Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iRWiyRgzgWYa8eEHLRhPw7BaIrA.roa
File: iRWiyRgzgWYa8eEHLRhPw7BaIrA.roa (raw, json)
Hash identifier: tQJCQ7zfxTbanfXeIVG2IyqbbEzgREu/adtWiO9WLB0=
Subject key identifier: 89:15:A2:C9:18:33:81:66:1A:F1:E1:07:2D:18:4F:C3:B0:5A:22:B0
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9376EF5F2456C8DA3A22F4BCD233E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iRWiyRgzgWYa8eEHLRhPw7BaIrA.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60093
IP address blocks: 46.234.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:37:6e:f5:f2:45:6c:8d:a3:a2:2f:4b:cd:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8915a2c9183381661af1e1072d184fc3b05a22b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:3a:06:e9:18:ae:46:cd:f3:17:42:b3:a9:
76:df:0c:c5:a1:a1:ec:f0:7d:c9:f3:e3:c4:4f:fb:
16:f8:6a:ae:ac:6f:96:1d:fa:ab:fd:6a:a2:12:88:
33:a6:a2:51:ac:48:a1:64:c8:da:86:0a:82:4e:98:
2e:47:ac:0c:bf:bb:79:a5:36:60:73:6d:85:86:ef:
fe:2e:77:e2:e1:eb:b5:12:98:4b:9c:96:7b:5f:cd:
10:c4:3c:a8:2a:ea:0b:b4:4b:d0:ac:cc:bf:9f:0d:
f5:ed:bf:19:7e:38:fd:f1:ef:0b:f3:bd:3a:49:4d:
23:a5:dc:14:1c:b9:ee:e0:cf:77:c6:aa:7e:12:29:
ac:9c:a6:f3:32:43:b6:e0:57:ff:0c:7a:46:a9:6b:
b9:7b:1a:da:2f:49:8d:e3:77:c9:d0:47:6a:d7:29:
13:35:4e:fc:a5:91:d0:75:37:de:36:f6:1c:96:64:
cc:af:bb:97:4a:64:86:72:6c:7a:01:82:99:4f:fc:
f3:29:96:0b:e2:96:f3:f8:ad:d4:8f:a7:8c:e0:c5:
93:b2:6b:9a:33:ca:d9:fb:80:84:a4:cf:47:d1:d5:
12:26:b4:64:dd:cc:3b:49:b6:31:4e:26:b2:19:31:
1d:e1:bf:7b:3b:6a:3a:3d:9b:7c:05:18:ac:19:e1:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:15:A2:C9:18:33:81:66:1A:F1:E1:07:2D:18:4F:C3:B0:5A:22:B0
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/iRWiyRgzgWYa8eEHLRhPw7BaIrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
40:21:23:71:1a:18:26:27:2d:dd:a5:55:9a:25:f7:a3:6b:06:
59:b3:cf:6d:bd:1e:22:d3:b4:99:e5:dd:a3:30:62:17:3c:0b:
94:7d:cc:c3:6b:ea:fb:5c:5b:e8:6c:05:a4:e4:1c:e7:bb:30:
41:2d:e5:f8:ff:58:02:8a:5f:ca:fa:81:8a:1d:cc:4f:39:5b:
bf:0c:4c:cb:f5:7d:96:0f:f4:66:e4:78:22:04:33:1d:c4:35:
fd:64:80:ca:38:fb:d3:2e:1a:ff:ff:36:fb:d3:62:9d:27:9c:
f9:e1:d1:10:35:40:29:79:b8:39:6d:99:73:3a:53:fa:70:ed:
1b:87:72:47:62:dd:25:2c:0f:ad:8d:e2:12:45:ae:67:41:ea:
32:4e:d9:d4:3b:92:28:6b:c3:83:44:af:62:47:8a:8e:2d:a5:
b6:17:50:47:29:56:f3:1e:83:dc:6d:b7:26:db:b0:13:20:04:
a0:f2:35:be:6a:c6:1a:0c:49:29:b4:fd:f7:5e:09:ae:b8:1d:
2b:dd:ce:7f:56:82:5b:46:1d:8c:f6:c3:d7:34:2b:41:8c:cf:
7a:ed:68:79:57:37:bc:0f:8e:51:39:fc:0c:46:b2:cc:a8:0d:
a2:c3:aa:3a:a7:82:d6:98:97:c7:20:3e:ee:ae:03:63:0c:12:
0e:1b:dd:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTdu9fJFbI2joi9LzSM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTE1YTJjOTE4MzM4MTY2MWFmMWUxMDcyZDE4NGZjM2IwNWEyMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEE6BukYrkbN8xdCs6l23wzFoaHs
8H3J8+PET/sW+GqurG+WHfqr/WqiEogzpqJRrEihZMjahgqCTpguR6wMv7t5pTZg
c22Fhu/+Lnfi4eu1EphLnJZ7X80QxDyoKuoLtEvQrMy/nw317b8Zfjj98e8L8706
SU0jpdwUHLnu4M93xqp+EimsnKbzMkO24Ff/DHpGqWu5exraL0mN43fJ0Edq1ykT
NU78pZHQdTfeNvYclmTMr7uXSmSGcmx6AYKZT/zzKZYL4pbz+K3Uj6eM4MWTsmua
M8rZ+4CEpM9H0dUSJrRk3cw7SbYxTiayGTEd4b97O2o6PZt8BRisGeHkCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkVoskYM4FmGvHhBy0YT8OwWiKwMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvaVJXaXlSZ3pnV1lhOGVFSExSaFB3N0JhSXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuoQMA0G
CSqGSIb3DQEBCwUAA4IBAQBAISNxGhgmJy3dpVWaJfejawZZs89tvR4i07SZ5d2j
MGIXPAuUfczDa+r7XFvobAWk5BznuzBBLeX4/1gCil/K+oGKHcxPOVu/DEzL9X2W
D/Rm5HgiBDMdxDX9ZIDKOPvTLhr//zb702KdJ5z54dEQNUApebg5bZlzOlP6cO0b
h3JHYt0lLA+tjeISRa5nQeoyTtnUO5Ioa8ODRK9iR4qOLaW2F1BHKVbzHoPcbbcm
27ATIASg8jW+asYaDEkptP33XgmuuB0r3c5/VoJbRh2M9sPXNCtBjM967Wh5Vze8
D45ROfwMRrLMqA2iw6o6p4LWmJfHID7urgNjDBIOG92P
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:42 2024 by rpki-client on console-ams.rpki-client.org