Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/QFs_s0Gk8PtY4HDJ9d56hio_YiI.roa
File: QFs_s0Gk8PtY4HDJ9d56hio_YiI.roa (raw, json)
Hash identifier: TerotV7LIESVp62SjZx09wuo2doDPH+J6W/0QJDwsTo=
Subject key identifier: 40:5B:3F:B3:41:A4:F0:FB:58:E0:70:C9:F5:DE:7A:86:2A:3F:62:22
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC49385E077C7D613C28D2F63F4AAAFE1
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/QFs_s0Gk8PtY4HDJ9d56hio_YiI.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30337
IP address blocks: 212.60.16.0/24 maxlen: 24
212.60.17.0/24 maxlen: 24
45.67.145.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
217.197.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:e0:77:c7:d6:13:c2:8d:2f:63:f4:aa:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=405b3fb341a4f0fb58e070c9f5de7a862a3f6222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:9d:99:e7:09:0f:22:3a:74:03:27:d9:dd:
42:a6:4d:79:f7:e6:ad:31:28:8d:21:fb:27:6b:78:
e6:d9:b8:d4:46:01:71:35:49:65:5f:ac:58:09:f6:
e2:93:e2:4b:de:4a:12:47:eb:7a:e0:58:16:0d:c3:
08:64:a9:b9:ad:39:bb:dd:38:ea:cb:b5:51:b5:81:
f4:87:e0:fd:47:b1:a7:50:3d:3d:ba:a6:32:e9:0b:
f8:ab:9e:2b:e0:5a:7d:7c:0c:b6:41:8b:9d:5c:78:
a5:d0:fe:a9:0a:9c:05:d4:2f:95:d1:aa:82:ee:14:
5f:3d:e5:49:58:0f:f4:42:15:cb:b9:3a:7b:8d:74:
1b:d2:95:62:90:cf:95:1b:78:79:48:ab:cb:a9:0c:
1f:e0:a9:c9:69:3f:97:37:49:3f:41:2b:34:9a:bd:
85:2b:e1:43:fe:e3:cc:22:d1:1a:ab:fd:09:c6:f3:
e9:8b:2e:8e:cc:88:a9:5c:ce:94:cc:9d:1b:91:82:
44:ed:05:01:4d:38:9c:af:41:11:a6:b3:4d:7a:fe:
fe:9e:12:70:a1:62:4b:ca:ca:b7:ae:3f:7d:61:15:
98:02:fa:0e:76:e6:4a:2b:0a:e9:f1:54:42:13:2f:
67:ab:f7:20:6e:18:13:c2:f8:17:d4:8c:66:16:92:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:3F:B3:41:A4:F0:FB:58:E0:70:C9:F5:DE:7A:86:2A:3F:62:22
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/QFs_s0Gk8PtY4HDJ9d56hio_YiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
Signature Algorithm: sha256WithRSAEncryption
81:99:be:0a:97:c0:f6:96:74:d8:4b:a3:37:18:d3:64:08:6c:
58:fe:34:eb:c1:32:81:63:c6:02:8f:34:e3:ae:54:c5:ff:93:
12:f7:5c:65:0e:4b:a6:04:10:bc:91:ce:4f:03:b3:17:af:ee:
75:3f:d7:ef:7d:07:70:53:c4:94:6e:ee:8e:aa:29:a4:1f:b1:
0d:4a:fa:d2:f5:72:bb:cb:fb:0c:24:2e:8f:af:95:f6:a6:0e:
34:87:c8:d5:6a:90:ae:ab:77:03:76:ab:d1:84:8a:09:60:41:
51:4e:31:b9:5f:a4:6e:bf:c6:cb:31:54:ae:2a:17:16:33:4d:
ef:7c:fc:0f:2d:bd:74:84:48:3c:5f:11:99:c8:d1:e6:27:c3:
5b:1b:89:46:a2:ce:0a:d0:37:ec:4e:c8:b6:c6:c4:61:25:93:
9a:4d:b9:5b:8b:1c:aa:31:e9:fd:3c:32:90:75:88:a2:30:83:
51:51:b8:6b:fc:51:6b:d0:47:bf:5c:1b:2e:50:17:38:f0:52:
8d:a9:38:ff:dd:c7:73:18:bd:a9:e4:83:55:df:54:c5:16:82:
ca:d0:e9:cc:57:02:2d:75:22:04:1b:c1:b9:85:7e:54:63:fb:
37:62:3c:d0:5a:58:93:16:5e:a1:17:37:5a:35:50:4c:52:da:
8f:21:f0:66
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEk4Xgd8fWE8KNL2P0qq/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDViM2ZiMzQxYTRmMGZiNThlMDcwYzlmNWRlN2E4NjJhM2Y2MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRSdmecJDyI6dAMn2d1Cpk159+at
MSiNIfsna3jm2bjURgFxNUllX6xYCfbik+JL3koSR+t64FgWDcMIZKm5rTm73Tjq
y7VRtYH0h+D9R7GnUD09uqYy6Qv4q54r4Fp9fAy2QYudXHil0P6pCpwF1C+V0aqC
7hRfPeVJWA/0QhXLuTp7jXQb0pVikM+VG3h5SKvLqQwf4KnJaT+XN0k/QSs0mr2F
K+FD/uPMItEaq/0JxvPpiy6OzIipXM6UzJ0bkYJE7QUBTTicr0ERprNNev7+nhJw
oWJLysq3rj99YRWYAvoOduZKKwrp8VRCEy9nq/cgbhgTwvgX1IxmFpLymQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEBbP7NBpPD7WOBwyfXeeoYqP2IiMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvUUZzX3MwR2s4UHRZNEhESjlkNTZoaW9fWWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUORAwQB
1DwQAwQA2cWoAwQA2cWrMA0GCSqGSIb3DQEBCwUAA4IBAQCBmb4Kl8D2lnTYS6M3
GNNkCGxY/jTrwTKBY8YCjzTjrlTF/5MS91xlDkumBBC8kc5PA7MXr+51P9fvfQdw
U8SUbu6OqimkH7ENSvrS9XK7y/sMJC6Pr5X2pg40h8jVapCuq3cDdqvRhIoJYEFR
TjG5X6Ruv8bLMVSuKhcWM03vfPwPLb10hEg8XxGZyNHmJ8NbG4lGos4K0DfsTsi2
xsRhJZOaTblbixyqMen9PDKQdYiiMINRUbhr/FFr0Ee/XBsuUBc48FKNqTj/3cdz
GL2p5INV31TFFoLK0OnMVwItdSIEG8G5hX5UY/s3YjzQWliTFl6hFzdaNVBMUtqP
IfBm
-----END CERTIFICATE-----
Generated at Sun May 19 23:13:36 2024 by rpki-client on console-ams.rpki-client.org