Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/QWprQh08OMlgnpAelM05447RhmU.roa
File: QWprQh08OMlgnpAelM05447RhmU.roa (raw, json)
Hash identifier: Azfz7/uI98Dj2v8aH5KWFbACsbIanG/bUwJ4MvrCoec=
Subject key identifier: 41:6A:6B:42:1D:3C:38:C9:60:9E:90:1E:94:CD:39:E3:8E:D1:86:65
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 018CC3493CD4166B40386EB26D13FD5C30F0
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/QWprQh08OMlgnpAelM05447RhmU.roa
Signing time: Mon 01 Jan 2024 04:30:05 +0000
ROA not before: Mon 01 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39358
IP address blocks: 195.114.107.0/24 maxlen: 24
195.114.106.0/23 maxlen: 24
195.114.106.0/24 maxlen: 24
194.126.231.0/24 maxlen: 24
2001:67c:3e9::/48 maxlen: 48
2001:67c:3e8::/48 maxlen: 48
2001:67c:3e8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3c:d4:16:6b:40:38:6e:b2:6d:13:fd:5c:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=416a6b421d3c38c9609e901e94cd39e38ed18665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:2e:47:da:1e:83:b3:28:7d:54:39:7a:50:
6f:2b:84:41:14:a9:64:d3:48:29:c2:dc:e4:e5:74:
ad:2d:b8:ca:e1:e6:b9:61:77:54:f0:47:a4:32:f1:
b4:b7:f8:b1:b3:f2:f2:84:96:af:b0:4d:72:ac:3b:
1a:1f:17:04:9d:8a:f6:0d:65:6d:54:63:ad:71:5c:
d0:96:a3:6b:c9:2c:bf:c8:09:df:c1:5b:ba:30:be:
87:6c:98:23:62:14:23:0d:12:eb:d2:b1:10:34:ed:
26:bd:6d:c0:67:22:b6:1f:5e:e5:e7:93:28:ec:73:
f4:40:d4:61:9a:ac:84:1a:7c:5a:73:b3:d4:26:85:
f2:c1:5c:17:c1:e0:cd:b2:8d:80:5e:f4:41:23:83:
8f:04:5c:c1:43:58:68:60:d3:ba:38:98:08:ea:f2:
45:36:7b:ac:d3:a8:60:1b:f4:0c:a8:01:69:b2:27:
0b:c7:cb:1c:15:10:59:29:4f:79:ed:e2:77:ca:60:
35:19:a1:09:97:85:c1:46:9b:b1:76:44:4e:6f:ac:
80:e4:d0:6f:74:39:4f:37:12:48:15:8c:a8:6a:a1:
cd:8f:41:bf:7c:2f:52:14:3a:e6:4c:57:1a:9e:3d:
c1:51:11:98:8b:00:01:88:fd:bf:4b:07:1d:3b:d3:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:6B:42:1D:3C:38:C9:60:9E:90:1E:94:CD:39:E3:8E:D1:86:65
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/QWprQh08OMlgnpAelM05447RhmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.231.0/24
195.114.106.0/23
IPv6:
2001:67c:3e8::/47
Signature Algorithm: sha256WithRSAEncryption
2b:69:34:6f:3d:2c:55:b3:31:4a:ea:70:00:93:01:5d:b2:98:
58:e5:ca:9a:11:7a:18:a6:1d:68:a9:5d:f9:f5:a0:02:fe:24:
e7:45:7d:a2:5b:3d:f2:33:9b:4b:b1:45:ba:86:f1:3f:b9:ff:
d2:5b:e6:cd:f7:f6:f7:ef:77:c8:5a:35:20:db:f3:e0:86:3a:
8d:60:27:2b:ab:32:5e:1e:22:8d:92:ed:f4:51:51:92:47:b8:
70:3a:f4:b8:38:2a:3d:49:71:d3:bf:c2:32:d1:81:69:00:a9:
8b:4f:ab:fd:0f:38:55:be:0e:ba:56:66:a3:35:98:1a:e3:ce:
60:f7:a6:4f:7e:1b:87:6a:71:b0:c9:03:b9:19:01:88:ae:9d:
88:44:e1:84:c3:5a:63:71:30:2e:5e:98:40:8f:cc:b5:56:78:
4f:cf:b5:62:8a:f2:33:d5:6d:49:aa:07:ce:9b:31:10:a4:df:
66:f1:65:29:c2:f5:92:ae:90:df:9d:d3:ac:93:b1:8c:27:e5:
58:d5:8c:ce:96:42:a3:b9:a4:9f:40:8f:ae:9b:96:31:7f:40:
3d:b7:31:8f:61:0e:b1:17:2e:9e:50:b7:b4:bb:d3:9d:b2:e8:
25:5d:95:78:96:c8:8d:42:ed:8c:fa:92:19:48:d1:45:1f:f7:
cb:10:f5:51
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzDSTzUFmtAOG6ybRP9XDDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw
ZjgwNDkwHhcNMjQwMTAxMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTZhNmI0MjFkM2MzOGM5NjA5ZTkwMWU5NGNkMzllMzhlZDE4NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1kuR9oeg7MofVQ5elBvK4RBFKlk
00gpwtzk5XStLbjK4ea5YXdU8EekMvG0t/ixs/LyhJavsE1yrDsaHxcEnYr2DWVt
VGOtcVzQlqNrySy/yAnfwVu6ML6HbJgjYhQjDRLr0rEQNO0mvW3AZyK2H17l55Mo
7HP0QNRhmqyEGnxac7PUJoXywVwXweDNso2AXvRBI4OPBFzBQ1hoYNO6OJgI6vJF
Nnus06hgG/QMqAFpsicLx8scFRBZKU957eJ3ymA1GaEJl4XBRpuxdkROb6yA5NBv
dDlPNxJIFYyoaqHNj0G/fC9SFDrmTFcanj3BURGYiwABiP2/SwcdO9NWwwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEFqa0IdPDjJYJ6QHpTNOeOO0YZlMB8GA1UdIwQY
MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt
MDU5MjQ1M2RmN2QyLzEvUVdwclFoMDhPTWxnbnBBZWxNMDU0NDdSaG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy
LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwn7nAwQB
w3JqMA8EAgACMAkDBwEgAQZ8A+gwDQYJKoZIhvcNAQELBQADggEBACtpNG89LFWz
MUrqcACTAV2ymFjlypoRehimHWipXfn1oAL+JOdFfaJbPfIzm0uxRbqG8T+5/9Jb
5s339vfvd8haNSDb8+CGOo1gJyurMl4eIo2S7fRRUZJHuHA69Lg4Kj1JcdO/wjLR
gWkAqYtPq/0POFW+DrpWZqM1mBrjzmD3pk9+G4dqcbDJA7kZAYiunYhE4YTDWmNx
MC5emECPzLVWeE/PtWKK8jPVbUmqB86bMRCk32bxZSnC9ZKukN+d06yTsYwn5VjV
jM6WQqO5pJ9Aj66bljF/QD23MY9hDrEXLp5Qt7S7052y6CVdlXiWyI1C7Yz6khlI
0UUf98sQ9VE=
-----END CERTIFICATE-----
Generated at Wed Nov 27 04:51:31 2024 by rpki-client on console-ams.rpki-client.org