Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/auY12-MrRi2wR3bTpQwxQspFIVw.roa
File: auY12-MrRi2wR3bTpQwxQspFIVw.roa (raw, json)
Hash identifier: GygqCzTpljP9gH52WE/8suilQfBp5fksgT7xduyoz8I=
Subject key identifier: 6A:E6:35:DB:E3:2B:46:2D:B0:47:76:D3:A5:0C:31:42:CA:45:21:5C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E385F3FC2700427A61B2D62789CFA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/auY12-MrRi2wR3bTpQwxQspFIVw.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60522
IP address blocks: 194.62.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:38:5f:3f:c2:70:04:27:a6:1b:2d:62:78:9c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae635dbe32b462db04776d3a50c3142ca45215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:0c:ac:7f:1d:aa:a5:56:64:f2:79:0d:60:
5d:54:6e:17:22:4a:fa:53:b8:08:b5:5d:c0:41:92:
92:66:5b:f1:34:72:60:6d:f3:8b:a5:e3:4d:26:b1:
de:5d:1e:20:af:d2:21:da:47:0b:2e:f0:c4:bf:f8:
04:8a:82:20:c6:f3:52:5a:5a:ed:d5:63:c1:6e:9b:
e1:e7:87:b8:18:2d:f4:93:4a:24:61:10:aa:90:2b:
30:15:fe:7d:fc:16:00:e6:57:92:ac:4b:05:e6:7f:
5e:61:c1:7e:dc:58:9e:0b:33:0d:95:4d:5c:60:df:
f9:cb:c4:81:2d:27:f3:ab:19:16:d5:5e:bd:4d:68:
3e:58:d6:24:9f:30:16:d6:99:a5:a7:a2:76:c8:d0:
66:12:0e:f2:f2:fa:23:de:0f:3c:1a:ef:c2:80:22:
85:90:bd:ff:08:34:6e:a1:5c:3f:5f:3b:94:dc:08:
7e:f4:89:c2:e3:fe:c9:f7:2d:41:4f:00:10:ce:ca:
b0:d0:cf:ab:f0:80:1c:df:cb:1e:90:e6:2a:a6:cb:
e2:21:87:37:75:80:54:c9:49:40:a8:46:ef:68:e7:
40:1e:f6:1c:a7:74:85:46:c1:89:5c:e3:cc:31:a0:
59:4d:77:40:38:c9:35:b4:e0:03:4e:2c:9b:38:50:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E6:35:DB:E3:2B:46:2D:B0:47:76:D3:A5:0C:31:42:CA:45:21:5C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/auY12-MrRi2wR3bTpQwxQspFIVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.248.0/22
Signature Algorithm: sha256WithRSAEncryption
67:57:92:2e:69:28:6e:49:ed:99:a8:48:19:b9:7e:37:d9:02:
f8:80:64:e5:4b:2b:a3:ca:16:41:9d:69:bf:10:9b:56:bb:f6:
65:40:26:06:67:d8:9b:ab:65:ae:5d:c5:5a:a5:45:29:33:72:
bb:19:9d:23:8b:66:db:93:fd:80:f7:76:7e:b7:f3:83:e3:ca:
2a:0a:b2:61:49:d2:26:4c:30:ae:01:67:37:ac:3c:69:b4:b2:
56:86:ba:73:fd:a4:ab:f5:88:11:60:62:75:b5:d6:7e:0b:dd:
c5:88:1a:69:ce:b8:c1:13:25:80:df:ee:8b:6b:e0:ce:ed:e3:
93:90:a8:be:a7:ac:1c:97:d2:ab:c9:a9:c4:b1:cf:e9:c6:27:
b4:01:00:ab:67:0b:07:8b:da:38:37:93:a3:ce:cb:2f:6b:d6:
ac:b4:50:a2:dc:47:f1:a2:79:9d:12:a2:3b:90:ad:f0:84:38:
4e:d5:0a:f5:18:8d:74:e6:64:2f:f3:1e:bb:32:ad:2c:a1:c6:
51:54:03:ff:5d:b6:a7:1f:2a:6b:1a:00:07:96:dc:00:07:05:
d3:85:41:08:f7:a0:22:68:7e:b6:a4:09:c6:49:3e:9c:6d:94:
d8:0e:a3:4e:02:70:18:88:86:6c:29:86:d5:e0:93:6e:d0:ae:
06:e3:09:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjhfP8JwBCemGy1ieJz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWU2MzVkYmUzMmI0NjJkYjA0Nzc2ZDNhNTBjMzE0MmNhNDUyMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMMrH8dqqVWZPJ5DWBdVG4XIkr6
U7gItV3AQZKSZlvxNHJgbfOLpeNNJrHeXR4gr9Ih2kcLLvDEv/gEioIgxvNSWlrt
1WPBbpvh54e4GC30k0okYRCqkCswFf59/BYA5leSrEsF5n9eYcF+3FieCzMNlU1c
YN/5y8SBLSfzqxkW1V69TWg+WNYknzAW1pmlp6J2yNBmEg7y8voj3g88Gu/CgCKF
kL3/CDRuoVw/XzuU3Ah+9InC4/7J9y1BTwAQzsqw0M+r8IAc38sekOYqpsviIYc3
dYBUyUlAqEbvaOdAHvYcp3SFRsGJXOPMMaBZTXdAOMk1tOADTiybOFAJrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrmNdvjK0YtsEd206UMMULKRSFcMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvYXVZMTItTXJSaTJ3UjNiVHBRd3hRc3BGSVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj74MA0G
CSqGSIb3DQEBCwUAA4IBAQBnV5IuaShuSe2ZqEgZuX432QL4gGTlSyujyhZBnWm/
EJtWu/ZlQCYGZ9ibq2WuXcVapUUpM3K7GZ0ji2bbk/2A93Z+t/OD48oqCrJhSdIm
TDCuAWc3rDxptLJWhrpz/aSr9YgRYGJ1tdZ+C93FiBppzrjBEyWA3+6La+DO7eOT
kKi+p6wcl9KryanEsc/pxie0AQCrZwsHi9o4N5Ojzssva9astFCi3EfxonmdEqI7
kK3whDhO1Qr1GI105mQv8x67Mq0socZRVAP/XbanHyprGgAHltwABwXThUEI96Ai
aH62pAnGST6cbZTYDqNOAnAYiIZsKYbV4JNu0K4G4wm9
-----END CERTIFICATE-----
Generated at Sun May 19 14:47:09 2024 by rpki-client on console-ams.rpki-client.org