Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m4RNr8vodPrw7AKJ5AxtrBbrtHA.roa
File: m4RNr8vodPrw7AKJ5AxtrBbrtHA.roa (raw, json)
Hash identifier: QiasGR3BpIZYnQY5mG3g8Ya8zmBVMO5zZtHWaZzC0PA=
Subject key identifier: 9B:84:4D:AF:CB:E8:74:FA:F0:EC:02:89:E4:0C:6D:AC:16:EB:B4:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A956823926F944177A89DA1CC1741
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m4RNr8vodPrw7AKJ5AxtrBbrtHA.roa
Signing time: Tue 02 Jan 2024 12:33:57 +0000
ROA not before: Tue 02 Jan 2024 12:33:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216366
IP address blocks: 62.76.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:95:68:23:92:6f:94:41:77:a8:9d:a1:cc:17:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b844dafcbe874faf0ec0289e40c6dac16ebb470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:17:43:5e:82:fc:ab:6b:1c:b6:77:fa:d0:
aa:97:df:5c:ad:1c:a4:1f:d1:00:02:eb:7d:ae:c2:
dc:b0:c3:79:d9:d0:76:4a:36:60:a8:3a:e3:fc:b1:
e9:c4:12:de:10:db:ad:7e:28:85:09:3f:79:d5:4b:
92:2a:aa:a7:61:4c:b4:ef:2e:00:9f:d0:45:df:9a:
c8:96:85:00:39:91:6a:ea:64:5f:79:ca:bb:fe:32:
b7:f4:ee:5d:0f:66:7f:35:21:97:c0:90:40:c0:cd:
1b:7c:ff:60:4a:da:2a:4a:7d:06:bd:51:a6:db:d3:
25:e6:43:d7:3c:ec:64:8a:92:34:f6:b2:42:5d:34:
dd:a6:e6:6f:6d:a9:e3:cd:81:34:5e:31:e3:8e:77:
ac:2e:b4:8e:c4:92:d7:86:62:b4:9f:0d:01:42:72:
7f:c4:0d:0d:b4:75:14:ca:bb:ad:a9:25:bb:80:16:
b5:94:cd:b5:78:e4:7c:d1:35:21:45:f2:13:62:39:
01:c7:cb:e6:10:3f:96:a0:d0:48:11:a4:d0:d1:fe:
71:d8:25:88:81:f5:42:22:11:f2:80:47:22:c3:7d:
7f:07:76:65:a5:5e:ce:ee:b7:d4:40:93:8d:4c:07:
4a:e4:1c:3d:dc:7f:ff:02:c0:ea:80:2a:d2:98:f2:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:4D:AF:CB:E8:74:FA:F0:EC:02:89:E4:0C:6D:AC:16:EB:B4:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m4RNr8vodPrw7AKJ5AxtrBbrtHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e6:c9:d6:47:ea:6c:af:e6:27:71:26:bc:1c:1e:d7:cd:f9:
80:f2:40:40:ec:f3:61:61:4c:f5:8e:78:f5:ac:59:a5:eb:16:
57:8a:fa:7f:a6:01:1f:0d:31:4d:5a:e8:7e:ca:1d:9b:d9:26:
e5:a2:2e:7d:aa:12:d2:e8:20:78:b0:b6:be:26:08:7c:26:3f:
c0:21:ad:9c:00:ae:f7:de:99:09:35:54:14:ed:72:08:56:c5:
f0:44:7f:61:8f:b2:f5:36:7b:4b:ed:15:13:ad:ae:33:d3:ea:
6a:d4:5e:c4:15:c3:a3:c9:98:a8:59:b8:38:86:55:db:e2:ef:
93:4c:37:5c:c3:3e:79:6f:7b:7a:83:b5:49:12:40:5b:e4:5d:
9b:7f:2b:16:69:e0:0a:6c:6c:f6:27:90:f3:fd:8b:25:7f:78:
c3:a2:b4:37:b7:26:20:b0:41:4a:99:89:c1:e6:5c:79:43:90:
04:08:ef:1c:53:db:cb:1e:61:24:76:5d:a3:d1:e2:c2:ac:96:
f0:73:1e:4f:0c:5c:ef:e0:62:0b:a2:18:27:a1:42:52:f0:2b:
21:8e:bd:c4:3c:d7:39:00:09:44:2b:a9:39:6d:a0:45:5f:3c:
13:8f:bb:90:d1:92:76:ac:c8:7f:47:14:18:4f:81:47:1d:16:
11:f7:00:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKpVoI5JvlEF3qJ2hzBdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Yjg0NGRhZmNiZTg3NGZhZjBlYzAyODllNDBjNmRhYzE2ZWJiNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjQXQ16C/KtrHLZ3+tCql99crRyk
H9EAAut9rsLcsMN52dB2SjZgqDrj/LHpxBLeENutfiiFCT951UuSKqqnYUy07y4A
n9BF35rIloUAOZFq6mRfecq7/jK39O5dD2Z/NSGXwJBAwM0bfP9gStoqSn0GvVGm
29Ml5kPXPOxkipI09rJCXTTdpuZvbanjzYE0XjHjjnesLrSOxJLXhmK0nw0BQnJ/
xA0NtHUUyrutqSW7gBa1lM21eOR80TUhRfITYjkBx8vmED+WoNBIEaTQ0f5x2CWI
gfVCIhHygEciw31/B3ZlpV7O7rfUQJONTAdK5Bw93H//AsDqgCrSmPLKaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuETa/L6HT68OwCieQMbawW67RwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbTRSTnI4dm9kUHJ3N0FLSjVBeHRyQmJydEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzhMA0G
CSqGSIb3DQEBCwUAA4IBAQBM5snWR+psr+YncSa8HB7XzfmA8kBA7PNhYUz1jnj1
rFml6xZXivp/pgEfDTFNWuh+yh2b2Sbloi59qhLS6CB4sLa+Jgh8Jj/AIa2cAK73
3pkJNVQU7XIIVsXwRH9hj7L1NntL7RUTra4z0+pq1F7EFcOjyZioWbg4hlXb4u+T
TDdcwz55b3t6g7VJEkBb5F2bfysWaeAKbGz2J5Dz/Yslf3jDorQ3tyYgsEFKmYnB
5lx5Q5AECO8cU9vLHmEkdl2j0eLCrJbwcx5PDFzv4GILohgnoUJS8Cshjr3EPNc5
AAlEK6k5baBFXzwTj7uQ0ZJ2rMh/RxQYT4FHHRYR9wDp
-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org