Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/qdCJzRn9h1AO0aPQq61UhhhuZoY.roa
File: qdCJzRn9h1AO0aPQq61UhhhuZoY.roa (raw, json)
Hash identifier: ZidyMEetsQkkLnPLT6tvfnQYmU3K06ODkcY8u5S11YE=
Subject key identifier: A9:D0:89:CD:19:FD:87:50:0E:D1:A3:D0:AB:AD:54:86:18:6E:66:86
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 018CC64AEDECFF941F786AD7075557391AFA
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/qdCJzRn9h1AO0aPQq61UhhhuZoY.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203017
IP address blocks: 193.53.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ed:ec:ff:94:1f:78:6a:d7:07:55:57:39:1a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d089cd19fd87500ed1a3d0abad5486186e6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:5d:76:81:31:ec:b8:85:5c:ec:22:19:04:
69:10:28:14:d6:f0:70:1f:87:27:8e:02:69:a6:c1:
d3:10:39:0e:7f:22:f3:e0:b8:a3:31:72:15:02:73:
9e:9f:dc:a0:24:ea:e8:44:b0:79:74:f3:76:a4:d5:
17:03:03:f3:ec:ca:42:57:50:e3:e4:69:17:35:15:
e5:46:d2:12:48:94:87:93:43:b5:ca:46:5e:81:ed:
ba:d9:75:57:e9:91:c5:33:1d:11:81:df:ef:47:d4:
04:a2:70:37:ae:9e:42:22:d7:2c:4a:6e:1c:d4:fd:
3f:d6:56:bc:af:ed:61:3b:d0:4c:37:fd:95:09:5b:
26:d1:41:c9:23:d9:c2:34:36:06:ac:1f:62:8a:f6:
04:dd:20:ad:96:9b:70:4a:9f:ec:a3:1d:ee:1e:c9:
fb:25:77:df:40:be:aa:04:ae:ca:95:02:e4:9c:80:
2b:a6:c8:0f:f8:a6:88:0a:a2:a4:20:7d:7b:7b:d8:
de:47:de:62:e3:26:54:91:02:2b:ff:31:db:49:21:
2d:1b:99:94:e0:3c:0a:9c:99:07:8e:f2:b4:12:ba:
09:2b:81:d4:f1:64:d0:d7:d7:8e:0d:21:0f:ff:22:
89:11:35:be:39:f2:52:8c:dd:7e:18:d1:df:36:6e:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D0:89:CD:19:FD:87:50:0E:D1:A3:D0:AB:AD:54:86:18:6E:66:86
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/qdCJzRn9h1AO0aPQq61UhhhuZoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.23.0/24
Signature Algorithm: sha256WithRSAEncryption
34:92:41:40:7b:13:2a:c6:97:a6:94:da:ce:67:77:fd:ce:7b:
47:ab:68:51:a9:bd:75:91:fa:53:3b:b3:dc:c2:7b:e6:4f:1a:
ea:d3:57:54:5c:01:b7:10:d1:09:7b:25:5b:b7:9f:48:ad:d8:
1d:6c:95:be:d2:d9:45:b9:58:74:94:b2:fe:f8:93:29:9a:d5:
45:f7:3a:f9:b6:ea:87:9d:a2:b5:d1:b0:39:2f:33:b6:2f:28:
db:84:7f:fc:8f:80:1b:33:f0:17:8f:47:05:5b:63:11:ce:05:
2b:6c:9d:af:d7:30:38:31:08:f0:ef:72:ca:51:72:98:27:45:
dd:bf:af:68:31:0c:ae:c9:39:07:93:52:ea:da:c2:cd:91:2b:
aa:45:fa:db:eb:14:1e:e8:e2:55:5d:8d:1c:19:b9:74:17:20:
c3:97:68:53:75:bc:fa:65:7c:7d:e4:05:eb:8f:bf:58:b9:37:
3d:ae:ae:ff:de:bc:ad:dc:11:6d:2c:25:e2:72:51:c5:da:ad:
26:08:fc:12:cd:d5:1c:96:81:36:a7:75:78:9f:09:03:d8:a3:
fd:25:fd:0d:de:87:24:5f:01:25:ec:0a:9e:e2:01:1a:a8:a2:
02:47:ea:0c:f9:65:0f:13:89:73:c9:f5:01:5b:ce:1a:6c:92:
55:2d:05:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSu3s/5QfeGrXB1VXORr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjQwMTAxMTgzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWQwODljZDE5ZmQ4NzUwMGVkMWEzZDBhYmFkNTQ4NjE4NmU2Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghtddoEx7LiFXOwiGQRpECgU1vBw
H4cnjgJppsHTEDkOfyLz4LijMXIVAnOen9ygJOroRLB5dPN2pNUXAwPz7MpCV1Dj
5GkXNRXlRtISSJSHk0O1ykZege262XVX6ZHFMx0Rgd/vR9QEonA3rp5CItcsSm4c
1P0/1la8r+1hO9BMN/2VCVsm0UHJI9nCNDYGrB9iivYE3SCtlptwSp/sox3uHsn7
JXffQL6qBK7KlQLknIArpsgP+KaICqKkIH17e9jeR95i4yZUkQIr/zHbSSEtG5mU
4DwKnJkHjvK0EroJK4HU8WTQ19eODSEP/yKJETW+OfJSjN1+GNHfNm7lkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnQic0Z/YdQDtGj0KutVIYYbmaGMB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvcWRDSnpSbjloMUFPMGFQUXE2MVVoaGh1Wm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTUXMA0G
CSqGSIb3DQEBCwUAA4IBAQA0kkFAexMqxpemlNrOZ3f9zntHq2hRqb11kfpTO7Pc
wnvmTxrq01dUXAG3ENEJeyVbt59IrdgdbJW+0tlFuVh0lLL++JMpmtVF9zr5tuqH
naK10bA5LzO2LyjbhH/8j4AbM/AXj0cFW2MRzgUrbJ2v1zA4MQjw73LKUXKYJ0Xd
v69oMQyuyTkHk1Lq2sLNkSuqRfrb6xQe6OJVXY0cGbl0FyDDl2hTdbz6ZXx95AXr
j79YuTc9rq7/3ryt3BFtLCXiclHF2q0mCPwSzdUcloE2p3V4nwkD2KP9Jf0N3ock
XwEl7Aqe4gEaqKICR+oM+WUPE4lzyfUBW84abJJVLQXO
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:24 2024 by rpki-client on console-ams.rpki-client.org