Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/X3Q71_Akqfn1AutEVf7vkgYT5oc.roa
File: X3Q71_Akqfn1AutEVf7vkgYT5oc.roa (raw, json)
Hash identifier: 1sb1sUdPFsm4IlT1ai1hAsxyGwqbEPuZ3W3TZnL/vOQ=
Subject key identifier: 5F:74:3B:D7:F0:24:A9:F9:F5:02:EB:44:55:FE:EF:92:06:13:E6:87
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 018CC3491C4A3A2EDC0C27FDB7686446D23D
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/X3Q71_Akqfn1AutEVf7vkgYT5oc.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213146
IP address blocks: 94.158.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1c:4a:3a:2e:dc:0c:27:fd:b7:68:64:46:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f743bd7f024a9f9f502eb4455feef920613e687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:0e:b6:e9:4f:75:b6:17:21:40:0e:40:06:
1a:9b:f0:5d:1d:4f:0f:ef:31:27:d7:dc:39:5a:55:
2b:07:e2:58:07:d7:00:7d:11:1b:e9:4c:f5:ae:62:
d8:64:2c:0f:dd:7e:eb:4e:e5:de:4b:4e:e9:4b:00:
19:96:df:49:c9:b8:46:72:7f:bb:b7:42:6b:92:f5:
45:db:1d:bc:25:a9:3b:a7:57:97:60:eb:c8:cc:c7:
5b:94:0d:6a:af:83:45:64:f4:08:97:df:9c:82:bf:
29:5b:c5:d5:48:16:3a:8e:7a:67:24:09:ec:2b:68:
cc:00:c8:1c:43:7f:4a:27:16:47:b2:75:88:e8:24:
d6:64:39:1e:05:f4:64:3d:90:6e:a2:99:47:f4:4f:
71:49:1f:e8:b0:11:94:22:ff:16:ee:6a:ee:63:a8:
47:43:82:c5:96:04:47:6c:42:41:c4:24:57:e8:91:
cf:75:fa:48:90:93:4d:bb:28:eb:73:0a:b6:6c:73:
36:83:e3:ef:60:11:0f:c7:16:5c:96:98:27:6b:d2:
52:be:7a:47:33:32:61:dd:e8:cf:08:ae:4a:72:c3:
f1:f0:4d:94:52:5b:75:20:f8:a9:17:8c:f5:0a:0b:
c4:55:fe:2a:76:16:dd:a4:d7:02:38:80:34:12:76:
4f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:3B:D7:F0:24:A9:F9:F5:02:EB:44:55:FE:EF:92:06:13:E6:87
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/X3Q71_Akqfn1AutEVf7vkgYT5oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:93:bd:d5:3f:d1:c3:69:a6:f8:f3:e6:37:61:14:c4:75:d8:
46:eb:62:a2:5a:5a:c2:cc:07:1c:8f:b1:5c:f3:6a:e1:2e:24:
be:f9:78:f4:1c:84:23:22:72:9c:73:39:7e:0c:fd:64:87:24:
ab:2f:15:8c:2d:46:50:99:a5:a7:b6:6b:03:4c:c5:36:a1:55:
02:53:7d:3a:e6:b0:e5:0c:c3:79:64:00:07:e7:59:61:95:35:
16:39:d9:b2:16:8a:fb:59:62:f6:e0:67:c3:0b:3f:9b:e0:96:
f7:91:50:88:9d:00:09:97:64:9a:d6:05:40:c3:ad:d1:66:fe:
eb:09:89:27:3c:fa:85:c1:3a:48:f6:78:18:ed:a1:4b:f3:ae:
a2:c2:77:a9:18:41:df:e2:68:34:22:74:7f:6f:9a:7c:a9:8e:
7c:8a:4c:ce:b9:af:03:a6:67:db:f1:5b:d0:e2:ce:36:c8:a3:
fd:5e:9e:31:b6:20:3e:3a:2e:b4:26:a8:29:7e:9a:70:b5:29:
37:5a:69:fa:9d:5a:bf:99:69:c7:5d:f6:78:bc:45:54:87:b6:
01:5d:0a:71:7d:b6:15:8f:a5:09:a7:25:46:98:af:55:1b:f7:
d8:88:0a:67:b8:4a:4b:28:a3:33:aa:aa:2a:59:20:16:00:a8:
06:ec:2a:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSRxKOi7cDCf9t2hkRtI9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYzZlODc3MDlhZTlkMDQ0Nzk0MGYyM2Q3NTRkZjhiYTgx
NzViMGQwHhcNMjQwMTAxMDQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjc0M2JkN2YwMjRhOWY5ZjUwMmViNDQ1NWZlZWY5MjA2MTNlNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfQOtulPdbYXIUAOQAYam/BdHU8P
7zEn19w5WlUrB+JYB9cAfREb6Uz1rmLYZCwP3X7rTuXeS07pSwAZlt9JybhGcn+7
t0JrkvVF2x28Jak7p1eXYOvIzMdblA1qr4NFZPQIl9+cgr8pW8XVSBY6jnpnJAns
K2jMAMgcQ39KJxZHsnWI6CTWZDkeBfRkPZBuoplH9E9xSR/osBGUIv8W7mruY6hH
Q4LFlgRHbEJBxCRX6JHPdfpIkJNNuyjrcwq2bHM2g+PvYBEPxxZclpgna9JSvnpH
MzJh3ejPCK5KcsPx8E2UUlt1IPipF4z1CgvEVf4qdhbdpNcCOIA0EnZPyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF90O9fwJKn59QLrRFX+75IGE+aHMB8GA1UdIwQY
MBaAFJ/G6HcJrp0ER5QPI9dU34uoF1sNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQt
ODhhNzRkMDM5ZjdmLzEvWDNRNzFfQWtxZm4xQXV0RVZmN3ZrZ1lUNW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQtODhhNzRkMDM5Zjdm
LzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXp7fMA0G
CSqGSIb3DQEBCwUAA4IBAQCbk73VP9HDaab48+Y3YRTEddhG62KiWlrCzAccj7Fc
82rhLiS++Xj0HIQjInKcczl+DP1khySrLxWMLUZQmaWntmsDTMU2oVUCU3065rDl
DMN5ZAAH51lhlTUWOdmyFor7WWL24GfDCz+b4Jb3kVCInQAJl2Sa1gVAw63RZv7r
CYknPPqFwTpI9ngY7aFL866iwnepGEHf4mg0InR/b5p8qY58ikzOua8Dpmfb8VvQ
4s42yKP9Xp4xtiA+Oi60JqgpfppwtSk3Wmn6nVq/mWnHXfZ4vEVUh7YBXQpxfbYV
j6UJpyVGmK9VG/fYiApnuEpLKKMzqqoqWSAWAKgG7CoJ
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:45:41 2024 by rpki-client on console-ams.rpki-client.org