Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/QLFSNVPPHNwk4AUJejw6lLuWIYs.roa
File: QLFSNVPPHNwk4AUJejw6lLuWIYs.roa (raw, json)
Hash identifier: 78WFOD9VBRSswSf51K2ZDbHRDmQx4Ey/OhB74wcECt8=
Subject key identifier: 40:B1:52:35:53:CF:1C:DC:24:E0:05:09:7A:3C:3A:94:BB:96:21:8B
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 018EC1CF00D9AFA493D8ADF58746D8785148
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/QLFSNVPPHNwk4AUJejw6lLuWIYs.roa
Signing time: Tue 09 Apr 2024 07:42:32 +0000
ROA not before: Tue 09 Apr 2024 07:42:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28685
IP address blocks: 46.231.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c1:cf:00:d9:af:a4:93:d8:ad:f5:87:46:d8:78:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Apr 9 07:42:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40b1523553cf1cdc24e005097a3c3a94bb96218b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:65:b9:d6:fd:5b:7c:52:de:d5:3a:30:27:
99:49:85:a9:59:48:2f:6f:20:cd:d0:52:6e:54:28:
e0:02:4d:5e:10:99:26:c6:8f:e8:ca:ae:1c:84:84:
c9:6a:28:8d:53:fd:c3:f4:1f:99:52:fd:0f:1e:d1:
81:f7:0b:83:4d:18:25:7e:8d:38:29:d4:01:28:06:
31:f9:c7:7a:0c:43:58:c7:ea:af:51:8c:06:a9:bd:
29:0a:7b:43:5a:89:4f:7b:34:8b:f3:56:ed:af:7f:
6d:eb:9c:53:af:76:f9:d4:a8:93:c8:f5:e5:bf:db:
2b:5c:0b:5f:96:08:56:40:d5:ed:d8:90:8c:16:ba:
dd:94:d6:41:1f:75:25:7f:77:3b:30:15:1b:9d:5a:
9a:ba:d1:7e:1e:e0:02:52:c0:32:b4:69:c9:10:0d:
14:b7:f0:63:55:e6:a5:3a:95:4f:c9:8c:01:ff:92:
4c:87:30:e5:d6:ad:a9:9b:62:45:dc:da:7f:dc:ab:
f1:6a:8d:41:74:5d:23:57:45:3c:26:99:c9:eb:ca:
5e:17:1a:2a:db:bc:1d:08:c2:0a:ff:eb:01:bc:10:
3a:b1:af:23:6a:b1:07:59:a9:95:20:b9:48:59:ff:
5a:00:77:66:72:57:db:89:7c:80:0a:b1:2c:63:e4:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:52:35:53:CF:1C:DC:24:E0:05:09:7A:3C:3A:94:BB:96:21:8B
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/QLFSNVPPHNwk4AUJejw6lLuWIYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.255.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4a:14:ab:71:4a:7a:ce:f5:73:fe:27:ed:80:1b:d8:73:11:
6f:0e:70:90:6f:b7:b2:40:c9:4f:94:84:78:bd:d3:73:a6:48:
57:a6:8a:a4:63:40:ee:56:eb:f9:ea:a1:e4:17:05:54:d4:c1:
78:a1:2e:0b:55:3a:0b:d7:37:21:52:a5:7d:e7:54:6c:38:25:
d6:ae:c1:da:f6:cf:1e:93:fc:97:99:32:2b:b6:ea:df:a7:08:
c0:8b:5b:77:d2:7c:17:4a:f0:7b:73:bc:e7:18:57:f0:00:aa:
f2:46:fc:8a:fc:05:2d:6c:47:38:d1:18:2f:d2:d3:07:24:30:
50:3c:ea:d6:03:1a:06:89:69:c4:56:f2:6e:b6:7f:51:e4:d4:
f1:43:d5:03:20:c2:df:0a:78:59:4f:b3:dd:aa:67:8f:8b:10:
15:8e:94:9a:95:34:36:9c:0c:6d:70:a3:ba:bd:ef:39:00:b3:
61:c8:05:e7:4d:89:72:04:c5:3d:fc:45:b3:91:8b:83:6f:77:
7e:c9:39:99:23:3e:e4:49:8c:3a:46:92:82:28:5c:3e:34:4f:
bb:43:9e:ed:59:ff:11:d5:28:21:1c:ab:08:50:7c:e5:35:90:
ec:9d:15:c3:2a:03:00:62:9b:b9:16:d0:ec:0d:49:f3:f0:7b:
48:39:ee:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7BzwDZr6ST2K31h0bYeFFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1
NzUxMTMwHhcNMjQwNDA5MDc0MjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGIxNTIzNTUzY2YxY2RjMjRlMDA1MDk3YTNjM2E5NGJiOTYyMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvZludb9W3xS3tU6MCeZSYWpWUgv
byDN0FJuVCjgAk1eEJkmxo/oyq4chITJaiiNU/3D9B+ZUv0PHtGB9wuDTRglfo04
KdQBKAYx+cd6DENYx+qvUYwGqb0pCntDWolPezSL81btr39t65xTr3b51KiTyPXl
v9srXAtflghWQNXt2JCMFrrdlNZBH3Ulf3c7MBUbnVqautF+HuACUsAytGnJEA0U
t/BjVealOpVPyYwB/5JMhzDl1q2pm2JF3Np/3Kvxao1BdF0jV0U8JpnJ68peFxoq
27wdCMIK/+sBvBA6sa8jarEHWamVILlIWf9aAHdmclfbiXyACrEsY+TtkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECxUjVTzxzcJOAFCXo8OpS7liGLMB8GA1UdIwQY
MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt
Y2E1OTVlMzRkNWFjLzEvUUxGU05WUFBITndrNEFVSmVqdzZsTHVXSVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj
LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuf/MA0G
CSqGSIb3DQEBCwUAA4IBAQBlShSrcUp6zvVz/iftgBvYcxFvDnCQb7eyQMlPlIR4
vdNzpkhXpoqkY0DuVuv56qHkFwVU1MF4oS4LVToL1zchUqV951RsOCXWrsHa9s8e
k/yXmTIrturfpwjAi1t30nwXSvB7c7znGFfwAKryRvyK/AUtbEc40Rgv0tMHJDBQ
POrWAxoGiWnEVvJutn9R5NTxQ9UDIMLfCnhZT7PdqmePixAVjpSalTQ2nAxtcKO6
ve85ALNhyAXnTYlyBMU9/EWzkYuDb3d+yTmZIz7kSYw6RpKCKFw+NE+7Q57tWf8R
1SghHKsIUHzlNZDsnRXDKgMAYpu5FtDsDUnz8HtIOe4B
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:40:22 2024 by rpki-client on console-fra.rpki-client.org