Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/QzoqAFyU0H8z7ZXQ1Lv-FVgNhro.roa
File: QzoqAFyU0H8z7ZXQ1Lv-FVgNhro.roa (raw, json)
Hash identifier: fmu7wGYzwNNaZ54RgyUd4DigjXp+tbd8U5u2IcOi/cQ=
Subject key identifier: 43:3A:2A:00:5C:94:D0:7F:33:ED:95:D0:D4:BB:FE:15:58:0D:86:BA
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 018CEE4755DAE4DB314309CADD95B161FB18
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/QzoqAFyU0H8z7ZXQ1Lv-FVgNhro.roa
Signing time: Tue 09 Jan 2024 12:51:41 +0000
ROA not before: Tue 09 Jan 2024 12:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58238
IP address blocks: 109.107.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:47:55:da:e4:db:31:43:09:ca:dd:95:b1:61:fb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 9 12:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=433a2a005c94d07f33ed95d0d4bbfe15580d86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:26:d2:a1:78:f5:46:4f:72:21:c5:4b:49:
90:c8:de:19:92:b6:2d:92:10:35:52:29:96:fb:45:
42:db:5c:b3:ea:24:1c:16:4a:51:87:b5:38:0d:b9:
3b:03:cc:52:77:c9:9a:ba:56:fc:72:12:30:61:82:
1e:09:63:5a:60:25:ce:fc:d7:d2:a9:eb:e7:e5:b0:
78:0d:52:6e:24:cb:48:59:5c:80:d7:8c:31:09:a5:
14:0a:72:ae:92:1e:10:82:44:67:21:5e:5d:dd:94:
dc:98:a0:86:a7:aa:6f:a5:e6:b6:d6:14:82:16:91:
d0:b4:b8:b1:e4:66:8c:4a:e4:c6:10:62:1a:83:f9:
ef:92:5c:92:b8:0e:8a:9a:d9:6b:2c:b0:e1:e0:49:
3c:98:b6:47:d0:50:d1:6d:ab:b1:6c:75:93:95:7a:
bd:28:2d:2b:8a:03:38:2f:a5:60:97:37:d6:ca:64:
1f:30:fc:e9:3c:4b:14:86:47:f7:41:23:6f:b8:a3:
c5:79:c1:f1:97:1b:1c:ba:33:d8:c7:c1:dc:09:94:
8b:d4:25:62:9b:07:f2:fa:8f:bf:71:b1:11:2c:5d:
d2:b9:b2:23:de:bf:fe:b3:7a:21:d4:cc:13:37:a8:
c6:33:56:f3:b0:6a:c3:e5:67:c2:95:be:ea:06:4f:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:2A:00:5C:94:D0:7F:33:ED:95:D0:D4:BB:FE:15:58:0D:86:BA
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/QzoqAFyU0H8z7ZXQ1Lv-FVgNhro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
75:84:19:5b:e3:79:18:8d:34:0e:d1:c1:a4:da:45:44:77:a1:
e0:29:83:a3:6f:83:a6:9b:fa:84:c8:d2:c5:26:f9:03:67:26:
38:dd:5a:ab:4e:ee:78:df:cd:32:6f:f9:35:bb:dd:99:ad:05:
fe:98:65:f4:dc:b6:cf:77:2f:00:95:68:37:af:6e:35:2b:d1:
5d:84:ed:40:c8:92:3b:8e:1f:f9:67:2b:c9:bb:50:ba:43:70:
af:c3:10:0a:c3:2a:1d:91:a4:91:4e:5d:b1:bb:aa:39:fd:13:
98:ad:a8:bf:0b:a8:68:96:10:c3:e0:b5:89:57:fe:c3:6a:fb:
b4:9e:64:50:3e:5b:cd:81:5f:63:2d:73:55:3d:3c:f4:51:be:
53:c7:91:15:be:b9:13:50:32:8b:13:8f:ce:4b:6f:36:7e:c2:
df:92:64:2f:dd:a7:75:c9:3b:6c:34:68:c6:81:0b:6b:7f:52:
ff:65:e8:17:6d:9f:1c:9b:35:58:b6:aa:9b:d7:0c:a8:36:b9:
12:df:25:03:5d:26:cb:58:a5:dd:f5:ec:d4:da:76:0c:37:95:
0e:f8:a2:73:58:71:40:9a:9d:b0:85:ae:6c:19:0a:26:ee:40:
cb:b0:95:b2:b4:64:14:a0:bc:a2:3b:91:0b:93:bc:8f:9e:22:
03:fc:36:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzuR1Xa5NsxQwnK3ZWxYfsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4
ZmU0NTYwHhcNMjQwMTA5MTI1MTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzNhMmEwMDVjOTRkMDdmMzNlZDk1ZDBkNGJiZmUxNTU4MGQ4NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYYm0qF49UZPciHFS0mQyN4ZkrYt
khA1UimW+0VC21yz6iQcFkpRh7U4Dbk7A8xSd8maulb8chIwYYIeCWNaYCXO/NfS
qevn5bB4DVJuJMtIWVyA14wxCaUUCnKukh4QgkRnIV5d3ZTcmKCGp6pvpea21hSC
FpHQtLix5GaMSuTGEGIag/nvklySuA6KmtlrLLDh4Ek8mLZH0FDRbauxbHWTlXq9
KC0rigM4L6VglzfWymQfMPzpPEsUhkf3QSNvuKPFecHxlxscujPYx8HcCZSL1CVi
mwfy+o+/cbERLF3SubIj3r/+s3oh1MwTN6jGM1bzsGrD5WfClb7qBk+RbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEM6KgBclNB/M+2V0NS7/hVYDYa6MB8GA1UdIwQY
MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt
ZGVlM2VkNDk3YWVlLzEvUXpvcUFGeVUwSDh6N1pYUTFMdi1GVmdOaHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl
LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuoMA0G
CSqGSIb3DQEBCwUAA4IBAQB1hBlb43kYjTQO0cGk2kVEd6HgKYOjb4Omm/qEyNLF
JvkDZyY43VqrTu54380yb/k1u92ZrQX+mGX03LbPdy8AlWg3r241K9FdhO1AyJI7
jh/5ZyvJu1C6Q3CvwxAKwyodkaSRTl2xu6o5/ROYrai/C6holhDD4LWJV/7Davu0
nmRQPlvNgV9jLXNVPTz0Ub5Tx5EVvrkTUDKLE4/OS282fsLfkmQv3ad1yTtsNGjG
gQtrf1L/ZegXbZ8cmzVYtqqb1wyoNrkS3yUDXSbLWKXd9ezU2nYMN5UO+KJzWHFA
mp2wha5sGQom7kDLsJWytGQUoLyiO5ELk7yPniID/DYi
-----END CERTIFICATE-----
Generated at Thu May 9 18:47:30 2024 by rpki-client on console-ams.rpki-client.org