Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rATHEQpcYXsj544AN3FvEz-jAZ0.roa
File: rATHEQpcYXsj544AN3FvEz-jAZ0.roa (raw, json)
Hash identifier: lbNqB1C0ovddQAWMPQy676TDy1KXR25jgDrQnrDOztg=
Subject key identifier: AC:04:C7:11:0A:5C:61:7B:23:E7:8E:00:37:71:6F:13:3F:A3:01:9D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E17C3F329AD74D0F8F7E02A149B88AB0F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rATHEQpcYXsj544AN3FvEz-jAZ0.roa
Signing time: Thu 07 Mar 2024 07:15:01 +0000
ROA not before: Thu 07 Mar 2024 07:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215594
IP address blocks: 212.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:c3:f3:29:ad:74:d0:f8:f7:e0:2a:14:9b:88:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 7 07:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac04c7110a5c617b23e78e0037716f133fa3019d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:3f:ec:89:05:18:1f:df:8f:4a:ec:87:42:
36:b9:8a:43:8d:ac:30:54:24:4b:9c:f3:a3:38:4c:
f6:12:e4:c7:11:c6:15:90:35:2b:de:1a:b9:5c:75:
80:5b:40:4d:e7:60:1e:c8:b9:1e:98:2d:cf:fa:07:
93:8f:dc:fb:cf:e7:c9:73:b7:50:9d:61:65:ea:8b:
56:1b:b3:2b:ea:e6:cd:71:ee:71:15:b8:28:c4:30:
61:ef:32:8b:ab:70:80:f8:8f:1d:51:98:31:ce:c3:
e8:37:a3:02:23:1c:c8:1d:ff:ec:52:5b:73:e9:45:
d4:0b:68:f9:af:29:39:2d:7e:48:07:20:69:40:d6:
ab:d6:53:07:8c:40:30:70:15:5e:86:29:de:a7:39:
1d:4b:d2:e5:5e:9d:4f:fc:7f:88:e2:aa:83:b1:2d:
90:7a:92:58:62:45:45:35:b1:75:dc:11:99:9b:ea:
f0:2c:00:70:81:6c:eb:4b:49:c6:3c:81:61:7e:69:
ae:5a:e1:a2:73:7a:ee:fa:12:c6:a2:50:63:d3:18:
4f:d1:b2:e8:e0:a5:08:56:ab:22:07:16:d7:d1:5e:
b6:30:20:58:82:f9:d7:50:55:11:5d:59:03:f2:cd:
2d:8b:15:18:dd:b3:31:0c:c3:ec:02:03:dd:63:0d:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:C7:11:0A:5C:61:7B:23:E7:8E:00:37:71:6F:13:3F:A3:01:9D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rATHEQpcYXsj544AN3FvEz-jAZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
46:55:a8:e9:a3:63:fc:9a:34:b4:cf:c7:a3:10:33:e8:e0:04:
86:3e:06:4e:f2:4c:e4:b3:97:93:08:4f:32:e8:bb:75:3a:6e:
f5:0d:c4:be:d5:7b:94:8e:1f:17:28:9a:a9:c9:43:e6:6c:7b:
07:da:d7:76:23:fb:21:ce:f2:fb:f4:37:31:f5:81:16:3e:dc:
b0:6f:21:c4:89:42:a3:f5:ec:91:aa:26:36:24:ce:4e:e6:41:
02:59:cb:b4:78:ae:f8:2f:ee:f8:5a:74:9c:09:e4:f9:35:a9:
87:32:79:12:54:ec:ea:89:f7:8a:03:93:17:10:22:24:8d:1b:
54:4e:d2:8a:03:19:9c:e9:fd:85:8a:13:5c:62:f2:1f:4d:15:
f1:f0:de:e7:54:55:ec:0a:74:d5:29:b0:e5:44:1f:b2:13:da:
9a:a4:8e:a5:b9:7b:a1:86:ea:9e:e9:90:f3:2f:73:1d:83:74:
cb:71:cc:1e:c8:12:28:ff:db:b4:24:1e:97:ca:c7:dc:6e:f6:
9f:37:ed:76:0d:82:c3:e0:74:ab:d3:e5:de:72:06:f8:a8:5a:
6c:0b:78:b5:0b:b8:46:09:ff:a0:2c:9a:8c:eb:0e:8e:3a:c5:
9a:49:f3:86:4c:82:82:d9:0a:5f:17:5f:49:60:c4:15:ec:20:
7c:e6:ed:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4Xw/MprXTQ+PfgKhSbiKsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzA3MDcxNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzA0YzcxMTBhNWM2MTdiMjNlNzhlMDAzNzcxNmYxMzNmYTMwMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjY/7IkFGB/fj0rsh0I2uYpDjaww
VCRLnPOjOEz2EuTHEcYVkDUr3hq5XHWAW0BN52AeyLkemC3P+geTj9z7z+fJc7dQ
nWFl6otWG7Mr6ubNce5xFbgoxDBh7zKLq3CA+I8dUZgxzsPoN6MCIxzIHf/sUltz
6UXUC2j5ryk5LX5IByBpQNar1lMHjEAwcBVehinepzkdS9LlXp1P/H+I4qqDsS2Q
epJYYkVFNbF13BGZm+rwLABwgWzrS0nGPIFhfmmuWuGic3ru+hLGolBj0xhP0bLo
4KUIVqsiBxbX0V62MCBYgvnXUFURXVkD8s0tixUY3bMxDMPsAgPdYw1M9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwExxEKXGF7I+eOADdxbxM/owGdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvckFUSEVRcGNZWHNqNTQ0QU4zRnZFei1qQVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfMMA0G
CSqGSIb3DQEBCwUAA4IBAQBGVajpo2P8mjS0z8ejEDPo4ASGPgZO8kzks5eTCE8y
6Lt1Om71DcS+1XuUjh8XKJqpyUPmbHsH2td2I/shzvL79Dcx9YEWPtywbyHEiUKj
9eyRqiY2JM5O5kECWcu0eK74L+74WnScCeT5NamHMnkSVOzqifeKA5MXECIkjRtU
TtKKAxmc6f2FihNcYvIfTRXx8N7nVFXsCnTVKbDlRB+yE9qapI6luXuhhuqe6ZDz
L3Mdg3TLccweyBIo/9u0JB6XysfcbvafN+12DYLD4HSr0+Xecgb4qFpsC3i1C7hG
Cf+gLJqM6w6OOsWaSfOGTIKC2QpfF19JYMQV7CB85u0F
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org