Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eDNnnkrmNG1mHKRexyN8NmvtanI.roa
File: eDNnnkrmNG1mHKRexyN8NmvtanI.roa (raw, json)
Hash identifier: amdPCOrI/cjFEDTPmFCAzrdO0MRdlmJysokZ7jRCwHs=
Subject key identifier: 78:33:67:9E:4A:E6:34:6D:66:1C:A4:5E:C7:23:7C:36:6B:ED:6A:72
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018CC94CA63B3C67E5B68C114E41CE856FCC
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eDNnnkrmNG1mHKRexyN8NmvtanI.roa
Signing time: Tue 02 Jan 2024 08:31:32 +0000
ROA not before: Tue 02 Jan 2024 08:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199393
IP address blocks: 141.226.245.0/24 maxlen: 24
141.226.241.0/24 maxlen: 24
141.226.242.0/24 maxlen: 24
141.226.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:a6:3b:3c:67:e5:b6:8c:11:4e:41:ce:85:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 2 08:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7833679e4ae6346d661ca45ec7237c366bed6a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:92:e3:e4:3a:4b:7c:09:a9:24:27:24:f7:
42:1c:67:85:1b:a3:5d:07:ec:7b:5d:ce:0d:29:53:
79:85:67:c1:84:e6:3d:e5:ba:56:35:48:31:94:9e:
1f:10:59:fb:92:ca:5f:7b:a3:40:3a:93:52:00:ce:
46:e7:21:70:35:c7:d4:52:f5:34:71:d1:00:a7:e0:
d7:e0:95:81:63:0b:f8:5c:a2:9e:ab:6a:d9:89:dd:
65:98:16:61:7f:3f:fa:b1:d9:b9:de:d3:f5:f8:99:
23:1d:c8:ac:cb:c8:76:95:64:c8:00:2e:1c:f4:53:
cf:16:b3:4d:48:cf:ad:30:0b:2e:e3:06:68:d1:59:
f5:0f:c6:cc:fd:05:8b:1a:7e:16:a9:3d:5d:37:57:
a8:ba:d8:c4:2c:af:f3:1e:17:e9:39:d6:75:f5:bd:
02:9c:16:0d:d1:6c:4f:ca:ec:e2:3a:fb:ef:1e:27:
10:ba:b2:66:c0:96:16:58:ff:0b:f5:9c:3f:d9:c3:
7f:be:2b:94:1a:ba:bb:d7:a2:37:fa:62:91:c3:52:
25:22:97:04:d6:f5:fc:5c:4b:1c:31:ef:d4:2a:d9:
77:57:31:97:3b:ad:d5:75:92:40:a6:f0:40:16:1c:
95:bb:81:79:62:95:f4:b1:ac:22:d5:65:b5:02:15:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:33:67:9E:4A:E6:34:6D:66:1C:A4:5E:C7:23:7C:36:6B:ED:6A:72
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/eDNnnkrmNG1mHKRexyN8NmvtanI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.241.0-141.226.243.255
141.226.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:06:61:47:af:6d:fc:61:a3:e5:8c:8d:fc:5e:6e:97:b0:0b:
7d:ca:44:63:13:3a:c0:95:e8:08:91:34:20:fc:7e:af:b7:d7:
b9:f8:6b:99:39:58:10:07:3e:37:a9:9e:58:5a:57:06:f2:a0:
32:26:d1:47:e3:ac:42:f7:16:2b:b3:fd:08:4d:73:06:cb:64:
ac:72:fc:c9:c1:80:bc:e0:9b:63:d1:f1:03:c4:0f:f8:8b:2e:
fb:61:df:43:21:87:ce:7e:9e:19:2b:02:07:5e:8e:7a:95:46:
ba:48:a9:e1:27:6e:0b:11:39:62:50:25:d8:a8:c1:5e:21:26:
09:39:84:dc:83:fd:83:69:42:29:55:34:d7:45:c4:c9:59:87:
6a:94:12:0e:65:e0:1e:e9:fc:4c:64:61:49:be:0d:cb:b3:b2:
c4:d1:3d:ca:d3:04:f8:2f:6d:5b:a6:02:cc:1c:c8:fc:18:5f:
3a:19:46:1f:db:af:bc:3a:9d:70:cd:a4:44:4e:6e:ae:e0:f3:
6c:3d:44:68:cd:59:54:db:21:58:3c:7e:bd:2c:19:fa:b7:a3:
62:29:c8:e2:91:94:fe:77:5d:f4:95:0e:c7:d3:a4:1f:fb:10:
ac:91:da:2c:61:9f:ab:19:2e:43:ed:75:22:ea:b6:5b:96:8d:
7d:d9:5b:b2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzJTKY7PGfltowRTkHOhW/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjQwMTAyMDgzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODMzNjc5ZTRhZTYzNDZkNjYxY2E0NWVjNzIzN2MzNjZiZWQ2YTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfOS4+Q6S3wJqSQnJPdCHGeFG6Nd
B+x7Xc4NKVN5hWfBhOY95bpWNUgxlJ4fEFn7kspfe6NAOpNSAM5G5yFwNcfUUvU0
cdEAp+DX4JWBYwv4XKKeq2rZid1lmBZhfz/6sdm53tP1+JkjHcisy8h2lWTIAC4c
9FPPFrNNSM+tMAsu4wZo0Vn1D8bM/QWLGn4WqT1dN1eoutjELK/zHhfpOdZ19b0C
nBYN0WxPyuziOvvvHicQurJmwJYWWP8L9Zw/2cN/viuUGrq716I3+mKRw1IlIpcE
1vX8XEscMe/UKtl3VzGXO63VdZJApvBAFhyVu4F5YpX0sawi1WW1AhX8ywIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHgzZ55K5jRtZhykXscjfDZr7WpyMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvZURObm5rcm1ORzFtSEtSZXh5TjhObXZ0YW5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACN4vED
BAKN4vADBACN4vUwDQYJKoZIhvcNAQELBQADggEBACoGYUevbfxho+WMjfxebpew
C33KRGMTOsCV6AiRNCD8fq+317n4a5k5WBAHPjepnlhaVwbyoDIm0UfjrEL3Fiuz
/QhNcwbLZKxy/MnBgLzgm2PR8QPED/iLLvth30Mhh85+nhkrAgdejnqVRrpIqeEn
bgsROWJQJdiowV4hJgk5hNyD/YNpQilVNNdFxMlZh2qUEg5l4B7p/ExkYUm+Dcuz
ssTRPcrTBPgvbVumAswcyPwYXzoZRh/br7w6nXDNpERObq7g82w9RGjNWVTbIVg8
fr0sGfq3o2IpyOKRlP53XfSVDsfTpB/7EKyR2ixhn6sZLkPtdSLqtluWjX3ZW7I=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:54:32 2024 by rpki-client on console-ams.rpki-client.org