Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9nMWmf4WFDeLCpTdbD7YHPc90KU.roa
File: 9nMWmf4WFDeLCpTdbD7YHPc90KU.roa (raw, json)
Hash identifier: AW/wsFIL9lxFTPX+JIlXfTGUvKLJvERzBnXFOaO/ELM=
Subject key identifier: F6:73:16:99:FE:16:14:37:8B:0A:94:DD:6C:3E:D8:1C:F7:3D:D0:A5
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2EB70A5E40FBAD51AE6C2A46E081D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9nMWmf4WFDeLCpTdbD7YHPc90KU.roa
Signing time: Thu 02 Jan 2025 01:48:13 +0000
ROA not before: Thu 02 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34702
IP address blocks: 46.19.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:eb:70:a5:e4:0f:ba:d5:1a:e6:c2:a4:6e:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6731699fe1614378b0a94dd6c3ed81cf73dd0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:a3:27:0a:82:22:9d:71:59:8e:6a:d1:27:
1f:57:1a:15:44:b8:44:39:52:b1:f9:0e:62:d3:18:
a0:88:8d:6b:aa:2d:10:c3:d4:c2:d5:31:4b:44:18:
82:b3:90:c0:92:37:9e:95:f8:02:4f:bb:fe:56:4e:
70:0b:e6:de:52:22:2c:cc:83:8f:c2:60:b2:7e:73:
1d:dc:63:76:78:b3:0c:18:28:27:b6:d0:41:f3:12:
22:1f:55:29:81:de:17:5d:98:65:f8:02:dc:a4:3a:
75:aa:25:0e:0f:d9:d3:1a:45:51:c7:70:91:d1:e8:
38:e1:6b:c0:a1:60:b2:fc:ff:b1:37:d9:82:c2:4a:
fb:e9:43:b5:ce:7d:09:2d:8f:aa:e9:f4:55:b6:f7:
94:51:bd:53:4f:cd:de:79:18:5a:ec:90:44:58:b3:
80:01:5d:36:ec:28:2f:8a:72:37:08:a8:25:8b:bf:
b2:a3:0b:6e:be:ce:b8:98:28:0e:ac:f1:56:bd:85:
19:5f:c9:f0:b6:2a:df:b3:6b:46:e7:6b:70:d7:ca:
3f:50:fb:98:32:35:c8:4e:db:76:1a:69:17:94:01:
f2:f0:24:7f:05:de:d7:42:c2:08:cb:5b:6b:91:9d:
8a:b5:58:23:5a:f4:a3:cb:7f:e0:45:63:ef:26:97:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:16:99:FE:16:14:37:8B:0A:94:DD:6C:3E:D8:1C:F7:3D:D0:A5
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9nMWmf4WFDeLCpTdbD7YHPc90KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:aa:6b:94:9e:89:2f:e3:f5:ba:4e:fa:65:7e:99:4a:9f:83:
e5:12:01:6c:52:cd:ac:58:f5:0a:9b:73:bc:f2:a8:83:e2:ec:
15:38:30:d5:73:a1:8b:62:5f:2c:21:0d:4c:48:d0:fe:7a:5f:
1c:70:24:60:e3:2d:11:21:20:da:b5:88:77:c7:77:10:e3:62:
31:1c:ce:b2:d6:50:e6:e0:39:48:a5:7d:04:e5:0a:ea:59:b1:
17:ae:78:61:8b:7e:d9:1e:9a:b7:e2:fd:67:d9:4e:0e:9e:11:
6b:c1:90:ce:ce:8b:44:9d:12:3a:28:05:71:4d:47:07:71:4a:
92:85:62:1b:01:db:f9:aa:36:13:2a:53:ac:dc:b0:ab:2f:87:
08:0c:8b:b1:c3:d8:99:c1:06:86:76:61:d6:b1:37:22:3d:e4:
0b:88:26:a7:de:6d:e6:51:bf:b3:d3:21:d3:4e:f0:2f:53:84:
51:e4:2d:88:2a:c0:8e:dc:cf:2f:26:e1:a8:3b:8e:e6:c0:fa:
6a:bd:73:8f:2a:6a:25:4e:be:65:2b:6c:fc:ac:4f:dc:7d:30:
06:ca:c6:3f:42:a6:50:65:8a:14:10:19:e2:55:d2:6c:b7:b7:
7e:76:9c:a3:8e:ab:5f:5d:eb:a4:3b:2e:07:37:85:db:4d:89:
1f:b3:6c:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksutwpeQPutUa5sKkbggdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjUwMTAyMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjczMTY5OWZlMTYxNDM3OGIwYTk0ZGQ2YzNlZDgxY2Y3M2RkMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumSjJwqCIp1xWY5q0ScfVxoVRLhE
OVKx+Q5i0xigiI1rqi0Qw9TC1TFLRBiCs5DAkjeelfgCT7v+Vk5wC+beUiIszIOP
wmCyfnMd3GN2eLMMGCgnttBB8xIiH1Upgd4XXZhl+ALcpDp1qiUOD9nTGkVRx3CR
0eg44WvAoWCy/P+xN9mCwkr76UO1zn0JLY+q6fRVtveUUb1TT83eeRha7JBEWLOA
AV027CgvinI3CKgli7+yowtuvs64mCgOrPFWvYUZX8nwtirfs2tG52tw18o/UPuY
MjXITtt2GmkXlAHy8CR/Bd7XQsIIy1trkZ2KtVgjWvSjy3/gRWPvJpeCzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZzFpn+FhQ3iwqU3Ww+2Bz3PdClMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvOW5NV21mNFdGRGVMQ3BUZGJEN1lIUGM5MEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhPPMA0G
CSqGSIb3DQEBCwUAA4IBAQCOqmuUnokv4/W6TvplfplKn4PlEgFsUs2sWPUKm3O8
8qiD4uwVODDVc6GLYl8sIQ1MSND+el8ccCRg4y0RISDatYh3x3cQ42IxHM6y1lDm
4DlIpX0E5QrqWbEXrnhhi37ZHpq34v1n2U4OnhFrwZDOzotEnRI6KAVxTUcHcUqS
hWIbAdv5qjYTKlOs3LCrL4cIDIuxw9iZwQaGdmHWsTciPeQLiCan3m3mUb+z0yHT
TvAvU4RR5C2IKsCO3M8vJuGoO47mwPpqvXOPKmolTr5lK2z8rE/cfTAGysY/QqZQ
ZYoUEBniVdJst7d+dpyjjqtfXeukOy4HN4XbTYkfs2xM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:26 2025 by rpki-client