:94:bf:3c:0a:64:98:5a:6e:4d:6b:50:86:
59:00:ed:d0:cc:84:0e:87:29:e6:d4:d7:78:50:c6:
67:27:c0:6e:ae:58:e9:71:53:1e:7b:90:b3:f9:d5:
8c:c8:2a:7c:d2:2c:e1:7e:da:0d:2c:be:43:fa:f2:
dc:cd:e5:7d:46:04:1d:d8:47:59:55:a8:7b:86:4d:
8a:03:f7:58:5a:d4:f1:92:83:7e:06:ec:d1:33:86:
cd:9d:18:33:5b:07:5f:34:bf:10:ee:78:f7:17:84:
8e:b6:6f:e2:9e:b9:67:5d:3d:dd:32:1a:51:5b:c2:
a2:4e:56:a5:a5:57:4f:05:35:ca:d2:15:ef:e9:ca:
a0:1e:e2:53:0c:10:69:fc:3c:0f:c7:91:6a:e6:92:
72:5c:7b:27:ac:91:0a:cd:5d:ae:51:4c:de:b9:2a:
11:0a:28:d8:02:e9:fb:1f:1b:a3:04:be:6c:fb:fc:
81:7c:cc:56:ae:ed:3c:9a:1a:a0:85:af:06:de:a2:
cf:04:c3:89:38:af:57:ca:6a:20:f3:a0:fe:b7:d0:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:92:41:FE:1C:8A:BC:8A:04:EB:A2:28:41:7E:02:11:09:46:E1
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/qwuSQf4ciryKBOuiKEF-AhEJRuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.144.0/22
195.28.128.0/19
Signature Algorithm: sha256WithRSAEncryption
03:95:0c:9a:54:4d:28:a0:28:e9:f5:70:14:9c:ec:9f:04:86:
29:e1:03:5d:00:21:e7:82:81:b1:6c:42:b8:57:6e:19:2c:9d:
3c:c9:d7:9d:9b:52:cf:43:54:ae:2e:ca:c9:36:87:d2:f3:4a:
32:4a:16:6a:16:01:27:9c:14:91:77:1e:4a:ca:30:9c:ec:4e:
99:84:8a:cd:35:28:3e:10:5c:3a:a2:1c:9a:54:c0:20:e9:4c:
a7:65:78:c1:75:0a:63:bd:57:49:64:1a:8a:af:a2:9d:d8:d4:
4b:66:21:b0:52:28:20:d8:c1:4c:35:79:9d:0f:d4:65:da:d2:
87:ae:3d:81:3f:e4:7c:1c:8b:f3:41:46:88:e5:a5:e3:95:1a:
fd:02:2c:9c:8a:09:20:5a:81:7a:04:c8:b5:f6:20:c4:64:93:
84:8e:34:53:0c:99:89:c6:28:46:70:16:34:64:2d:04:e8:c7:
ba:fe:bd:5e:fd:ce:89:bb:ee:08:ef:c6:8e:3d:55:14:8e:9c:
7e:28:5e:a3:a5:40:ca:3c:44:bf:e1:19:f6:78:a3:f4:a5:95:
17:36:ed:7c:c7:4a:eb:a7:8e:f5:45:f6:24:36:3e:13:89:fd:
68:b0:69:cb:9c:7c:35:b6:91:a0:7c:e4:28:de:3d:c4:11:df:
1a:33:6e:85
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKlp6MSpb5kHPmLCKv8pGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4
MGQwN2QwHhcNMjQwMTAyMTIzMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjBiOTI0MWZlMWM4YWJjOGEwNGViYTIyODQxN2UwMjExMDk0NmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ov29Avb/Eqwk00BnUqN0ZrBYKB
32h1JLnmu5EVwPd0MfhGgaYdfNaMVA+yv2OUvzwKZJhabk1rUIZZAO3QzIQOhynm
1Nd4UMZnJ8BurljpcVMee5Cz+dWMyCp80izhftoNLL5D+vLczeV9RgQd2EdZVah7
hk2KA/dYWtTxkoN+BuzRM4bNnRgzWwdfNL8Q7nj3F4SOtm/inrlnXT3dMhpRW8Ki
TlalpVdPBTXK0hXv6cqgHuJTDBBp/DwPx5Fq5pJyXHsnrJEKzV2uUUzeuSoRCijY
Aun7HxujBL5s+/yBfMxWru08mhqgha8G3qLPBMOJOK9Xymog86D+t9ClewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKsLkkH+HIq8igTroihBfgIRCUbhMB8GA1UdIwQY
MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt
NmU2ZThkOTMwM2U5LzEvcXd1U1FmNGNpcnlLQk91aUtFRi1BaEVKUnVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5
LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuU2QAwQF
wxyAMA0GCSqGSIb3DQEBCwUAA4IBAQADlQyaVE0ooCjp9XAUnOyfBIYp4QNdACHn
goGxbEK4V24ZLJ08ydedm1LPQ1SuLsrJNofS80oyShZqFgEnnBSRdx5KyjCc7E6Z
hIrNNSg+EFw6ohyaVMAg6UynZXjBdQpjvVdJZBqKr6Kd2NRLZiGwUigg2MFMNXmd
D9Rl2tKHrj2BP+R8HIvzQUaI5aXjlRr9AiycigkgWoF6BMi19iDEZJOEjjRTDJmJ
xihGcBY0ZC0E6Me6/r1e/c6Ju+4I78aOPVUUjpx+KF6jpUDKPES/4Rn2eKP0pZUX
Nu18x0rrp471RfYkNj4Tif1osGnLnHw1tpGgfOQo3j3EEd8aM26F
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:13 2024 by rpki-client on console-ams.rpki-client.org