Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/qdRMAqZVXzor_NykIgDB5YYcibc.roa
File: qdRMAqZVXzor_NykIgDB5YYcibc.roa (raw, json)
Hash identifier: k0waotgkWHBgPe/3vMkCLO8qLplgUaE41L6qFEeRIK8=
Subject key identifier: A9:D4:4C:02:A6:55:5F:3A:2B:FC:DC:A4:22:00:C1:E5:86:1C:89:B7
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 019061845639906BF690961C02D14DED9EB3
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/qdRMAqZVXzor_NykIgDB5YYcibc.roa
Signing time: Sat 29 Jun 2024 01:03:01 +0000
ROA not before: Sat 29 Jun 2024 01:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42198
IP address blocks: 31.132.36.0/22 maxlen: 24
193.30.32.0/22 maxlen: 24
2a0c:8540::/43 maxlen: 48
2a0c:8541::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:61:84:56:39:90:6b:f6:90:96:1c:02:d1:4d:ed:9e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Jun 29 01:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d44c02a6555f3a2bfcdca42200c1e5861c89b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:52:c9:74:ba:e4:1d:ac:00:03:8f:91:d6:
38:59:2d:66:f2:a1:66:1f:91:d6:84:0d:5e:d4:3b:
6f:d3:7e:76:eb:2d:6f:75:33:fe:2e:63:e3:d1:50:
28:3a:b3:39:66:be:73:83:c3:9e:da:76:f5:5a:ed:
09:7f:3a:d5:7b:77:c2:ad:20:aa:db:ee:a6:7d:be:
e4:5f:d9:ab:58:c8:1a:e9:37:13:4a:33:5c:fa:b6:
b9:e9:3c:54:04:0c:52:cf:2d:d5:7b:18:a2:42:79:
8a:a5:52:1c:21:a6:92:44:09:1d:df:bd:17:ae:d6:
cc:74:42:0b:97:1a:63:e9:b3:bf:d8:48:ac:a6:7e:
3d:93:0c:30:8f:7a:a2:7c:35:2b:08:3c:8f:4e:b6:
ca:2a:f1:da:31:2e:dd:a3:54:23:ad:07:30:24:5d:
20:56:2a:0e:b7:8f:8e:d8:03:99:e2:2c:83:22:9e:
c6:6b:13:5d:a9:9e:14:fe:be:58:aa:b6:1b:c8:03:
e8:f4:1f:fb:30:27:65:f6:08:0a:db:0c:29:11:17:
e4:7e:ae:d3:4a:d3:76:b9:a6:fb:c9:6f:a9:ba:10:
43:a7:27:2f:6d:20:8c:6d:0d:b8:0c:ee:56:32:d2:
13:e9:07:61:20:3a:3a:16:57:dd:6b:06:bf:b0:4c:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D4:4C:02:A6:55:5F:3A:2B:FC:DC:A4:22:00:C1:E5:86:1C:89:B7
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/qdRMAqZVXzor_NykIgDB5YYcibc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.36.0/22
193.30.32.0/22
IPv6:
2a0c:8540::/43
2a0c:8541::/32
Signature Algorithm: sha256WithRSAEncryption
6c:92:c6:bc:a1:11:eb:48:44:58:4d:3e:57:52:c1:79:af:40:
a8:89:4a:eb:2c:f9:a1:96:48:bd:4d:f6:55:03:67:8c:28:bf:
72:67:3c:20:3f:f9:1a:1b:6b:ee:0e:df:37:d5:96:e0:3b:0f:
1b:ce:d6:92:46:56:42:24:c0:46:fa:55:d8:5f:4e:81:f1:8a:
7f:0a:61:e7:cc:23:a1:7f:19:d9:a3:7c:64:48:68:a2:bf:6e:
ff:12:5d:d1:03:3d:dd:79:1e:87:57:1f:8d:7f:cd:2f:55:f2:
a3:ac:a2:da:80:bc:94:3b:b1:76:31:4c:26:a6:d2:c3:24:66:
53:70:84:66:32:08:9c:b5:d3:04:e9:e2:0f:bf:01:ab:85:74:
41:1b:24:f2:c9:0b:9f:66:5e:ac:06:62:c9:6a:52:b6:4f:2b:
9d:91:07:66:a2:23:2a:49:96:fc:56:fe:2a:e5:00:9a:03:ae:
be:b4:ce:19:71:4d:2f:2b:5f:57:60:57:5d:22:27:10:51:a3:
83:0b:03:55:7e:ff:97:7e:3f:84:14:ac:3a:a5:8d:5a:43:0a:
43:f5:32:a6:1e:58:fb:63:bb:03:7a:f1:fa:20:ba:66:a0:1a:
77:25:8e:c9:ce:f1:a3:4f:2c:a3:c9:2f:4f:1e:4a:45:7e:2f:
0a:95:78:ff
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZBhhFY5kGv2kJYcAtFN7Z6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjQwNjI5MDEwMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQ0NGMwMmE2NTU1ZjNhMmJmY2RjYTQyMjAwYzFlNTg2MWM4OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QtSyXS65B2sAAOPkdY4WS1m8qFm
H5HWhA1e1Dtv03526y1vdTP+LmPj0VAoOrM5Zr5zg8Oe2nb1Wu0JfzrVe3fCrSCq
2+6mfb7kX9mrWMga6TcTSjNc+ra56TxUBAxSzy3VexiiQnmKpVIcIaaSRAkd370X
rtbMdEILlxpj6bO/2Eispn49kwwwj3qifDUrCDyPTrbKKvHaMS7do1QjrQcwJF0g
VioOt4+O2AOZ4iyDIp7GaxNdqZ4U/r5YqrYbyAPo9B/7MCdl9ggK2wwpERfkfq7T
StN2uab7yW+puhBDpycvbSCMbQ24DO5WMtIT6QdhIDo6Flfdawa/sEx/SwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKnUTAKmVV86K/zcpCIAweWGHIm3MB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvcWRSTUFxWlZYem9yX055a0lnREI1WVljaWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCH4QkAwQC
wR4gMBYEAgACMBADBwUqDIVAAAADBQAqDIVBMA0GCSqGSIb3DQEBCwUAA4IBAQBs
ksa8oRHrSERYTT5XUsF5r0CoiUrrLPmhlki9TfZVA2eMKL9yZzwgP/kaG2vuDt83
1ZbgOw8bztaSRlZCJMBG+lXYX06B8Yp/CmHnzCOhfxnZo3xkSGiiv27/El3RAz3d
eR6HVx+Nf80vVfKjrKLagLyUO7F2MUwmptLDJGZTcIRmMgictdME6eIPvwGrhXRB
GyTyyQufZl6sBmLJalK2TyudkQdmoiMqSZb8Vv4q5QCaA66+tM4ZcU0vK19XYFdd
IicQUaODCwNVfv+Xfj+EFKw6pY1aQwpD9TKmHlj7Y7sDevH6ILpmoBp3JY7JzvGj
TyyjyS9PHkpFfi8KlXj/
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:24:47 2024 by rpki-client on console-fra.rpki-client.org