Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa
File: 6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa (raw, json)
Hash identifier: GquP2MmBMA1GkONueATw9wcIDsP2qjgbxCGnTlX01po=
Subject key identifier: E8:0C:B3:FB:FC:FE:44:DB:31:D0:31:8A:DB:EF:0B:DE:6E:24:FC:C6
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: 016C1C
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa
Signing time: Thu 15 Feb 2024 16:56:43 +0000
ROA not before: Thu 15 Feb 2024 16:56:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 21:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93212 (0x16c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Feb 15 16:56:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=E80CB3FBFCFE44DB31D0318ADBEF0BDE6E24FCC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:41:26:69:b3:14:a9:ef:dc:f5:db:89:b7:
a0:64:07:8e:86:cf:49:56:3b:2c:fc:e1:89:62:63:
14:11:03:3f:4d:38:3e:a6:47:01:23:3a:25:cb:ed:
7a:78:17:bf:4d:e6:22:eb:fb:a9:f6:ee:d0:cf:8b:
cc:14:b3:0d:3b:07:c6:00:74:dc:77:10:90:ba:b0:
61:46:69:fc:4e:e4:ad:a4:41:d3:0a:40:7b:51:2c:
56:60:f8:0f:e8:7e:7a:5b:ab:9c:4c:50:d2:17:79:
65:7d:b0:91:ef:1e:10:49:e6:ac:7c:27:35:5e:40:
07:1a:27:a0:8d:94:f4:a9:7a:84:0c:35:90:73:4b:
14:55:63:ed:4b:ed:26:ce:e0:a0:7c:a1:70:1c:0f:
38:e4:9f:d9:b6:61:4d:2d:cd:58:81:9e:4a:ea:74:
6f:22:1a:04:b6:70:ae:fb:9d:5e:2b:4d:52:75:47:
fd:dd:f6:d8:dd:dc:bf:5e:c1:a0:d4:8e:f6:b8:4a:
90:af:8e:ed:e0:ea:8e:10:b9:d1:f1:9a:55:84:15:
ce:77:b9:58:52:8b:8d:0c:15:5f:83:d1:7d:df:a9:
1c:45:4d:0b:3e:63:46:5d:3e:00:67:d5:20:2c:93:
e0:35:7e:54:b7:f2:b3:83:af:e5:29:b0:b9:01:12:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0C:B3:FB:FC:FE:44:DB:31:D0:31:8A:DB:EF:0B:DE:6E:24:FC:C6
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/6Ayz-_z-RNsx0DGK2-8L3m4k_MY.roa
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a3:da:37:4d:d6:65:a7:09:4e:89:2f:b2:29:cd:ec:e2:30:
23:ff:6f:b0:78:97:93:6f:25:99:d0:39:7c:02:d3:96:35:68:
c6:61:bd:6c:e2:73:e6:61:df:0a:f5:0b:b5:23:48:4b:bf:5d:
af:8c:8b:b9:fb:6b:f4:18:4c:ca:8c:6f:a7:1f:c9:9b:4a:ff:
38:5c:ea:7a:47:8d:6e:9a:b4:53:24:92:54:5a:c5:50:df:f8:
a4:7e:0f:62:a1:f4:30:be:f2:c5:7e:82:fe:c0:8a:75:32:7c:
72:50:76:10:ba:0e:fd:94:c5:cf:b8:95:65:cc:73:4c:5c:e1:
1b:51:26:3e:62:1f:52:e5:bc:2f:12:52:eb:f6:d8:70:69:b1:
29:ea:8b:3a:81:6a:75:8b:5b:a8:ba:5c:14:7b:85:3e:ad:2e:
e4:9b:f3:ef:9c:3f:2b:bc:ca:cb:38:cf:12:8d:03:14:63:7a:
b9:5e:00:ad:f9:13:b2:ec:cc:f9:a1:c2:ba:11:3b:c1:48:c3:
8e:fe:09:e1:76:c5:d3:37:1f:9a:2a:54:de:ca:b6:35:5a:f7:
de:8c:e1:60:2b:86:ca:4b:f0:04:66:97:f3:df:67:1a:4d:5b:
84:c3:03:f0:63:d4:1c:73:29:46:7b:9e:00:8e:a0:c9:6f:ca:
ac:3d:23:5a
-----BEGIN CERTIFICATE-----
MIIEsTCCA5mgAwIBAgIDAWwcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
YTgwNWRiYWMzNjQ3NDliOWIxMTU1OTBhYjZlZjBmOTcwY2RiZDgwHhcNMjQwMjE1
MTY1NjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhFODBDQjNGQkZDRkU0
NERCMzFEMDMxOEFEQkVGMEJERTZFMjRGQ0M2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt45BJmmzFKnv3PXbibegZAeOhs9JVjss/OGJYmMUEQM/TTg+
pkcBIzoly+16eBe/TeYi6/up9u7Qz4vMFLMNOwfGAHTcdxCQurBhRmn8TuStpEHT
CkB7USxWYPgP6H56W6ucTFDSF3llfbCR7x4QSeasfCc1XkAHGiegjZT0qXqEDDWQ
c0sUVWPtS+0mzuCgfKFwHA845J/ZtmFNLc1YgZ5K6nRvIhoEtnCu+51eK01SdUf9
3fbY3dy/XsGg1I72uEqQr47t4OqOELnR8ZpVhBXOd7lYUouNDBVfg9F936kcRU0L
PmNGXT4AZ9UgLJPgNX5Ut/Kzg6/lKbC5ARLz/wIDAQABo4IBzDCCAcgwHQYDVR0O
BBYEFOgMs/v8/kTbMdAxitvvC95uJPzGMB8GA1UdIwQYMBaAFMqoBdusNkdJubEV
WQq27w+XDNvYMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYDVR0fBF0wWzBZ
oFegVYZTcnN5bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpv
YnNuaWpkZXJzL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3lxZ0YyNncyUjBtNXNSVlpDcmJ2RDVjTTI5Zy5jZXIw
DgYDVR0PAQH/BAQDAgeAMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5
bmM6Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvUklQRS1ubGpvYnNuaWpkZXJz
LzZBeXotX3otUk5zeDBER0syLThMM200a19NWS5yb2EwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItiuQwDQYJKoZIhvcNAQELBQADggEBAKaj2jdN1mWnCU6J
L7IpzeziMCP/b7B4l5NvJZnQOXwC05Y1aMZhvWzic+Zh3wr1C7UjSEu/Xa+Mi7n7
a/QYTMqMb6cfyZtK/zhc6npHjW6atFMkklRaxVDf+KR+D2Kh9DC+8sV+gv7AinUy
fHJQdhC6Dv2Uxc+4lWXMc0xc4RtRJj5iH1LlvC8SUuv22HBpsSnqizqBanWLW6i6
XBR7hT6tLuSb8++cPyu8yss4zxKNAxRjerleAK35E7LszPmhwroRO8FIw47+CeF2
xdM3H5oqVN7KtjVa996M4WArhspL8ARml/PfZxpNW4TDA/Bj1BxzKUZ7ngCOoMlv
yqw9I1o=
-----END CERTIFICATE-----
Generated at Sat May 4 15:54:24 2024 by rpki-client on console-ams.rpki-client.org