Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/a0PqPCNmw30PSyks_eICLqbmz4M.roa
File: a0PqPCNmw30PSyks_eICLqbmz4M.roa (raw, json)
Hash identifier: YpCZBbgMtpssfonzTKNmGI6vOWOeVHeR1JpFn4bxh7s=
Subject key identifier: 6B:43:EA:3C:23:66:C3:7D:0F:4B:29:2C:FD:E2:02:2E:A6:E6:CF:83
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7944141D215E008C9D9C1C995E319B4
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/a0PqPCNmw30PSyks_eICLqbmz4M.roa
Signing time: Tue 02 Jan 2024 00:30:31 +0000
ROA not before: Tue 02 Jan 2024 00:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 92.71.18.64/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:41:41:d2:15:e0:08:c9:d9:c1:c9:95:e3:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b43ea3c2366c37d0f4b292cfde2022ea6e6cf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:47:79:56:2d:9e:e5:fc:ea:29:13:23:99:a1:
60:e3:62:cc:0e:2b:c9:92:a1:a5:d5:38:15:c9:24:
cf:a4:17:0d:69:87:ff:df:3f:f0:c4:4f:48:6c:77:
8b:11:a2:c4:f0:a0:ed:fa:db:78:97:48:30:95:04:
18:86:bc:ad:20:e4:3c:cb:4e:33:1f:3e:d0:37:96:
7a:06:2c:5a:c2:48:d9:bb:d8:e9:9e:0c:11:b9:59:
39:a8:1c:1c:b5:01:f5:db:3c:ae:ec:6c:e9:c6:ac:
1f:c3:6b:cb:4b:cd:3b:69:27:69:b3:6b:3d:78:49:
cf:53:4c:c1:a1:72:41:e2:bc:07:2b:61:e4:2e:27:
4f:59:bc:62:19:98:c1:7b:dd:05:e6:b7:75:18:c6:
3f:31:8f:26:cc:70:07:11:e4:70:04:87:87:d6:0f:
90:6c:09:e4:f4:50:6c:8e:a2:04:3a:84:0f:cf:9e:
0c:76:b2:f5:f7:0a:a4:71:2b:8d:39:4a:32:f7:22:
5e:ab:14:22:c4:96:8d:1b:2f:85:e4:69:5b:aa:24:
7d:9d:a0:8b:02:51:b9:36:2c:a6:85:cb:2b:58:77:
a1:61:ee:81:4f:2d:4d:2b:38:77:bb:ad:21:bb:f4:
88:e4:eb:64:8b:f7:58:90:a5:31:d3:51:30:48:03:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:EA:3C:23:66:C3:7D:0F:4B:29:2C:FD:E2:02:2E:A6:E6:CF:83
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/a0PqPCNmw30PSyks_eICLqbmz4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.71.18.64/27
Signature Algorithm: sha256WithRSAEncryption
98:d1:57:1e:7c:5c:e7:a7:7f:ea:fe:48:29:52:f2:58:b6:5d:
66:3d:c0:de:f8:7e:0a:80:1c:e4:ed:01:25:19:1d:a3:1e:a1:
b3:93:32:db:46:c6:79:b9:89:63:3a:c3:08:cc:2a:85:4a:73:
07:c0:1b:a6:7c:6c:3a:dd:ca:d2:b3:dc:f1:df:26:a0:e3:90:
97:b4:b7:de:d2:1a:f7:ab:38:49:b2:d5:fe:8e:d3:71:62:94:
14:d5:1f:26:93:df:a8:ed:e6:1c:7f:a5:7b:66:ec:9b:0f:16:
75:b6:af:b8:1e:71:51:46:e5:fc:71:86:48:fa:f9:75:11:80:
5b:53:a8:35:c3:df:6a:20:44:17:1b:7f:f2:e5:52:f4:1b:10:
a3:7a:e2:20:fb:47:0e:98:1a:6c:3d:55:ea:e5:e9:c7:f5:53:
45:d9:a4:09:39:04:62:5d:d6:b3:b0:71:3d:cc:3e:7f:e5:04:
39:65:60:1f:a8:ea:28:d5:fb:10:b8:01:e9:ad:ae:98:d0:4a:
e5:11:c7:e1:15:d8:20:cc:05:a8:cb:be:42:5b:e5:32:57:4e:
b3:96:9a:0b:01:55:7d:34:7e:50:07:a9:1f:1f:fd:bf:29:2a:
bc:50:37:d6:7a:f8:1f:ea:fd:e2:2e:87:05:50:41:2c:7f:a9:
2e:d6:ce:12
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzHlEFB0hXgCMnZwcmV4xm0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjQwMTAyMDAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjQzZWEzYzIzNjZjMzdkMGY0YjI5MmNmZGUyMDIyZWE2ZTZjZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ud5Vi2e5fzqKRMjmaFg42LMDivJ
kqGl1TgVySTPpBcNaYf/3z/wxE9IbHeLEaLE8KDt+tt4l0gwlQQYhrytIOQ8y04z
Hz7QN5Z6BixawkjZu9jpngwRuVk5qBwctQH12zyu7Gzpxqwfw2vLS807aSdps2s9
eEnPU0zBoXJB4rwHK2HkLidPWbxiGZjBe90F5rd1GMY/MY8mzHAHEeRwBIeH1g+Q
bAnk9FBsjqIEOoQPz54MdrL19wqkcSuNOUoy9yJeqxQixJaNGy+F5GlbqiR9naCL
AlG5NiymhcsrWHehYe6BTy1NKzh3u60hu/SI5Otki/dYkKUx01EwSAPxNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGtD6jwjZsN9D0spLP3iAi6m5s+DMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvYTBQcVBDTm13MzBQU3lrc19lSUNMcWJtejRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFXEcSQDAN
BgkqhkiG9w0BAQsFAAOCAQEAmNFXHnxc56d/6v5IKVLyWLZdZj3A3vh+CoAc5O0B
JRkdox6hs5My20bGebmJYzrDCMwqhUpzB8AbpnxsOt3K0rPc8d8moOOQl7S33tIa
96s4SbLV/o7TcWKUFNUfJpPfqO3mHH+le2bsmw8WdbavuB5xUUbl/HGGSPr5dRGA
W1OoNcPfaiBEFxt/8uVS9BsQo3riIPtHDpgabD1V6uXpx/VTRdmkCTkEYl3Ws7Bx
Pcw+f+UEOWVgH6jqKNX7ELgB6a2umNBK5RHH4RXYIMwFqMu+QlvlMldOs5aaCwFV
fTR+UAepHx/9vykqvFA31nr4H+r94i6HBVBBLH+pLtbOEg==
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:54 2024 by rpki-client on console-ams.rpki-client.org