Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c46MonpsgXWaRKAPzOrYt1Kp4ak.roa
File: c46MonpsgXWaRKAPzOrYt1Kp4ak.roa (raw, json)
Hash identifier: X44rQLquAGn0bv8QJz8n6IIF+pVokpFMFNJO2LdeUR0=
Subject key identifier: 73:8E:8C:A2:7A:6C:81:75:9A:44:A0:0F:CC:EA:D8:B7:52:A9:E1:A9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191BD59C64D0B31C1C2B8CF5EFE7744856C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c46MonpsgXWaRKAPzOrYt1Kp4ak.roa
Signing time: Wed 04 Sep 2024 14:04:22 +0000
ROA not before: Wed 04 Sep 2024 14:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:59:c6:4d:0b:31:c1:c2:b8:cf:5e:fe:77:44:85:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 14:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738e8ca27a6c81759a44a00fccead8b752a9e1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:cd:78:b9:0c:e0:21:65:6b:5e:34:25:a3:
77:00:77:45:ba:96:55:a8:fd:08:ec:81:fa:0a:df:
48:ae:fc:e8:87:b2:84:c8:83:fd:8c:aa:7d:8d:99:
38:27:92:75:12:09:f8:e1:2a:9a:d7:81:19:3e:88:
ab:22:0d:59:a5:63:6d:a4:77:dc:de:91:4d:d2:dd:
d7:0c:76:70:be:dd:56:ab:39:a3:91:f4:bd:5a:6a:
b5:10:cc:6b:d5:dc:e5:d2:31:18:c1:76:30:35:bd:
06:3c:ac:9f:48:fa:8e:7e:31:8f:47:4f:a2:83:42:
f8:22:72:15:38:e2:4a:88:35:0c:9f:b5:6f:38:a3:
35:eb:dd:f1:4c:54:6a:70:6f:f2:a0:c3:c8:35:b8:
4a:ee:02:dc:48:c6:ac:6d:da:ac:1e:d3:c5:d6:fd:
49:84:bc:30:ed:9b:28:13:e7:9f:7f:57:73:a1:bb:
0c:9e:36:12:6d:bf:24:15:9c:4c:f5:ef:f9:e2:3c:
07:1b:63:79:39:b4:d8:e7:07:da:3f:9e:eb:86:4d:
20:f7:7f:62:48:45:b0:26:44:27:bd:ef:17:f0:d8:
b1:aa:97:63:7d:a9:57:cd:b0:4b:b0:74:1c:fa:cc:
4b:53:4c:39:fa:12:3f:c6:e5:53:8a:5d:62:15:bb:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:8C:A2:7A:6C:81:75:9A:44:A0:0F:CC:EA:D8:B7:52:A9:E1:A9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c46MonpsgXWaRKAPzOrYt1Kp4ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:81:a6:a9:99:5b:ec:e8:f4:be:67:fd:96:ca:07:e9:6f:84:
da:7f:90:85:81:41:aa:c0:65:09:c4:7f:0a:9f:57:6a:43:64:
ab:26:62:cb:a0:42:de:a6:27:bd:73:89:ce:87:22:62:f0:f1:
27:22:f5:00:ce:99:b5:40:d7:c7:57:34:3a:69:4d:8b:4e:51:
ab:b4:48:1d:3c:b4:c3:7b:ef:3e:cc:17:3e:b0:38:bf:8a:39:
c3:83:55:1e:a5:d9:8e:ce:8b:5e:38:84:3b:2c:5e:4e:82:e1:
13:ee:a8:22:ea:97:15:14:e7:34:6b:e5:56:89:76:c4:13:ac:
b2:0b:ef:1a:69:c4:54:7c:b2:fe:3b:20:e1:b3:07:12:a6:6d:
ca:65:78:59:ce:9c:16:ae:4c:ca:7c:de:10:0b:3c:e9:84:61:
ab:1c:88:0c:0a:4d:96:1a:83:ba:3b:d5:f3:48:f4:3d:3c:5d:
4c:7b:7f:d1:25:fd:20:f4:d4:0f:8b:63:9e:7a:ff:18:84:eb:
5c:16:9b:26:69:44:ec:95:91:69:4c:85:d5:a2:e7:9b:46:a4:
15:5b:73:70:d5:e9:55:1a:90:88:1b:e1:25:9a:54:37:6d:40:
b0:40:08:34:5c:c3:16:d5:67:fe:de:52:41:b3:2e:8f:4b:8d:
5f:12:75:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG9WcZNCzHBwrjPXv53RIVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTA0MTQwNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzhlOGNhMjdhNmM4MTc1OWE0NGEwMGZjY2VhZDhiNzUyYTllMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnHNeLkM4CFla140JaN3AHdFupZV
qP0I7IH6Ct9Irvzoh7KEyIP9jKp9jZk4J5J1Egn44Sqa14EZPoirIg1ZpWNtpHfc
3pFN0t3XDHZwvt1WqzmjkfS9Wmq1EMxr1dzl0jEYwXYwNb0GPKyfSPqOfjGPR0+i
g0L4InIVOOJKiDUMn7VvOKM1693xTFRqcG/yoMPINbhK7gLcSMasbdqsHtPF1v1J
hLww7ZsoE+eff1dzobsMnjYSbb8kFZxM9e/54jwHG2N5ObTY5wfaP57rhk0g939i
SEWwJkQnve8X8NixqpdjfalXzbBLsHQc+sxLU0w5+hI/xuVTil1iFbtXcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOOjKJ6bIF1mkSgD8zq2LdSqeGpMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYzQ2TW9ucHNnWFdhUktBUHpPcll0MUtwNGFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlf2MA0G
CSqGSIb3DQEBCwUAA4IBAQB6gaapmVvs6PS+Z/2Wygfpb4Taf5CFgUGqwGUJxH8K
n1dqQ2SrJmLLoELepie9c4nOhyJi8PEnIvUAzpm1QNfHVzQ6aU2LTlGrtEgdPLTD
e+8+zBc+sDi/ijnDg1UepdmOzoteOIQ7LF5OguET7qgi6pcVFOc0a+VWiXbEE6yy
C+8aacRUfLL+OyDhswcSpm3KZXhZzpwWrkzKfN4QCzzphGGrHIgMCk2WGoO6O9Xz
SPQ9PF1Me3/RJf0g9NQPi2Oeev8YhOtcFpsmaUTslZFpTIXVouebRqQVW3Nw1elV
GpCIG+ElmlQ3bUCwQAg0XMMW1Wf+3lJBsy6PS41fEnWI
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-fra.rpki-client.org