Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/qCf5YcCSDHgJKzIHWdx7AFOjisI.roa
File: qCf5YcCSDHgJKzIHWdx7AFOjisI.roa (raw, json)
Hash identifier: lr/HI1nevayoN0HDvs6MrShFe24xZmH7LFSbnKLwkUA=
Subject key identifier: A8:27:F9:61:C0:92:0C:78:09:2B:32:07:59:DC:7B:00:53:A3:8A:C2
Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial: 018CC6B923F8354B22ED358AFC2AABF13A26
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/qCf5YcCSDHgJKzIHWdx7AFOjisI.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44837
IP address blocks: 195.66.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:23:f8:35:4b:22:ed:35:8a:fc:2a:ab:f1:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a827f961c0920c78092b320759dc7b0053a38ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:75:38:e0:76:09:ad:75:8e:ff:ef:87:8c:
de:47:e7:c2:2a:dd:a6:9a:59:2c:6d:7c:ff:9e:c5:
f4:6d:64:56:58:90:d6:69:1b:d6:c3:ca:f5:d3:4a:
68:74:a4:44:8f:54:e2:38:95:69:bc:18:56:84:9e:
b1:4b:13:12:e1:0d:36:a2:30:5e:83:9f:58:8d:17:
c4:3f:1f:3f:95:9e:70:b7:d4:a9:21:78:f6:cc:d4:
7e:5e:7e:31:a5:f8:90:39:5d:ea:d2:c2:6e:f4:db:
0c:78:ba:e8:04:86:c2:37:e8:75:31:cb:1b:6c:08:
4b:2c:5a:d6:1c:29:d7:64:ba:ce:86:00:2c:85:e7:
4b:00:20:a2:90:56:9d:55:af:96:9a:1a:be:60:4e:
48:c6:99:9f:6b:c8:b0:12:39:bb:6a:57:c7:9b:2f:
d5:44:73:84:a4:1d:90:46:a3:fd:38:b9:1d:ad:e9:
18:a2:27:52:c7:36:38:48:7f:9b:63:db:36:e1:7a:
b7:a5:de:c8:de:4c:95:2f:d2:7d:3e:ac:ab:eb:2f:
82:a6:0c:ae:ea:06:4a:7a:77:6b:9b:9c:d6:2c:3b:
38:10:72:2a:b0:89:f5:9a:71:04:44:12:87:11:f2:
3c:8e:21:51:cb:09:86:6f:90:8f:de:a9:b5:fd:39:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:F9:61:C0:92:0C:78:09:2B:32:07:59:DC:7B:00:53:A3:8A:C2
X509v3 Authority Key Identifier:
keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/qCf5YcCSDHgJKzIHWdx7AFOjisI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:63:ab:3f:10:a0:c6:8a:71:ec:0b:90:44:a9:1a:9a:b4:98:
4e:eb:37:41:78:0d:87:91:72:bc:e6:54:38:d3:b5:40:10:71:
eb:47:b1:c5:19:c6:00:90:e4:e0:7b:91:a9:a1:84:ca:64:7d:
56:84:c7:47:d8:f7:fe:51:00:61:bb:c2:54:53:e7:58:62:e1:
a9:81:b4:2c:ff:0f:b7:d3:3c:11:8a:6e:da:42:60:ed:d1:aa:
70:a6:d1:8c:92:6f:10:93:76:28:42:6c:82:ed:4e:6c:02:6d:
0c:b9:ce:60:ad:a1:e8:1a:96:59:37:70:e5:65:b8:fc:dc:2d:
c8:f2:24:74:8e:9c:2d:e4:a1:f4:2a:b1:84:67:44:bc:c3:87:
d7:67:60:dd:05:ba:ee:ec:dd:d8:33:da:fa:54:08:58:2a:29:
67:71:ed:85:8e:98:cc:33:ef:76:5c:a0:df:57:c7:5d:7b:d1:
99:3d:bd:e1:ba:c4:00:11:7a:b4:ff:b3:f2:f6:7d:e5:d8:38:
e9:72:a2:3f:60:1e:a2:0a:35:4c:cb:df:0e:af:2b:36:57:09:
86:8a:03:2d:ee:7e:c0:88:ed:18:9d:34:c4:d6:7e:fe:37:e9:
2d:39:7a:5a:95:58:df:49:57:68:f4:91:c1:4b:96:7d:22:b3:
0b:d9:be:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSP4NUsi7TWK/Cqr8TomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYWVlNGE4MWZmMzYwZmUwMGMzYTFmMGRhZTMwZTI2ZTEy
ODA5NDUwHhcNMjQwMTAxMjAzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODI3Zjk2MWMwOTIwYzc4MDkyYjMyMDc1OWRjN2IwMDUzYTM4YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2t1OOB2Ca11jv/vh4zeR+fCKt2m
mlksbXz/nsX0bWRWWJDWaRvWw8r100podKREj1TiOJVpvBhWhJ6xSxMS4Q02ojBe
g59YjRfEPx8/lZ5wt9SpIXj2zNR+Xn4xpfiQOV3q0sJu9NsMeLroBIbCN+h1Mcsb
bAhLLFrWHCnXZLrOhgAshedLACCikFadVa+Wmhq+YE5Ixpmfa8iwEjm7alfHmy/V
RHOEpB2QRqP9OLkdrekYoidSxzY4SH+bY9s24Xq3pd7I3kyVL9J9Pqyr6y+Cpgyu
6gZKendrm5zWLDs4EHIqsIn1mnEERBKHEfI8jiFRywmGb5CP3qm1/TnPSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgn+WHAkgx4CSsyB1ncewBTo4rCMB8GA1UdIwQY
MBaAFL2u5Kgf82D+AMOh8NrjDibhKAlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMt
MjcwYzhiNWEwOTIzLzEvcUNmNVljQ1NESGdKS3pJSFdkeDdBRk9qaXNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMtMjcwYzhiNWEwOTIz
LzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JpMA0G
CSqGSIb3DQEBCwUAA4IBAQAaY6s/EKDGinHsC5BEqRqatJhO6zdBeA2HkXK85lQ4
07VAEHHrR7HFGcYAkOTge5GpoYTKZH1WhMdH2Pf+UQBhu8JUU+dYYuGpgbQs/w+3
0zwRim7aQmDt0apwptGMkm8Qk3YoQmyC7U5sAm0Muc5graHoGpZZN3DlZbj83C3I
8iR0jpwt5KH0KrGEZ0S8w4fXZ2DdBbru7N3YM9r6VAhYKilnce2FjpjMM+92XKDf
V8dde9GZPb3husQAEXq0/7Py9n3l2DjpcqI/YB6iCjVMy98Orys2VwmGigMt7n7A
iO0YnTTE1n7+N+ktOXpalVjfSVdo9JHBS5Z9IrML2b4t
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:23:13 2024 by rpki-client on console-fra.rpki-client.org