Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/QZk5THhj_54mwvOcIXlibi-sSq4.roa
File: QZk5THhj_54mwvOcIXlibi-sSq4.roa (raw, json)
Hash identifier: 26jonnwQ7jr7XOBqoDSEAnOyg2b+nTaIwQXgnNWKwD0=
Subject key identifier: 41:99:39:4C:78:63:FF:9E:26:C2:F3:9C:21:79:62:6E:2F:AC:4A:AE
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 018CCA99ADB43D5EAC55A7492C3B337F83F8
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/QZk5THhj_54mwvOcIXlibi-sSq4.roa
Signing time: Tue 02 Jan 2024 14:35:18 +0000
ROA not before: Tue 02 Jan 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200453
IP address blocks: 46.46.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ad:b4:3d:5e:ac:55:a7:49:2c:3b:33:7f:83:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 2 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4199394c7863ff9e26c2f39c2179626e2fac4aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:b7:81:aa:a4:a7:f8:06:5e:49:49:a1:91:
3a:95:3f:77:08:e5:23:51:b4:7b:f2:e1:60:dc:3c:
72:af:7f:f5:f9:d5:a6:db:92:38:ac:88:9a:6f:97:
2f:5f:8e:1a:17:a5:8b:e5:93:b2:bf:b8:3c:8e:82:
0c:3e:9c:65:f8:9e:c0:c8:1a:1c:55:53:07:3e:f8:
ad:11:2c:f4:10:35:ed:fa:c8:1c:b2:67:2e:1f:23:
cb:2e:3b:e4:35:ee:6e:1f:e0:75:6e:e8:92:60:14:
46:9b:36:c6:02:f0:28:bc:e7:de:6e:a1:c2:15:44:
3e:38:67:5f:2d:d5:4d:95:cf:7f:04:5b:8c:cc:aa:
bd:21:2a:70:30:d6:ab:5f:57:0d:50:02:52:a4:13:
07:cf:63:44:81:b5:6d:84:7b:0a:44:c3:5f:ef:8e:
79:2b:bf:d2:72:e4:c4:06:33:3a:c7:a2:d0:72:0a:
64:03:2f:c4:61:5a:2c:76:02:bf:cc:74:b6:bf:97:
41:51:fb:22:10:41:e7:a7:25:53:3c:a8:67:81:14:
dd:5a:ca:44:ff:55:9c:71:d7:94:87:c9:e2:ec:9f:
04:41:a8:e0:aa:e4:b0:0e:41:f3:88:4f:10:3a:5f:
fb:3e:dc:e3:28:1d:01:95:c3:10:ab:4f:ca:45:fe:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:39:4C:78:63:FF:9E:26:C2:F3:9C:21:79:62:6E:2F:AC:4A:AE
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/QZk5THhj_54mwvOcIXlibi-sSq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:96:43:32:66:3e:5d:03:85:94:fc:ce:49:c5:89:a7:1d:44:
b7:e7:0f:6c:8f:be:2f:aa:f0:eb:d1:c5:71:5c:28:11:aa:9a:
fd:5a:bf:0b:f6:9f:a4:60:86:97:f6:48:69:3f:9d:6a:dd:86:
41:85:eb:5c:a7:89:f6:38:0f:72:36:21:c2:0e:9d:c0:43:5c:
e7:b9:52:63:c0:c9:95:d4:44:c3:0f:da:ce:9c:10:c4:d5:94:
94:4c:1f:39:2f:0a:11:c7:5c:80:db:ac:61:84:4b:6b:fa:68:
43:9d:0d:5e:0d:57:be:35:5d:e5:bb:de:09:aa:ef:2c:1d:33:
01:ce:7f:b4:a4:c0:78:ea:07:a3:c0:5d:c9:0b:4a:69:44:ed:
59:27:e8:96:a9:97:ec:bf:19:b9:db:c7:54:1b:34:6c:14:67:
da:ea:92:47:a4:58:89:08:e4:2b:73:77:ec:0c:08:74:f4:3c:
0b:5b:58:05:4b:b2:68:f7:7f:5b:2f:c9:35:f6:f4:a9:5f:2d:
55:41:df:27:6c:32:f7:11:16:44:80:59:13:ad:9e:58:44:db:
9c:28:af:d8:94:2a:05:48:71:50:27:f5:38:a1:3f:ad:e7:ce:
28:60:79:cb:91:29:ed:69:4b:7e:df:a2:d1:60:78:97:cd:e9:
9d:4e:fb:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKma20PV6sVadJLDszf4P4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjQwMTAyMTQzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTk5Mzk0Yzc4NjNmZjllMjZjMmYzOWMyMTc5NjI2ZTJmYWM0YWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY63gaqkp/gGXklJoZE6lT93COUj
UbR78uFg3Dxyr3/1+dWm25I4rIiab5cvX44aF6WL5ZOyv7g8joIMPpxl+J7AyBoc
VVMHPvitESz0EDXt+sgcsmcuHyPLLjvkNe5uH+B1buiSYBRGmzbGAvAovOfebqHC
FUQ+OGdfLdVNlc9/BFuMzKq9ISpwMNarX1cNUAJSpBMHz2NEgbVthHsKRMNf7455
K7/ScuTEBjM6x6LQcgpkAy/EYVosdgK/zHS2v5dBUfsiEEHnpyVTPKhngRTdWspE
/1WccdeUh8ni7J8EQajgquSwDkHziE8QOl/7PtzjKB0BlcMQq0/KRf6XMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGZOUx4Y/+eJsLznCF5Ym4vrEquMB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvUVprNVRIaGpfNTRtd3ZPY0lYbGliaS1zU3E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALi6+MA0G
CSqGSIb3DQEBCwUAA4IBAQDClkMyZj5dA4WU/M5JxYmnHUS35w9sj74vqvDr0cVx
XCgRqpr9Wr8L9p+kYIaX9khpP51q3YZBhetcp4n2OA9yNiHCDp3AQ1znuVJjwMmV
1ETDD9rOnBDE1ZSUTB85LwoRx1yA26xhhEtr+mhDnQ1eDVe+NV3lu94Jqu8sHTMB
zn+0pMB46gejwF3JC0ppRO1ZJ+iWqZfsvxm528dUGzRsFGfa6pJHpFiJCOQrc3fs
DAh09DwLW1gFS7Jo939bL8k19vSpXy1VQd8nbDL3ERZEgFkTrZ5YRNucKK/YlCoF
SHFQJ/U4oT+t584oYHnLkSntaUt+36LRYHiXzemdTvvK
-----END CERTIFICATE-----
Generated at Sat May 18 06:43:40 2024 by rpki-client on console-ams.rpki-client.org