Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Qx40YYt3FAFQ1AqzkVLKAyTWWYk.roa
File: Qx40YYt3FAFQ1AqzkVLKAyTWWYk.roa (raw, json)
Hash identifier: F/pFv0Quh2PvJzmZG1VB0qNvRrLJKBQX9Fbm6Q/046Y=
Subject key identifier: 43:1E:34:61:8B:77:14:01:50:D4:0A:B3:91:52:CA:03:24:D6:59:89
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EC7F500FA7E182DF3DA9A7867B0B62BC7
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Qx40YYt3FAFQ1AqzkVLKAyTWWYk.roa
Signing time: Wed 10 Apr 2024 12:21:46 +0000
ROA not before: Wed 10 Apr 2024 12:21:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21479
IP address blocks: 80.68.0.0/21 maxlen: 21
80.68.8.0/22 maxlen: 22
80.68.12.0/24 maxlen: 24
80.68.13.0/24 maxlen: 24
80.254.96.0/19 maxlen: 19
83.221.192.0/19 maxlen: 19
87.117.0.0/19 maxlen: 19
87.117.36.0/22 maxlen: 22
87.117.40.0/21 maxlen: 21
93.178.96.0/22 maxlen: 22
93.178.104.0/22 maxlen: 22
93.178.126.0/23 maxlen: 23
109.172.64.0/24 maxlen: 24
109.172.65.0/24 maxlen: 24
109.172.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:f5:00:fa:7e:18:2d:f3:da:9a:78:67:b0:b6:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 10 12:21:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=431e34618b77140150d40ab39152ca0324d65989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:ee:de:db:cf:69:2e:ed:04:84:8d:44:ff:
a2:24:25:64:cd:27:e6:67:51:b2:f8:77:4b:c8:ef:
79:8a:13:c5:0f:3c:0f:7d:68:e7:2c:75:09:56:81:
b1:e2:95:5e:4d:de:a5:ec:e5:01:54:16:b8:c6:8b:
d5:27:e5:ac:b9:1b:0e:0a:f4:8f:29:ce:73:d6:d7:
50:52:94:ee:e2:cf:8e:74:bd:08:b3:a0:af:bb:59:
8c:d5:41:c3:8c:fc:a3:82:3e:bb:96:7e:33:41:e5:
aa:8c:be:71:bc:37:f4:b2:c2:47:20:ee:a4:e1:0d:
d1:bc:61:04:3b:8b:96:cc:8b:9a:ca:97:63:b6:16:
a5:f1:a4:1d:c4:45:11:12:68:a5:6a:65:37:21:62:
fd:fb:dc:9d:33:72:c3:fc:48:7e:e7:c5:a8:24:91:
96:f0:9b:53:33:7f:6f:3e:e9:ec:98:3b:b8:1c:b4:
6d:6c:c0:8b:56:ba:6d:8f:f2:58:eb:ac:98:3d:37:
29:4d:32:31:5f:9d:3c:75:6f:e7:8f:84:61:e7:3e:
a6:c0:1d:30:d5:e8:92:fc:9e:a8:b4:af:97:c6:23:
8e:0c:e3:b9:a0:8a:74:60:51:6f:c7:85:7d:dc:b4:
d9:23:5e:da:9e:52:08:7a:5c:01:1e:93:66:d7:e0:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:34:61:8B:77:14:01:50:D4:0A:B3:91:52:CA:03:24:D6:59:89
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Qx40YYt3FAFQ1AqzkVLKAyTWWYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.0.0-80.68.13.255
80.254.96.0/19
83.221.192.0/19
87.117.0.0/19
87.117.36.0-87.117.47.255
93.178.96.0/22
93.178.104.0/22
93.178.126.0/23
109.172.64.0-109.172.66.255
Signature Algorithm: sha256WithRSAEncryption
2a:f1:78:85:38:63:e6:1b:ce:f2:0d:ee:6e:6f:40:dd:77:7e:
bd:67:5f:3b:bd:5d:cf:15:57:7f:c1:15:23:f7:0b:7b:c7:ca:
8e:dd:f4:42:a4:22:ae:43:13:23:e8:79:32:2a:ee:f9:36:ac:
a5:e6:52:6c:b1:5e:21:15:96:cc:f5:af:84:33:6e:32:62:28:
cb:ca:b2:71:fa:7e:11:bd:a0:57:af:20:f9:c3:d1:16:e7:50:
d4:1f:aa:7b:2f:9d:95:b9:ae:03:7a:53:0f:ae:f7:e8:7e:a1:
ea:83:b9:a8:b0:dc:4b:c8:1b:4c:03:a9:13:cd:0c:72:58:d8:
cd:bc:58:42:e6:b1:2c:c6:b9:d2:15:20:89:96:52:af:a1:ba:
05:28:44:a8:74:b6:a8:e5:c8:40:40:64:8b:49:0b:9c:75:97:
56:2d:82:c6:b3:d5:a6:dc:f9:1b:00:d0:35:a6:32:e6:07:14:
1d:f2:8a:a7:86:69:23:d6:bd:0e:4f:dc:1d:74:f8:c2:b2:a0:
2e:53:af:84:31:c3:2c:72:3f:c3:f7:ee:95:57:27:cd:5a:92:
e1:51:f0:ed:1f:46:ff:bc:3d:f2:a1:a7:8b:7c:88:04:4c:0b:
a8:47:72:98:71:4e:3d:6e:49:77:9d:98:71:cb:89:66:62:c6:
96:32:23:ed
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAY7H9QD6fhgt89qaeGewtivHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDEwMTIyMTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFlMzQ2MThiNzcxNDAxNTBkNDBhYjM5MTUyY2EwMzI0ZDY1OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBLu3tvPaS7tBISNRP+iJCVkzSfm
Z1Gy+HdLyO95ihPFDzwPfWjnLHUJVoGx4pVeTd6l7OUBVBa4xovVJ+WsuRsOCvSP
Kc5z1tdQUpTu4s+OdL0Is6Cvu1mM1UHDjPyjgj67ln4zQeWqjL5xvDf0ssJHIO6k
4Q3RvGEEO4uWzIuaypdjthal8aQdxEUREmilamU3IWL9+9ydM3LD/Eh+58WoJJGW
8JtTM39vPunsmDu4HLRtbMCLVrptj/JY66yYPTcpTTIxX508dW/nj4Rh5z6mwB0w
1eiS/J6otK+XxiOODOO5oIp0YFFvx4V93LTZI17anlIIelwBHpNm1+BMSwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFEMeNGGLdxQBUNQKs5FSygMk1lmJMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvUXg0MFlZdDNGQUZRMUFxemtWTEtBeVRXV1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBTBAIAATBNMAsDAwJQRAME
AVBEDAMEBVD+YAMEBVPdwAMEBVd1ADAMAwQCV3UkAwQEV3UgAwQCXbJgAwQCXbJo
AwQBXbJ+MAwDBAZtrEADBABtrEIwDQYJKoZIhvcNAQELBQADggEBACrxeIU4Y+Yb
zvIN7m5vQN13fr1nXzu9Xc8VV3/BFSP3C3vHyo7d9EKkIq5DEyPoeTIq7vk2rKXm
UmyxXiEVlsz1r4QzbjJiKMvKsnH6fhG9oFevIPnD0RbnUNQfqnsvnZW5rgN6Uw+u
9+h+oeqDuaiw3EvIG0wDqRPNDHJY2M28WELmsSzGudIVIImWUq+hugUoRKh0tqjl
yEBAZItJC5x1l1Ytgsaz1abc+RsA0DWmMuYHFB3yiqeGaSPWvQ5P3B10+MKyoC5T
r4QxwyxyP8P37pVXJ81akuFR8O0fRv+8PfKhp4t8iARMC6hHcphxTj1uSXedmHHL
iWZixpYyI+0=
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:56:01 2024 by rpki-client on console-fra.rpki-client.org