Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/qWj1lixQS_dOpQe0u23TprWVCsk.roa
File: qWj1lixQS_dOpQe0u23TprWVCsk.roa (raw, json)
Hash identifier: CQVKtI7zMt/dRaac/fM1mLh6HwLZzNsgWbyDT90FgCA=
Subject key identifier: A9:68:F5:96:2C:50:4B:F7:4E:A5:07:B4:BB:6D:D3:A6:B5:95:0A:C9
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 018CC80193DB5E61FBB0D36662E61032D4D1
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/qWj1lixQS_dOpQe0u23TprWVCsk.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41096
IP address blocks: 176.98.82.0/24 maxlen: 24
176.98.84.0/24 maxlen: 24
176.98.83.0/24 maxlen: 24
176.98.79.0/24 maxlen: 24
176.98.81.0/24 maxlen: 24
176.98.80.0/24 maxlen: 24
176.98.85.0/24 maxlen: 24
176.98.89.0/24 maxlen: 24
176.98.91.0/24 maxlen: 24
176.98.90.0/24 maxlen: 24
176.98.86.0/24 maxlen: 24
176.98.88.0/24 maxlen: 24
176.98.87.0/24 maxlen: 24
176.98.93.0/24 maxlen: 24
176.98.92.0/24 maxlen: 24
176.98.95.0/24 maxlen: 24
176.98.94.0/24 maxlen: 24
195.189.104.0/24 maxlen: 24
195.189.104.0/22 maxlen: 22
195.189.105.0/24 maxlen: 24
195.189.107.0/24 maxlen: 24
195.189.106.0/24 maxlen: 24
176.98.64.0/19 maxlen: 19
176.98.64.0/24 maxlen: 24
176.98.69.0/24 maxlen: 24
176.98.68.0/24 maxlen: 24
176.98.70.0/24 maxlen: 24
176.98.65.0/24 maxlen: 24
176.98.67.0/24 maxlen: 24
176.98.66.0/24 maxlen: 24
176.98.71.0/24 maxlen: 24
176.98.78.0/24 maxlen: 24
176.98.76.0/24 maxlen: 24
176.98.75.0/24 maxlen: 24
176.98.77.0/24 maxlen: 24
176.98.72.0/24 maxlen: 24
176.98.74.0/24 maxlen: 24
176.98.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:93:db:5e:61:fb:b0:d3:66:62:e6:10:32:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a968f5962c504bf74ea507b4bb6dd3a6b5950ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d3:7e:10:a5:6a:50:27:ef:76:26:74:41:21:
4b:bd:e9:80:a5:56:25:e3:dc:a9:a8:ef:bb:2e:88:
99:14:7a:ab:f7:88:68:59:e6:95:aa:42:79:1c:da:
79:0a:d6:38:75:30:3f:21:80:43:76:9d:ad:d3:59:
ca:ac:ca:f6:c8:71:71:2c:5e:ed:52:5a:84:c7:4a:
76:9e:f7:eb:67:62:47:ae:42:ba:b6:45:4d:9e:f1:
a6:61:5d:39:81:62:fb:11:09:00:36:97:7c:79:2a:
ad:b8:8e:a4:ba:37:e5:c3:65:0c:29:bf:1d:2b:29:
20:82:3e:55:3e:db:79:ba:08:62:f3:14:f1:c8:bb:
6c:73:98:90:23:43:c1:f8:c6:28:41:95:e9:fe:13:
31:24:5b:05:69:35:23:ad:5d:04:bb:80:3c:b3:7e:
90:be:ba:50:ac:28:f2:07:eb:5c:a7:ff:17:13:81:
99:1d:25:0c:42:0c:82:db:a0:37:9f:8d:05:93:d5:
17:a4:ae:a6:0c:5e:0f:aa:d8:48:f6:36:bb:91:e2:
97:71:5d:a6:d3:31:17:f0:3f:b3:18:2e:26:da:d3:
e2:d4:62:19:4b:8b:ce:ba:e7:cd:31:8a:9b:23:5f:
cc:94:b6:bb:39:94:ad:25:56:5b:3f:8b:cb:7e:9c:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:F5:96:2C:50:4B:F7:4E:A5:07:B4:BB:6D:D3:A6:B5:95:0A:C9
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/qWj1lixQS_dOpQe0u23TprWVCsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.64.0/19
195.189.104.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:46:29:4e:dd:25:de:46:5d:f2:09:7b:77:b6:0c:2a:19:e0:
22:24:66:86:8b:9b:c9:49:db:eb:16:4b:8f:55:cd:53:af:79:
95:da:44:76:cb:b7:d5:ea:d4:be:23:e5:8f:bd:3b:3f:ca:4c:
78:b5:1e:9e:08:2c:a0:25:54:e5:26:1e:ea:6b:ec:41:d7:1d:
97:72:39:ea:11:99:eb:df:a0:4e:fc:60:ab:fe:61:49:46:fa:
ef:6c:de:c1:ee:b3:b0:cf:8d:e0:9d:eb:45:a9:11:6e:9b:f9:
ed:bc:d1:5f:17:9d:92:30:07:39:4d:64:52:f6:b7:b6:41:72:
f8:73:65:53:cb:2a:fd:ad:e6:66:4c:01:08:fd:2f:f8:d8:af:
39:ab:29:3c:cb:f5:91:87:4f:fe:6c:35:b3:70:7e:e2:20:6e:
69:f3:8b:c1:23:79:31:10:35:d3:bc:8e:6c:b8:87:57:f0:03:
4d:61:22:2e:76:ba:09:89:a7:b4:91:fb:ca:a5:9d:48:d5:ab:
a7:ff:75:6b:b9:55:ed:84:12:31:58:c5:c6:d0:5e:0a:71:3e:
e2:d3:e7:fd:9c:40:07:13:91:35:d3:b8:5f:cb:e0:23:e7:c5:
05:71:ce:4e:8c:79:05:e6:79:08:a8:37:3f:b6:f2:76:74:77:
f8:4f:7f:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAZPbXmH7sNNmYuYQMtTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDVkZmRkZTRkNjc5YzcxMWNjZTA2ZWRmNDAzNmNhNGU1
Y2MxMDMwHhcNMjQwMTAyMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTY4ZjU5NjJjNTA0YmY3NGVhNTA3YjRiYjZkZDNhNmI1OTUwYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNN+EKVqUCfvdiZ0QSFLvemApVYl
49ypqO+7LoiZFHqr94hoWeaVqkJ5HNp5CtY4dTA/IYBDdp2t01nKrMr2yHFxLF7t
UlqEx0p2nvfrZ2JHrkK6tkVNnvGmYV05gWL7EQkANpd8eSqtuI6kujflw2UMKb8d
Kykggj5VPtt5ughi8xTxyLtsc5iQI0PB+MYoQZXp/hMxJFsFaTUjrV0Eu4A8s36Q
vrpQrCjyB+tcp/8XE4GZHSUMQgyC26A3n40Fk9UXpK6mDF4PqthI9ja7keKXcV2m
0zEX8D+zGC4m2tPi1GIZS4vOuufNMYqbI1/MlLa7OZStJVZbP4vLfpxsfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKlo9ZYsUEv3TqUHtLtt06a1lQrJMB8GA1UdIwQY
MBaAFPDV393k1nnHEczgbt9ANspOXMEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjct
ZTc0ZDQ0OTBhZjZjLzEvcVdqMWxpeFFTX2RPcFFlMHUyM1RwcldWQ3NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mMmVjZjgtN2M1Yy00NWFiLTgzZjctZTc0ZDQ0OTBhZjZj
LzEvOE5YZjNlVFdlY2NSek9CdTMwQTJ5azVjd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFsGJAAwQC
w71oMA0GCSqGSIb3DQEBCwUAA4IBAQBbRilO3SXeRl3yCXt3tgwqGeAiJGaGi5vJ
SdvrFkuPVc1Tr3mV2kR2y7fV6tS+I+WPvTs/ykx4tR6eCCygJVTlJh7qa+xB1x2X
cjnqEZnr36BO/GCr/mFJRvrvbN7B7rOwz43gnetFqRFum/ntvNFfF52SMAc5TWRS
9re2QXL4c2VTyyr9reZmTAEI/S/42K85qyk8y/WRh0/+bDWzcH7iIG5p84vBI3kx
EDXTvI5suIdX8ANNYSIudroJiae0kfvKpZ1I1aun/3VruVXthBIxWMXG0F4KcT7i
0+f9nEAHE5E107hfy+Aj58UFcc5OjHkF5nkIqDc/tvJ2dHf4T3/v
-----END CERTIFICATE-----
Generated at Wed May 15 16:42:11 2024 by rpki-client on console-fra.rpki-client.org