Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/37urwSpsskhn4TdTQVkFtWVe1EI.roa
File: 37urwSpsskhn4TdTQVkFtWVe1EI.roa (raw, json)
Hash identifier: hpZ5qieyQsOnP7ItCj1K5TEFFphTSjCp/PtKPenAIwA=
Subject key identifier: DF:BB:AB:C1:2A:6C:B2:48:67:E1:37:53:41:59:05:B5:65:5E:D4:42
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80137916AF2C0A8B34296940B5FABB4
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/37urwSpsskhn4TdTQVkFtWVe1EI.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213022
IP address blocks: 159.148.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:91:6a:f2:c0:a8:b3:42:96:94:0b:5f:ab:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfbbabc12a6cb24867e13753415905b5655ed442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:b6:84:b4:8e:4f:ee:40:13:4c:16:31:dd:
62:18:02:bb:48:e6:47:0e:f2:4e:3d:3c:3a:94:e2:
e8:6b:7c:5f:9b:05:a8:36:3d:04:48:32:05:24:c3:
ce:65:b9:d4:9b:e4:8d:f0:90:7a:90:09:94:ac:cc:
4f:87:40:e6:53:0a:4b:2f:be:4d:0b:d3:9c:de:0a:
2d:3f:41:cc:24:de:a6:5d:95:bc:6c:9c:de:4a:b7:
a1:3a:96:4d:07:05:86:57:60:f5:c6:80:e4:41:36:
48:d8:68:ba:d6:92:f8:48:1c:f8:37:0c:5d:3c:c1:
23:40:d6:6a:9a:d5:7d:72:0b:61:78:7a:20:35:f3:
e2:ab:56:01:1a:d4:ce:c8:6a:11:e9:e1:f7:fe:3d:
c1:f9:2f:cb:69:6e:3b:b9:dd:ee:c0:6c:cc:0b:b4:
f4:6b:f4:23:3a:2c:a1:53:0e:de:f0:de:8f:2a:8c:
d1:05:cc:fc:26:e1:01:75:11:e9:9c:da:bb:4f:b3:
48:74:c5:80:e4:f5:70:72:e0:47:0e:bd:7b:ba:ef:
76:2d:b4:85:db:a3:f1:75:be:ae:a4:90:ce:37:46:
f0:85:bd:29:ba:f3:01:47:7e:2c:77:ca:c3:4a:fa:
0e:2d:a0:5e:6c:15:18:e5:65:95:0a:3e:89:95:04:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:AB:C1:2A:6C:B2:48:67:E1:37:53:41:59:05:B5:65:5E:D4:42
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/37urwSpsskhn4TdTQVkFtWVe1EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.103.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b9:64:27:f9:84:75:b9:7b:0f:62:cb:5d:9b:0a:11:b2:c2:
27:a4:b7:9f:d7:aa:13:96:f2:18:db:ad:90:7b:d2:ca:05:cd:
89:2e:65:52:a9:2b:e3:ed:f0:a7:d1:11:54:a9:34:99:52:7d:
ca:43:67:6e:de:dd:0e:ad:69:84:fe:be:78:0a:0a:cf:0f:97:
0f:11:30:92:bf:31:f8:c5:53:86:85:f2:8b:e2:0a:cc:42:ad:
a0:e0:38:0d:c9:45:d7:86:6a:b6:14:60:af:58:34:70:38:8d:
37:46:3d:ba:74:87:ca:3a:b6:ab:0e:f8:93:59:80:20:21:4d:
b5:d0:d6:b5:6f:b7:34:e8:fe:53:15:1f:50:b7:60:d8:01:a9:
ea:bd:aa:59:55:7f:0a:41:d8:47:6d:57:2d:56:b6:d2:f8:90:
73:66:50:0f:7a:97:8e:7c:2f:af:ef:af:02:a1:b6:14:7d:c1:
91:1c:bb:49:ae:49:bd:7e:82:47:4b:d4:00:19:cb:db:4a:09:
c4:08:9f:cb:86:58:df:79:e9:69:e0:21:71:e3:42:64:e6:b6:
e4:ad:bf:20:44:b2:4f:65:c4:5f:b8:94:07:b4:52:20:2f:b2:
70:fb:59:ac:da:81:55:f9:57:ba:27:29:9b:4f:94:bf:2a:1f:
1a:a4:ac:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATeRavLAqLNClpQLX6u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmJiYWJjMTJhNmNiMjQ4NjdlMTM3NTM0MTU5MDViNTY1NWVkNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSK2hLSOT+5AE0wWMd1iGAK7SOZH
DvJOPTw6lOLoa3xfmwWoNj0ESDIFJMPOZbnUm+SN8JB6kAmUrMxPh0DmUwpLL75N
C9Oc3gotP0HMJN6mXZW8bJzeSrehOpZNBwWGV2D1xoDkQTZI2Gi61pL4SBz4Nwxd
PMEjQNZqmtV9cgtheHogNfPiq1YBGtTOyGoR6eH3/j3B+S/LaW47ud3uwGzMC7T0
a/QjOiyhUw7e8N6PKozRBcz8JuEBdRHpnNq7T7NIdMWA5PVwcuBHDr17uu92LbSF
26Pxdb6upJDON0bwhb0puvMBR34sd8rDSvoOLaBebBUY5WWVCj6JlQR8EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+7q8EqbLJIZ+E3U0FZBbVlXtRCMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvMzd1cndTcHNza2huNFRkVFFWa0Z0V1ZlMUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5RnMA0G
CSqGSIb3DQEBCwUAA4IBAQB5uWQn+YR1uXsPYstdmwoRssInpLef16oTlvIY262Q
e9LKBc2JLmVSqSvj7fCn0RFUqTSZUn3KQ2du3t0OrWmE/r54CgrPD5cPETCSvzH4
xVOGhfKL4grMQq2g4DgNyUXXhmq2FGCvWDRwOI03Rj26dIfKOrarDviTWYAgIU21
0Na1b7c06P5TFR9Qt2DYAanqvapZVX8KQdhHbVctVrbS+JBzZlAPepeOfC+v768C
obYUfcGRHLtJrkm9foJHS9QAGcvbSgnECJ/Lhljfeelp4CFx40Jk5rbkrb8gRLJP
ZcRfuJQHtFIgL7Jw+1ms2oFV+Ve6JymbT5S/Kh8apKz+
-----END CERTIFICATE-----
Generated at Wed May 1 18:30:38 2024 by rpki-client on console-ams.rpki-client.org