Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7ugs9d68fxPf7WwMRPc5_ZPrCuc.roa
File: 7ugs9d68fxPf7WwMRPc5_ZPrCuc.roa (raw, json)
Hash identifier: gi0YkYn3aV7Jp8P+H/hm612+QitrvU/yY0FpXE3bwtI=
Subject key identifier: EE:E8:2C:F5:DE:BC:7F:13:DF:ED:6C:0C:44:F7:39:FD:93:EB:0A:E7
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0192724F4B3E5E53F59B58355E31EBA8E898
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7ugs9d68fxPf7WwMRPc5_ZPrCuc.roa
Signing time: Wed 09 Oct 2024 17:24:11 +0000
ROA not before: Wed 09 Oct 2024 17:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 46.34.44.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:4f:4b:3e:5e:53:f5:9b:58:35:5e:31:eb:a8:e8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 9 17:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eee82cf5debc7f13dfed6c0c44f739fd93eb0ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:fb:d4:db:89:3a:9a:63:3d:bc:9c:3f:a3:
5e:71:9d:e1:86:77:19:f1:d5:fa:04:70:cd:e9:46:
1c:78:10:92:2d:27:a7:29:21:df:89:13:f7:4f:8f:
47:4c:c6:e3:f4:fb:32:71:d5:df:7a:57:43:f4:d3:
27:a0:6b:19:c7:79:7a:f4:28:ef:00:0b:8b:1f:7d:
49:f8:d7:aa:db:f9:08:1c:32:54:d7:30:21:1d:58:
56:47:6b:a9:fd:08:2e:6e:79:e0:fd:12:8b:e4:13:
89:1e:e5:2f:83:a8:12:3a:08:32:02:43:f7:a4:d8:
13:25:47:12:2b:18:06:76:a2:86:3c:29:c9:30:ca:
59:a4:f7:25:08:61:8f:b5:c6:a5:6d:9a:71:ad:f0:
db:48:25:1f:57:6d:66:c2:d3:ee:77:6a:15:7f:3c:
9d:7e:8e:24:12:87:9f:df:39:44:3e:1a:f8:70:2b:
18:b4:f8:c4:c8:fb:35:34:8f:30:37:ac:3e:ab:ac:
7b:32:97:12:8f:19:b4:63:4f:61:f6:47:89:b5:6d:
b3:77:87:2d:1f:36:c7:8e:fb:a3:34:82:c9:c5:18:
06:8b:ac:7c:e1:3d:fd:c4:5a:e8:8a:ca:17:50:96:
a5:94:32:55:ef:13:82:a2:82:a6:94:98:4a:aa:0c:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:2C:F5:DE:BC:7F:13:DF:ED:6C:0C:44:F7:39:FD:93:EB:0A:E7
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7ugs9d68fxPf7WwMRPc5_ZPrCuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.44.0/23
Signature Algorithm: sha256WithRSAEncryption
11:68:9d:c0:0f:2a:6a:c1:6f:6c:05:a7:af:77:6b:62:de:56:
df:99:99:dc:22:1a:0a:9a:91:1e:ed:c4:e9:0a:78:5f:54:65:
f5:48:b0:04:38:d4:0b:37:bb:3f:91:5f:98:e6:61:ef:06:d7:
83:76:5b:22:4e:72:7b:26:48:e7:a4:ed:b2:38:31:43:5c:b0:
5a:f6:fb:c5:46:6d:82:f6:1a:0b:4f:4c:a1:c5:a1:69:5c:e4:
a5:60:aa:10:33:7a:bb:50:3f:d6:2c:68:2c:3f:0a:92:6d:ef:
50:cb:bd:3a:12:35:ea:fe:e2:be:48:11:a0:f4:7c:af:71:e0:
b4:7c:eb:6f:51:e7:af:ee:41:3b:c3:95:b0:cd:f7:4d:5d:e9:
f3:53:68:60:2f:4e:43:ec:6b:13:e3:fb:eb:3d:62:bd:80:1e:
8e:34:28:a7:55:be:44:8b:af:30:a2:18:f9:e1:c4:d5:60:1c:
a7:9a:26:21:e6:08:dd:60:ee:60:7a:69:0e:3d:ec:7e:9c:d0:
7b:42:ec:bf:79:90:8b:58:72:6e:f9:27:8e:f1:fe:76:fe:22:
52:98:df:74:9e:51:48:c7:7a:ab:65:13:08:b6:e6:3a:5b:3b:
7b:23:20:27:f0:c7:2f:d2:2a:59:f8:39:e5:5e:b8:a5:26:ff:
8b:f3:2c:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJyT0s+XlP1m1g1XjHrqOiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjQxMDA5MTcyNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU4MmNmNWRlYmM3ZjEzZGZlZDZjMGM0NGY3MzlmZDkzZWIwYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7P71NuJOppjPbycP6NecZ3hhncZ
8dX6BHDN6UYceBCSLSenKSHfiRP3T49HTMbj9PsycdXfeldD9NMnoGsZx3l69Cjv
AAuLH31J+Neq2/kIHDJU1zAhHVhWR2up/Qgubnng/RKL5BOJHuUvg6gSOggyAkP3
pNgTJUcSKxgGdqKGPCnJMMpZpPclCGGPtcalbZpxrfDbSCUfV21mwtPud2oVfzyd
fo4kEoef3zlEPhr4cCsYtPjEyPs1NI8wN6w+q6x7MpcSjxm0Y09h9keJtW2zd4ct
HzbHjvujNILJxRgGi6x84T39xFroisoXUJallDJV7xOCooKmlJhKqgzmVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7oLPXevH8T3+1sDET3Of2T6wrnMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvN3VnczlkNjhmeFBmN1d3TVJQYzVfWlByQ3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiIsMA0G
CSqGSIb3DQEBCwUAA4IBAQARaJ3ADypqwW9sBaevd2ti3lbfmZncIhoKmpEe7cTp
CnhfVGX1SLAEONQLN7s/kV+Y5mHvBteDdlsiTnJ7JkjnpO2yODFDXLBa9vvFRm2C
9hoLT0yhxaFpXOSlYKoQM3q7UD/WLGgsPwqSbe9Qy706EjXq/uK+SBGg9HyvceC0
fOtvUeev7kE7w5WwzfdNXenzU2hgL05D7GsT4/vrPWK9gB6ONCinVb5Ei68wohj5
4cTVYBynmiYh5gjdYO5gemkOPex+nNB7Quy/eZCLWHJu+SeO8f52/iJSmN90nlFI
x3qrZRMItuY6Wzt7IyAn8Mcv0ipZ+DnlXrilJv+L8yxq
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:39:26 2024 by rpki-client on console-ams.rpki-client.org