Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qNGBQCwY-M8qgiVItNqRjwkDnJo.roa
File: qNGBQCwY-M8qgiVItNqRjwkDnJo.roa (raw, json)
Hash identifier: U58xwFEIQ58IBavHVUWw+DNPVZVwm17tTGd8J/oGr3U=
Subject key identifier: A8:D1:81:40:2C:18:F8:CF:2A:82:25:48:B4:DA:91:8F:09:03:9C:9A
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CC86F927EDCC5C89B8498207650C2C6F0
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qNGBQCwY-M8qgiVItNqRjwkDnJo.roa
Signing time: Tue 02 Jan 2024 04:30:04 +0000
ROA not before: Tue 02 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48113
IP address blocks: 87.110.240.0/21 maxlen: 24
195.13.219.0/24 maxlen: 24
87.110.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:92:7e:dc:c5:c8:9b:84:98:20:76:50:c2:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8d181402c18f8cf2a822548b4da918f09039c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:0a:03:85:c9:8a:5f:ed:3b:89:c8:c6:01:
2e:0e:0e:37:49:a8:1f:c5:78:c9:50:1c:ff:bc:5d:
43:8c:b1:78:76:c9:86:f4:9e:70:0d:91:7d:1a:18:
e5:23:64:3d:84:a0:45:25:c0:02:0b:62:8d:af:2e:
f3:1e:09:19:7d:1c:fe:a4:67:5f:96:28:f2:6f:9d:
37:35:72:89:41:52:b1:c2:45:fa:93:3e:be:49:d8:
4c:0f:da:6d:ec:09:21:14:b5:66:70:45:67:5d:93:
88:0d:d7:c5:2d:dc:22:e5:c3:21:e7:f2:72:51:7c:
ff:1e:5b:77:d7:ab:f3:8d:dc:81:09:be:5d:4e:1a:
55:b1:eb:f7:54:ba:3a:f9:8f:06:c9:3d:b9:5b:98:
fa:1a:b2:c8:8a:77:62:ea:b7:29:bc:e4:8e:3a:42:
37:e3:22:f9:78:57:b3:e6:54:f9:0d:9c:7f:b9:ba:
4b:b9:82:5c:d0:d7:4f:c3:d5:67:9c:3c:f6:2a:41:
cd:6f:11:e4:7d:41:8b:52:80:91:c8:2f:ff:06:b1:
64:b0:12:85:c0:1b:b4:d0:cd:d9:e5:33:9a:81:55:
da:d6:fd:c6:b1:ff:15:3c:15:23:49:ef:87:38:32:
6b:c7:a6:17:e4:d7:1b:c4:84:04:bf:a0:e0:02:9c:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:81:40:2C:18:F8:CF:2A:82:25:48:B4:DA:91:8F:09:03:9C:9A
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/qNGBQCwY-M8qgiVItNqRjwkDnJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.228.0/22
87.110.240.0/21
195.13.219.0/24
Signature Algorithm: sha256WithRSAEncryption
94:54:f3:fb:2a:80:61:3f:52:8e:0e:1b:34:e5:05:ad:33:3c:
85:b3:c9:9c:aa:a6:55:0a:dc:f0:c2:bb:1b:e8:52:24:48:11:
c7:3b:e9:8b:66:ce:3c:7f:5a:fc:20:6f:5b:88:f7:e9:ba:18:
ce:7c:fb:5e:40:91:b8:f6:02:ba:4d:a2:12:03:66:3e:fa:5f:
bb:40:67:30:18:82:01:b2:5d:69:19:4d:64:2f:76:3e:35:75:
a1:16:ae:17:1d:67:3e:39:13:fc:f6:f4:3f:0a:1d:7e:88:c4:
78:67:8a:b6:59:2a:59:1d:6c:1f:1d:e3:58:3e:e2:d7:0f:02:
d2:ca:b0:93:a1:ae:6e:7b:fc:dc:6e:e4:81:45:ab:bb:50:df:
67:1c:33:b5:3f:8e:b9:50:93:07:7d:24:b5:aa:3c:64:e0:82:
18:e4:13:ad:79:5b:82:91:17:48:68:0a:42:66:1f:f6:0e:f1:
3a:ff:c7:af:4b:d1:97:e0:13:53:47:fc:7c:62:d6:4e:7f:85:
cf:dd:de:8e:9a:30:72:8d:de:32:ba:28:61:74:4a:0c:b3:58:
fc:a5:43:3b:b7:0c:f4:a9:6a:b0:65:eb:33:84:cf:08:68:00:
03:26:6a:05:e8:c4:52:0f:f4:73:8c:b5:16:34:c8:c8:56:52:
ee:12:28:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzIb5J+3MXIm4SYIHZQwsbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjQwMTAyMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQxODE0MDJjMThmOGNmMmE4MjI1NDhiNGRhOTE4ZjA5MDM5YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwAKA4XJil/tO4nIxgEuDg43Sagf
xXjJUBz/vF1DjLF4dsmG9J5wDZF9GhjlI2Q9hKBFJcACC2KNry7zHgkZfRz+pGdf
lijyb503NXKJQVKxwkX6kz6+SdhMD9pt7AkhFLVmcEVnXZOIDdfFLdwi5cMh5/Jy
UXz/Hlt316vzjdyBCb5dThpVsev3VLo6+Y8GyT25W5j6GrLIindi6rcpvOSOOkI3
4yL5eFez5lT5DZx/ubpLuYJc0NdPw9VnnDz2KkHNbxHkfUGLUoCRyC//BrFksBKF
wBu00M3Z5TOagVXa1v3Gsf8VPBUjSe+HODJrx6YX5NcbxIQEv6DgApwZSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKjRgUAsGPjPKoIlSLTakY8JA5yaMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvcU5HQlFDd1ktTThxZ2lWSXROcVJqd2tEbkpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV27kAwQD
V27wAwQAww3bMA0GCSqGSIb3DQEBCwUAA4IBAQCUVPP7KoBhP1KODhs05QWtMzyF
s8mcqqZVCtzwwrsb6FIkSBHHO+mLZs48f1r8IG9biPfpuhjOfPteQJG49gK6TaIS
A2Y++l+7QGcwGIIBsl1pGU1kL3Y+NXWhFq4XHWc+ORP89vQ/Ch1+iMR4Z4q2WSpZ
HWwfHeNYPuLXDwLSyrCToa5ue/zcbuSBRau7UN9nHDO1P465UJMHfSS1qjxk4IIY
5BOteVuCkRdIaApCZh/2DvE6/8evS9GX4BNTR/x8YtZOf4XP3d6OmjByjd4yuihh
dEoMs1j8pUM7twz0qWqwZeszhM8IaAADJmoF6MRSD/RzjLUWNMjIVlLuEigt
-----END CERTIFICATE-----
Generated at Sun May 26 09:40:38 2024 by rpki-client on console-ams.rpki-client.org