Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_zXSI0ol7X85qPvho_BfxdlQdcw.roa
File: _zXSI0ol7X85qPvho_BfxdlQdcw.roa (raw, json)
Hash identifier: wTi8offYU+6JCuoCWBP9IF2/Fw1KFlnZ7zqpZ2FBTTM=
Subject key identifier: FF:35:D2:23:4A:25:ED:7F:39:A8:FB:E1:A3:F0:5F:C5:D9:50:75:CC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0191B39BE0B5C797CC85CB1E220DE6566CA4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_zXSI0ol7X85qPvho_BfxdlQdcw.roa
Signing time: Mon 02 Sep 2024 16:40:22 +0000
ROA not before: Mon 02 Sep 2024 16:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207569
IP address blocks: 159.255.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:9b:e0:b5:c7:97:cc:85:cb:1e:22:0d:e6:56:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 2 16:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff35d2234a25ed7f39a8fbe1a3f05fc5d95075cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:dd:95:cd:88:de:13:9c:68:10:cf:3f:eb:
e0:75:18:6a:90:c4:40:ed:7d:6e:b5:06:28:fe:cd:
b7:87:f4:bc:0c:90:25:0f:ef:02:0f:b6:fe:30:38:
a7:43:ed:5e:23:18:6b:a7:cd:d6:62:19:da:c5:d8:
d0:6d:a7:b1:d1:e6:86:19:07:73:d2:83:f0:46:ec:
62:3a:68:c4:bc:c5:01:c1:94:59:76:bf:a2:1d:2b:
e5:81:84:3b:c4:99:2e:eb:61:91:a6:22:34:50:23:
fd:9d:a4:c2:e8:42:16:97:0f:77:a0:9e:c6:62:2a:
03:4f:8e:d0:82:70:16:c3:ae:af:fc:3d:d3:23:27:
9c:97:df:11:0a:0b:ea:75:62:84:55:82:81:89:fc:
6a:fa:1f:de:79:55:79:b8:d4:08:0f:46:77:ba:6a:
04:b4:82:d9:f1:30:7b:7e:1c:e4:1b:07:b0:d3:79:
55:a7:41:59:cf:98:b9:a8:d7:14:8d:cc:40:48:90:
07:97:b9:ee:65:15:24:b8:12:9b:4e:ac:2c:f8:f9:
e6:ac:9d:1b:28:a8:13:44:14:5c:f7:8e:9e:15:99:
b0:64:73:ae:91:9b:78:5b:10:0b:94:c2:7d:67:22:
cd:fa:83:39:27:49:c2:b2:56:3f:23:1c:f2:3b:37:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:D2:23:4A:25:ED:7F:39:A8:FB:E1:A3:F0:5F:C5:D9:50:75:CC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_zXSI0ol7X85qPvho_BfxdlQdcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.32.0/23
Signature Algorithm: sha256WithRSAEncryption
34:6a:33:28:19:2a:10:85:9e:01:9d:c4:a1:e3:6b:2b:77:c6:
95:bf:a6:31:81:96:c4:6b:ed:83:b9:50:d8:43:ef:ca:39:f6:
ab:6c:5c:b3:9c:aa:b4:2b:50:86:1c:6c:cf:e7:73:1f:71:46:
44:4e:86:68:c8:b8:89:de:2f:1a:27:ac:e8:a4:c3:16:3a:7e:
26:12:00:84:1e:72:d2:da:10:ed:4a:ad:92:29:a2:eb:fa:bd:
34:78:71:04:42:2b:a0:72:ff:9a:aa:bc:0a:da:62:05:f9:fd:
12:0d:b0:6a:7d:5f:41:12:dd:fb:71:9b:a6:59:0d:54:92:d3:
97:c8:15:70:0d:cd:5b:f4:73:e8:f1:07:7a:e0:39:85:5e:16:
88:bd:21:00:40:11:ea:dd:b5:bd:82:bd:50:ee:0d:96:7e:8c:
ec:de:42:f0:fb:63:43:23:1e:23:95:96:6c:a8:04:25:e4:86:
d9:c8:be:47:c6:31:d0:5e:b1:47:7a:b4:dc:94:f3:6f:f3:8a:
e4:a0:0a:3e:cf:da:24:bd:46:fa:0d:0d:6f:11:b8:00:d6:cd:
28:68:c0:e8:43:50:57:80:33:ec:7f:2f:6b:3b:dd:75:ac:1d:
39:83:fe:dd:34:32:54:a3:35:ac:b9:0c:6b:3c:86:57:ca:b0:
e7:a6:50:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGzm+C1x5fMhcseIg3mVmykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwOTAyMTY0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjM1ZDIyMzRhMjVlZDdmMzlhOGZiZTFhM2YwNWZjNWQ5NTA3NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jndlc2I3hOcaBDPP+vgdRhqkMRA
7X1utQYo/s23h/S8DJAlD+8CD7b+MDinQ+1eIxhrp83WYhnaxdjQbaex0eaGGQdz
0oPwRuxiOmjEvMUBwZRZdr+iHSvlgYQ7xJku62GRpiI0UCP9naTC6EIWlw93oJ7G
YioDT47QgnAWw66v/D3TIyecl98RCgvqdWKEVYKBifxq+h/eeVV5uNQID0Z3umoE
tILZ8TB7fhzkGwew03lVp0FZz5i5qNcUjcxASJAHl7nuZRUkuBKbTqws+PnmrJ0b
KKgTRBRc946eFZmwZHOukZt4WxALlMJ9ZyLN+oM5J0nCslY/IxzyOzfHZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP810iNKJe1/Oaj74aPwX8XZUHXMMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvX3pYU0kwb2w3WDg1cVB2aG9fQmZ4ZGxRZGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBn/8gMA0G
CSqGSIb3DQEBCwUAA4IBAQA0ajMoGSoQhZ4BncSh42srd8aVv6YxgZbEa+2DuVDY
Q+/KOfarbFyznKq0K1CGHGzP53MfcUZEToZoyLiJ3i8aJ6zopMMWOn4mEgCEHnLS
2hDtSq2SKaLr+r00eHEEQiugcv+aqrwK2mIF+f0SDbBqfV9BEt37cZumWQ1UktOX
yBVwDc1b9HPo8Qd64DmFXhaIvSEAQBHq3bW9gr1Q7g2Wfozs3kLw+2NDIx4jlZZs
qAQl5IbZyL5HxjHQXrFHerTclPNv84rkoAo+z9okvUb6DQ1vEbgA1s0oaMDoQ1BX
gDPsfy9rO911rB05g/7dNDJUozWsuQxrPIZXyrDnplDe
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:47:53 2024 by rpki-client on console-ams.rpki-client.org