Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/l43uZC20RxHvL203pIUVfCcvhJg.roa
File: l43uZC20RxHvL203pIUVfCcvhJg.roa (raw, json)
Hash identifier: gB4TzAMY6INvaE8AUkC0Lqt4evemz+/WxQAbmVHbxH0=
Subject key identifier: 97:8D:EE:64:2D:B4:47:11:EF:2F:6D:37:A4:85:15:7C:27:2F:84:98
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018CCA2A01175800283E1EEE341D7F4BBBC9
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/l43uZC20RxHvL203pIUVfCcvhJg.roa
Signing time: Tue 02 Jan 2024 12:33:19 +0000
ROA not before: Tue 02 Jan 2024 12:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46337
IP address blocks: 199.103.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:01:17:58:00:28:3e:1e:ee:34:1d:7f:4b:bb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 2 12:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=978dee642db44711ef2f6d37a485157c272f8498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:da:2d:73:9a:20:53:86:9f:a8:52:5e:46:
39:74:13:85:9e:40:39:1d:69:ee:12:1e:0c:33:97:
ee:ed:00:e5:8b:79:07:76:9b:34:e7:5c:92:16:32:
16:76:c4:fd:53:6c:a6:7c:90:2c:1c:57:ae:f6:88:
a9:df:e7:8c:e9:73:d9:0c:81:5d:a9:44:90:ac:ba:
91:ff:df:37:23:38:8a:d6:06:38:72:8e:74:4b:c7:
6d:e9:ce:2c:e2:d5:44:8f:e3:bb:21:24:65:db:aa:
b2:7d:b2:53:99:11:1b:18:74:a4:fa:eb:06:4f:11:
48:05:c6:b3:30:04:40:bb:cd:92:72:cb:77:0c:9e:
b1:a3:1f:3c:d2:62:8f:ab:04:5b:e5:14:f8:96:f2:
55:14:c8:96:60:a9:a8:54:39:5b:0b:f4:3e:53:20:
01:5c:c7:ab:21:61:1f:7b:24:90:a4:da:87:59:9f:
f9:da:ed:62:94:60:68:6a:a8:dc:ce:d1:12:91:b1:
c6:39:36:6e:e3:71:1f:61:60:0b:80:6c:41:99:b9:
91:7c:87:4f:72:0c:9f:cc:51:a9:c5:5f:c5:44:0c:
99:4f:07:3a:3e:cc:45:f7:d0:9e:b2:6e:3b:08:89:
9c:5b:08:db:7e:b0:5e:32:ee:45:1f:39:45:33:ed:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8D:EE:64:2D:B4:47:11:EF:2F:6D:37:A4:85:15:7C:27:2F:84:98
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/l43uZC20RxHvL203pIUVfCcvhJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:83:ac:57:3f:0c:25:67:f3:33:4c:0f:cc:4e:82:34:ba:b2:
fb:37:fc:d1:0c:55:99:3b:25:e3:2b:b5:84:e7:76:5c:ea:71:
73:86:f4:a7:ef:1d:a8:e6:df:6e:c0:ab:a2:74:87:d8:6a:ac:
c4:bf:08:bb:66:cc:2e:05:dc:e4:44:4b:6d:d6:5e:86:db:7d:
67:7a:fe:ef:ec:19:7e:35:bc:b9:d0:d4:3e:e4:77:3d:f2:94:
e8:77:71:33:e8:f0:36:2e:0a:cb:f5:74:1e:0c:6f:31:1c:7c:
5f:14:b7:7a:f7:f6:6b:2e:a6:a0:28:96:9d:88:82:ff:f1:0a:
e2:9b:6d:b4:be:07:2a:5a:77:ed:25:85:40:6d:9e:9f:3c:2c:
38:0b:ca:10:10:87:15:ac:64:b8:c5:9b:c1:aa:b8:8f:a2:e7:
48:06:7d:c3:3b:53:68:2f:b6:47:27:15:fc:e0:6d:5a:2e:fe:
91:4a:c6:31:36:ca:8a:34:7a:0a:d0:eb:92:5b:6b:1c:3e:b6:
6f:c2:1c:5c:50:a2:ea:8c:58:5a:84:40:f7:54:e5:f9:56:3b:
da:bd:5a:48:03:af:20:6a:52:b7:c8:8a:ff:be:57:b2:d8:10:
5a:4b:c5:f9:f5:96:94:72:16:4a:a8:ad:f1:e1:9a:cb:a9:c3:
b4:cd:71:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKgEXWAAoPh7uNB1/S7vJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjQwMTAyMTIzMzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzhkZWU2NDJkYjQ0NzExZWYyZjZkMzdhNDg1MTU3YzI3MmY4NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDHaLXOaIFOGn6hSXkY5dBOFnkA5
HWnuEh4MM5fu7QDli3kHdps051ySFjIWdsT9U2ymfJAsHFeu9oip3+eM6XPZDIFd
qUSQrLqR/983IziK1gY4co50S8dt6c4s4tVEj+O7ISRl26qyfbJTmREbGHSk+usG
TxFIBcazMARAu82Scst3DJ6xox880mKPqwRb5RT4lvJVFMiWYKmoVDlbC/Q+UyAB
XMerIWEfeySQpNqHWZ/52u1ilGBoaqjcztESkbHGOTZu43EfYWALgGxBmbmRfIdP
cgyfzFGpxV/FRAyZTwc6PsxF99Cesm47CImcWwjbfrBeMu5FHzlFM+0KKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeN7mQttEcR7y9tN6SFFXwnL4SYMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvbDQzdVpDMjBSeEh2TDIwM3BJVVZmQ2N2aEpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2c6MA0G
CSqGSIb3DQEBCwUAA4IBAQBNg6xXPwwlZ/MzTA/MToI0urL7N/zRDFWZOyXjK7WE
53Zc6nFzhvSn7x2o5t9uwKuidIfYaqzEvwi7ZswuBdzkREtt1l6G231nev7v7Bl+
Nby50NQ+5Hc98pTod3Ez6PA2LgrL9XQeDG8xHHxfFLd69/ZrLqagKJadiIL/8Qri
m220vgcqWnftJYVAbZ6fPCw4C8oQEIcVrGS4xZvBqriPoudIBn3DO1NoL7ZHJxX8
4G1aLv6RSsYxNsqKNHoK0OuSW2scPrZvwhxcUKLqjFhahED3VOX5VjvavVpIA68g
alK3yIr/vley2BBaS8X59ZaUchZKqK3x4ZrLqcO0zXGP
-----END CERTIFICATE-----
Generated at Thu Jun 20 09:50:47 2024 by rpki-client on console-fra.rpki-client.org