Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rstQt4hilznyOGL7r1vxerMOA7Y.roa
File: rstQt4hilznyOGL7r1vxerMOA7Y.roa (raw, json)
Hash identifier: x5IV+UTql27+Prx22zFEig7tOPN77spZxpeLC2yjEqQ=
Subject key identifier: AE:CB:50:B7:88:62:97:39:F2:38:62:FB:AF:5B:F1:7A:B3:0E:03:B6
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF5F2C7DF3F582B3BA60088B3DCB2
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rstQt4hilznyOGL7r1vxerMOA7Y.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209492
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f5:f2:c7:df:3f:58:2b:3b:a6:00:88:b3:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aecb50b788629739f23862fbaf5bf17ab30e03b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:5a:c7:14:ee:34:8e:c3:4f:5b:cf:c7:0a:
bc:d2:01:f1:fa:9e:12:10:72:69:d0:8d:58:da:38:
54:ca:86:58:7c:d6:72:ec:f8:fb:09:ea:1a:0b:0e:
3b:9a:91:a9:fa:92:ec:9f:08:7c:44:c0:d9:6e:d9:
ac:3a:a3:b0:39:24:4e:23:75:45:9e:24:8f:f8:52:
39:ef:a9:d0:6b:35:57:b2:0d:9c:8c:12:d8:db:df:
b3:72:ca:f8:81:25:4f:27:eb:48:70:a9:54:79:2e:
fe:9e:39:8e:11:70:15:d7:63:f9:cc:89:04:b6:e4:
c8:fb:e0:35:49:e3:1b:cd:5c:d0:17:9e:3b:78:8c:
ac:15:c8:6d:37:f7:70:fe:ca:bd:f3:d4:02:c0:a0:
9c:57:84:c7:0a:68:72:aa:06:3d:fc:d9:d1:77:e1:
01:a0:8e:03:3b:91:01:3e:56:72:d0:50:0b:40:48:
10:65:e9:ab:c3:dd:52:a8:de:77:b6:9c:99:c0:2a:
cf:97:4d:a4:f7:3a:50:c0:1a:d1:a6:93:49:e4:89:
53:38:8e:91:bf:0e:9b:01:6d:b9:de:7a:25:9d:62:
6a:89:fa:fa:64:5a:8c:de:b5:7b:ba:23:87:b4:f2:
8c:6f:92:55:b9:05:69:6e:fb:f4:0c:f6:f2:aa:91:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:50:B7:88:62:97:39:F2:38:62:FB:AF:5B:F1:7A:B3:0E:03:B6
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rstQt4hilznyOGL7r1vxerMOA7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:69:08:60:98:85:f0:79:e9:8f:36:86:e0:b7:7b:89:28:4a:
6b:cc:ff:c8:05:d5:b7:d3:d1:de:29:1c:fa:71:8b:b2:3a:b9:
53:ee:31:94:70:87:4a:a1:33:4b:a0:36:5c:ba:69:a9:ce:07:
37:b0:7e:c9:bb:02:5a:a7:16:c8:68:66:9c:e0:aa:1a:7d:df:
57:58:03:05:1f:02:8b:60:35:40:90:bf:17:ac:f7:43:11:e5:
f0:97:15:e5:de:41:14:e8:a3:46:a8:f6:10:ce:99:d1:7d:34:
b5:d5:3a:19:45:38:07:7c:5b:4e:ef:98:c2:f7:06:bd:ff:39:
01:11:5e:c3:24:04:bd:3c:d4:3c:e1:dc:14:a4:03:c4:29:97:
70:be:cd:e6:99:4f:91:b9:4c:fd:d8:6b:5a:7a:7f:83:6e:f6:
fb:0f:d3:7b:76:0d:47:9d:df:06:c5:13:e7:25:a5:67:1a:22:
05:0f:b9:db:0a:19:74:19:fb:d6:75:ed:30:e6:c2:f9:6c:38:
23:5c:57:df:49:b2:0b:14:93:33:c6:13:37:86:24:4d:e4:60:
a2:41:0a:d5:44:aa:dc:59:c0:4e:2f:9b:f9:4f:e3:a5:e3:25:
9f:a9:6b:1a:46:87:e6:41:52:fe:c5:1b:a7:c6:64:f9:9d:03:
4d:73:05:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu/Xyx98/WCs7pgCIs9yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjQwMTAyMTAzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWNiNTBiNzg4NjI5NzM5ZjIzODYyZmJhZjViZjE3YWIzMGUwM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3xaxxTuNI7DT1vPxwq80gHx+p4S
EHJp0I1Y2jhUyoZYfNZy7Pj7CeoaCw47mpGp+pLsnwh8RMDZbtmsOqOwOSROI3VF
niSP+FI576nQazVXsg2cjBLY29+zcsr4gSVPJ+tIcKlUeS7+njmOEXAV12P5zIkE
tuTI++A1SeMbzVzQF547eIysFchtN/dw/sq989QCwKCcV4THCmhyqgY9/NnRd+EB
oI4DO5EBPlZy0FALQEgQZemrw91SqN53tpyZwCrPl02k9zpQwBrRppNJ5IlTOI6R
vw6bAW253nolnWJqifr6ZFqM3rV7uiOHtPKMb5JVuQVpbvv0DPbyqpHoawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7LULeIYpc58jhi+69b8XqzDgO2MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvcnN0UXQ0aGlsem55T0dMN3Ixdnhlck1PQTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiI2MA0G
CSqGSIb3DQEBCwUAA4IBAQA7aQhgmIXweemPNobgt3uJKEprzP/IBdW309HeKRz6
cYuyOrlT7jGUcIdKoTNLoDZcummpzgc3sH7JuwJapxbIaGac4Koafd9XWAMFHwKL
YDVAkL8XrPdDEeXwlxXl3kEU6KNGqPYQzpnRfTS11ToZRTgHfFtO75jC9wa9/zkB
EV7DJAS9PNQ84dwUpAPEKZdwvs3mmU+RuUz92Gtaen+Dbvb7D9N7dg1Hnd8GxRPn
JaVnGiIFD7nbChl0GfvWde0w5sL5bDgjXFffSbILFJMzxhM3hiRN5GCiQQrVRKrc
WcBOL5v5T+Ol4yWfqWsaRofmQVL+xRunxmT5nQNNcwVH
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:28 2024 by rpki-client on console-fra.rpki-client.org