Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QKj0bwIvQOUHGFTSemOrVI7iC_8.roa
File: QKj0bwIvQOUHGFTSemOrVI7iC_8.roa (raw, json)
Hash identifier: Z64MhYCgxnsYnTs1qjGcdXBB1K5Qolvqt/ZZm2Na6Rw=
Subject key identifier: 40:A8:F4:6F:02:2F:40:E5:07:18:54:D2:7A:63:AB:54:8E:E2:0B:FF
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D85B02C94EAEEAD2A39A7A39697F28
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QKj0bwIvQOUHGFTSemOrVI7iC_8.roa
Signing time: Thu 02 Jan 2025 11:48:20 +0000
ROA not before: Thu 02 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 46.37.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:5b:02:c9:4e:ae:ea:d2:a3:9a:7a:39:69:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a8f46f022f40e5071854d27a63ab548ee20bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:6c:2a:2a:11:17:57:f2:0a:d9:cf:6e:34:
5b:79:f9:31:5d:7d:88:e9:cf:e4:98:87:7f:2e:e0:
2f:1d:7b:65:28:9e:0a:70:00:fa:b7:ac:d8:6c:21:
13:4f:ee:0c:30:06:5c:17:e9:58:97:67:e7:3e:c0:
c6:1e:e0:c3:7f:cc:e0:c8:fe:84:3b:01:6d:0c:2d:
2e:2f:f4:46:da:99:f4:4b:de:69:a4:91:c8:60:e0:
62:ce:55:00:79:69:98:5b:f5:b3:4b:11:11:5b:8e:
d5:6b:f5:e3:34:96:21:54:62:3c:69:fd:0e:3e:77:
ec:50:94:bf:37:76:b9:81:24:f6:7f:ea:ae:3a:ef:
58:6c:e6:73:d7:d7:eb:5e:22:bc:d5:df:df:83:61:
5b:db:94:91:4b:37:9c:33:79:24:ae:ae:82:52:a8:
8a:73:1b:a6:cc:12:4e:b9:04:e8:8a:4d:82:68:96:
57:a5:cc:8c:38:a1:86:04:7b:a4:04:53:0f:ba:81:
cd:62:8f:f3:ee:2c:0f:be:d6:73:d8:ba:42:6a:59:
38:ed:1f:72:e6:31:f9:90:c8:9b:0e:15:59:a1:a1:
1a:ec:7d:e5:f3:49:d9:d4:46:7f:4b:fe:c6:0e:17:
ed:b2:d5:d0:de:3d:15:b0:31:a7:45:e1:ac:cb:c6:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:F4:6F:02:2F:40:E5:07:18:54:D2:7A:63:AB:54:8E:E2:0B:FF
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/QKj0bwIvQOUHGFTSemOrVI7iC_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0f:da:68:98:de:f6:5f:25:12:a7:70:70:f1:e5:83:bb:a0:
a1:d0:c6:d3:76:99:e5:72:db:d0:e6:99:64:02:04:7e:a1:50:
f6:c0:de:e8:09:9a:70:94:cf:36:e3:b2:d4:f5:8d:28:26:cc:
d5:89:33:66:09:5c:16:f0:40:e7:fe:92:e3:f8:73:3a:7f:6a:
2d:ac:6b:a6:2b:72:f8:e7:22:43:b7:f8:36:25:03:eb:5f:2d:
05:3c:7d:95:01:86:17:04:53:8a:f0:ab:20:14:86:5f:69:92:
1a:cd:e6:60:36:bf:86:e7:cd:89:56:9a:4b:00:de:95:bf:f2:
6f:d2:3f:30:a6:99:f9:a2:d9:96:38:66:ce:fc:23:7f:75:73:
2a:97:e7:69:6f:ef:4c:64:f1:56:65:1f:dc:1d:23:62:73:63:
83:72:b1:e0:44:cb:44:04:24:92:22:dc:07:9b:1f:2b:7e:bd:
b9:83:0a:53:a0:31:1c:e6:c4:e7:0c:a5:61:60:cc:eb:b8:aa:
06:a1:72:1d:8a:52:dc:b3:66:b4:4e:1c:40:47:03:e9:30:ac:
c8:5a:01:93:9f:9e:e8:66:13:41:3a:c5:8e:64:23:39:f6:aa:
cf:79:c4:fe:10:dc:5f:9d:ba:37:ce:c2:bd:46:0d:f4:bf:09:
f1:fc:18:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2FsCyU6u6tKjmno5aX8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGE4ZjQ2ZjAyMmY0MGU1MDcxODU0ZDI3YTYzYWI1NDhlZTIwYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XFsKioRF1fyCtnPbjRbefkxXX2I
6c/kmId/LuAvHXtlKJ4KcAD6t6zYbCETT+4MMAZcF+lYl2fnPsDGHuDDf8zgyP6E
OwFtDC0uL/RG2pn0S95ppJHIYOBizlUAeWmYW/WzSxERW47Va/XjNJYhVGI8af0O
PnfsUJS/N3a5gST2f+quOu9YbOZz19frXiK81d/fg2Fb25SRSzecM3kkrq6CUqiK
cxumzBJOuQToik2CaJZXpcyMOKGGBHukBFMPuoHNYo/z7iwPvtZz2LpCalk47R9y
5jH5kMibDhVZoaEa7H3l80nZ1EZ/S/7GDhftstXQ3j0VsDGnReGsy8b5CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFECo9G8CL0DlBxhU0npjq1SO4gv/MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvUUtqMGJ3SXZRT1VIR0ZUU2VtT3JWSTdpQ184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVyMA0G
CSqGSIb3DQEBCwUAA4IBAQBcD9pomN72XyUSp3Bw8eWDu6Ch0MbTdpnlctvQ5plk
AgR+oVD2wN7oCZpwlM8247LU9Y0oJszViTNmCVwW8EDn/pLj+HM6f2otrGumK3L4
5yJDt/g2JQPrXy0FPH2VAYYXBFOK8KsgFIZfaZIazeZgNr+G582JVppLAN6Vv/Jv
0j8wppn5otmWOGbO/CN/dXMql+dpb+9MZPFWZR/cHSNic2ODcrHgRMtEBCSSItwH
mx8rfr25gwpToDEc5sTnDKVhYMzruKoGoXIdilLcs2a0ThxARwPpMKzIWgGTn57o
ZhNBOsWOZCM59qrPecT+ENxfnbo3zsK9Rg30vwnx/Bht
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:34 2025 by rpki-client