Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/0xQvjuoWhziCewvlKMKdeMZCcJs.roa
File: 0xQvjuoWhziCewvlKMKdeMZCcJs.roa (raw, json)
Hash identifier: QINLyrSdDMRy1xP5bKPZHxop+1UxPPtKD/rIRytHL48=
Subject key identifier: D3:14:2F:8E:EA:16:87:38:82:7B:0B:E5:28:C2:9D:78:C6:42:70:9B
Certificate issuer: /CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Certificate serial: 018CC56EEA2F40C5A2D2CB3A78F1123906A3
Authority key identifier: 14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/0xQvjuoWhziCewvlKMKdeMZCcJs.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59455
IP address blocks: 185.23.52.0/22 maxlen: 24
185.33.192.0/22 maxlen: 22
46.17.208.0/21 maxlen: 22
185.148.88.0/22 maxlen: 22
2a04:2340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ea:2f:40:c5:a2:d2:cb:3a:78:f1:12:39:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf00dff8063231bd99676899eabeaba33bc5d9
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3142f8eea168738827b0be528c29d78c642709b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:ff:0c:d3:d2:31:e3:c4:b4:5e:95:e8:10:
4e:1c:1f:b7:b0:47:06:8c:72:e9:7a:c2:32:67:68:
de:40:20:d3:97:7c:76:15:e5:fe:eb:df:ef:b0:9f:
6e:42:c7:e1:21:34:b5:55:97:22:27:d4:9a:23:c4:
e4:49:ae:68:12:7b:51:2f:b8:9e:6d:72:dd:1a:e9:
e6:e3:95:be:27:bc:8a:5b:d2:38:ab:85:8c:e5:42:
a1:6d:20:e7:57:49:99:4f:c0:1a:f8:44:87:10:fe:
6a:6c:69:4e:f4:10:be:91:b8:af:d7:af:82:47:81:
5d:35:b6:bb:81:82:79:ee:79:33:b1:34:ef:96:37:
1a:ec:37:ef:d0:59:db:bf:0a:91:bf:21:3b:06:e4:
fc:c8:67:db:1e:2c:42:d8:e1:4f:dd:00:cd:cd:84:
34:e9:fe:49:99:2f:cc:17:c8:2e:b2:c3:18:50:6e:
94:0a:8c:c2:ef:62:75:94:a1:35:b0:f5:96:eb:7f:
31:21:13:fe:10:e6:3e:0c:5f:dd:2d:c2:4d:8e:6d:
cf:23:5f:72:23:25:2c:37:d4:78:9d:ab:81:7f:81:
46:e4:f5:f1:9c:b2:cb:2f:11:71:cc:3e:c8:b0:02:
bf:48:95:93:8a:b2:24:8e:d8:c7:45:b3:c8:6f:6c:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:14:2F:8E:EA:16:87:38:82:7B:0B:E5:28:C2:9D:78:C6:42:70:9B
X509v3 Authority Key Identifier:
keyid:14:BF:00:DF:F8:06:32:31:BD:99:67:68:99:EA:BE:AB:A3:3B:C5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL8A3_gGMjG9mWdomeq-q6M7xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/0xQvjuoWhziCewvlKMKdeMZCcJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/996c72-b4a9-4058-bdf8-bd2e77cd4793/1/FL8A3_gGMjG9mWdomeq-q6M7xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.208.0/21
185.23.52.0/22
185.33.192.0/22
185.148.88.0/22
IPv6:
2a04:2340::/29
Signature Algorithm: sha256WithRSAEncryption
64:cf:6e:c5:ce:43:33:5d:55:ce:4b:f2:9e:ff:fe:c3:85:98:
db:04:3c:4e:2d:2f:fd:13:19:f7:8a:51:5c:11:ef:78:e5:9f:
2b:da:51:23:cf:46:c2:62:72:c4:ba:5d:03:9a:7f:c6:5e:94:
ad:e2:37:eb:8b:ea:80:24:c0:4e:63:90:da:69:23:de:c9:8c:
88:73:e4:1b:8e:f3:9c:a7:7a:39:9f:65:81:4c:d4:e6:8d:67:
81:5a:55:48:64:f3:23:09:cb:3a:84:31:fd:d9:ab:0c:3f:ab:
92:66:10:90:ae:bb:bc:ec:6f:26:be:5f:3e:25:7c:50:69:fe:
49:65:d3:e7:a4:a1:fd:88:bd:41:7e:8e:76:9e:06:b1:90:db:
cf:3c:06:22:e3:72:48:b1:f4:f6:a9:f7:b9:48:4d:be:be:e3:
f4:23:37:c3:26:df:f7:7a:d3:87:da:38:73:d8:2c:40:83:57:
d6:1b:e6:9a:fb:bc:38:9e:8d:bc:a3:fb:bf:75:f3:41:81:a0:
a8:e4:ba:c8:87:9c:25:c4:50:05:e2:bc:6d:9e:e9:ad:16:85:
ef:c5:69:6a:95:a3:ae:74:dd:fe:2c:8c:6c:a2:da:ed:5a:31:
a2:57:11:8a:c2:ca:10:12:30:79:1d:c9:b8:e7:42:bc:3f:57:
15:42:4b:16
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzFbuovQMWi0ss6ePESOQajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmYwMGRmZjgwNjMyMzFiZDk5Njc2ODk5ZWFiZWFiYTMz
YmM1ZDkwHhcNMjQwMTAxMTQzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzE0MmY4ZWVhMTY4NzM4ODI3YjBiZTUyOGMyOWQ3OGM2NDI3MDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM7/DNPSMePEtF6V6BBOHB+3sEcG
jHLpesIyZ2jeQCDTl3x2FeX+69/vsJ9uQsfhITS1VZciJ9SaI8TkSa5oEntRL7ie
bXLdGunm45W+J7yKW9I4q4WM5UKhbSDnV0mZT8Aa+ESHEP5qbGlO9BC+kbiv16+C
R4FdNba7gYJ57nkzsTTvljca7Dfv0FnbvwqRvyE7BuT8yGfbHixC2OFP3QDNzYQ0
6f5JmS/MF8gussMYUG6UCozC72J1lKE1sPWW638xIRP+EOY+DF/dLcJNjm3PI19y
IyUsN9R4nauBf4FG5PXxnLLLLxFxzD7IsAK/SJWTirIkjtjHRbPIb2ybuQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNMUL47qFoc4gnsL5SjCnXjGQnCbMB8GA1UdIwQY
MBaAFBS/AN/4BjIxvZlnaJnqvqujO8XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgt
YmQyZTc3Y2Q0NzkzLzEvMHhRdmp1b1doemlDZXd2bEtNS2RlTVpDY0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS85OTZjNzItYjRhOS00MDU4LWJkZjgtYmQyZTc3Y2Q0Nzkz
LzEvRkw4QTNfZ0dNakc5bVdkb21lcS1xNk03eGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhHQAwQC
uRc0AwQCuSHAAwQCuZRYMA0EAgACMAcDBQMqBCNAMA0GCSqGSIb3DQEBCwUAA4IB
AQBkz27FzkMzXVXOS/Ke//7DhZjbBDxOLS/9Exn3ilFcEe945Z8r2lEjz0bCYnLE
ul0Dmn/GXpSt4jfri+qAJMBOY5DaaSPeyYyIc+QbjvOcp3o5n2WBTNTmjWeBWlVI
ZPMjCcs6hDH92asMP6uSZhCQrru87G8mvl8+JXxQaf5JZdPnpKH9iL1Bfo52ngax
kNvPPAYi43JIsfT2qfe5SE2+vuP0IzfDJt/3etOH2jhz2CxAg1fWG+aa+7w4no28
o/u/dfNBgaCo5LrIh5wlxFAF4rxtnumtFoXvxWlqlaOudN3+LIxsotrtWjGiVxGK
wsoQEjB5Hcm450K8P1cVQksW
-----END CERTIFICATE-----
Generated at Fri May 10 01:39:17 2024 by rpki-client on console-ams.rpki-client.org