Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/EQQ_94fTvbESw7BTesbEPZIw7b8.roa
File: EQQ_94fTvbESw7BTesbEPZIw7b8.roa (raw, json)
Hash identifier: Pmd5u7EaP+Ji0A4zfL11WVt2rgIoceRypfUNVsK24u0=
Subject key identifier: 11:04:3F:F7:87:D3:BD:B1:12:C3:B0:53:7A:C6:C4:3D:92:30:ED:BF
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 018CC3B68F679F4464198B0F287F82117FC3
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/EQQ_94fTvbESw7BTesbEPZIw7b8.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.134.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8f:67:9f:44:64:19:8b:0f:28:7f:82:11:7f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11043ff787d3bdb112c3b0537ac6c43d9230edbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:9b:21:ec:0f:65:14:ee:1f:c4:74:e8:93:
84:89:37:77:5f:1a:c7:79:93:ff:23:01:67:8f:77:
56:14:86:d4:71:ed:bd:22:9b:69:d7:53:7d:61:81:
ef:4d:6d:42:fa:06:f5:b6:62:35:7d:e9:7a:9e:9e:
90:bd:da:d4:ba:bb:40:a1:61:99:42:d7:1b:77:96:
1c:b0:d0:ab:46:5b:08:60:fc:bc:6e:3a:af:ba:4a:
7a:3b:81:2c:fb:1c:ec:e4:0a:73:01:50:49:38:92:
98:5b:1f:1f:60:43:19:95:c2:56:6b:94:10:36:77:
06:58:5f:d2:14:1e:ad:47:51:ab:aa:a1:03:c8:a6:
ab:2b:d8:c5:0f:5c:2d:c0:1a:44:f1:89:ce:b6:0d:
80:5d:6e:e7:ef:33:7a:4b:bc:3b:59:67:87:15:37:
52:db:57:cf:92:62:ac:b8:34:75:35:65:c7:e3:77:
53:48:36:44:36:46:82:47:38:ea:cd:22:3d:54:ed:
80:33:6f:1b:21:23:c1:2e:54:6a:cd:ed:01:f6:9c:
3a:0c:bc:3b:b5:37:9e:cd:43:12:e8:92:ad:d9:4c:
01:c7:4d:8c:82:e4:d2:36:bb:00:54:aa:c3:e0:49:
a1:c9:e8:fd:ac:27:0d:f4:15:22:7d:02:28:c6:11:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:04:3F:F7:87:D3:BD:B1:12:C3:B0:53:7A:C6:C4:3D:92:30:ED:BF
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/EQQ_94fTvbESw7BTesbEPZIw7b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.79.0/24
Signature Algorithm: sha256WithRSAEncryption
58:93:27:f0:ba:cc:27:59:80:82:b5:56:02:8e:15:ae:3d:ca:
f2:d2:a3:3a:9b:06:8f:99:46:8d:42:a0:8a:18:9c:c7:b4:1b:
01:85:0a:7b:46:06:27:4c:3f:97:09:97:e4:8b:3c:ba:27:85:
39:b5:11:dc:1e:36:e9:61:4c:23:e1:1f:a7:0e:2a:4d:dc:c0:
48:8e:56:b2:12:4f:8f:13:e2:a5:22:98:23:55:21:e5:d9:71:
8e:03:ef:83:57:d8:19:57:87:96:b8:5d:c4:dc:bf:f7:ce:23:
57:24:e0:37:4a:30:f2:19:6f:2e:c0:69:b0:f8:f3:b6:12:2c:
e0:ad:a8:d7:1b:d2:b8:66:b2:51:8c:8c:18:8a:df:3c:5d:c5:
dd:14:24:6c:c3:19:dc:e3:fb:19:c8:25:0a:d6:a4:cc:54:53:
94:52:72:70:b0:49:2a:90:e7:d1:bc:fb:0c:28:5d:83:41:11:
7e:c2:60:81:6f:ce:1c:6e:16:ae:5a:59:59:4a:e9:a2:86:0e:
a9:4c:77:cd:cf:46:3f:93:f9:b7:b1:76:7c:e2:bb:49:e8:a5:
9b:1f:36:d0:39:21:f2:de:ba:95:bb:3c:64:ff:dd:2c:29:91:
5b:1e:5a:00:13:7b:20:22:a7:1b:0e:8a:0e:d7:dc:8d:e3:ef:
ec:32:58:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDto9nn0RkGYsPKH+CEX/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjQwMTAxMDYyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTA0M2ZmNzg3ZDNiZGIxMTJjM2IwNTM3YWM2YzQzZDkyMzBlZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N6bIewPZRTuH8R06JOEiTd3XxrH
eZP/IwFnj3dWFIbUce29Iptp11N9YYHvTW1C+gb1tmI1fel6np6QvdrUurtAoWGZ
Qtcbd5YcsNCrRlsIYPy8bjqvukp6O4Es+xzs5ApzAVBJOJKYWx8fYEMZlcJWa5QQ
NncGWF/SFB6tR1GrqqEDyKarK9jFD1wtwBpE8YnOtg2AXW7n7zN6S7w7WWeHFTdS
21fPkmKsuDR1NWXH43dTSDZENkaCRzjqzSI9VO2AM28bISPBLlRqze0B9pw6DLw7
tTeezUMS6JKt2UwBx02MguTSNrsAVKrD4Emhyej9rCcN9BUifQIoxhFbGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEEP/eH072xEsOwU3rGxD2SMO2/MB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvRVFRXzk0ZlR2YkVTdzdCVGVzYkVQWkl3N2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYZPMA0G
CSqGSIb3DQEBCwUAA4IBAQBYkyfwuswnWYCCtVYCjhWuPcry0qM6mwaPmUaNQqCK
GJzHtBsBhQp7RgYnTD+XCZfkizy6J4U5tRHcHjbpYUwj4R+nDipN3MBIjlayEk+P
E+KlIpgjVSHl2XGOA++DV9gZV4eWuF3E3L/3ziNXJOA3SjDyGW8uwGmw+PO2Eizg
rajXG9K4ZrJRjIwYit88XcXdFCRswxnc4/sZyCUK1qTMVFOUUnJwsEkqkOfRvPsM
KF2DQRF+wmCBb84cbhauWllZSumihg6pTHfNz0Y/k/m3sXZ84rtJ6KWbHzbQOSHy
3rqVuzxk/90sKZFbHloAE3sgIqcbDooO19yN4+/sMljV
-----END CERTIFICATE-----
Generated at Thu May 2 09:01:18 2024 by rpki-client on console-ams.rpki-client.org