Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7jEwdkVz7EKB8O85bBGD4CWKBo.roa
File: C7jEwdkVz7EKB8O85bBGD4CWKBo.roa (raw, json)
Hash identifier: 9AVdwmWQZF9eZ0SgZY+jlRDbdn4hkrJNYHl24vk0zOI=
Subject key identifier: 0B:B8:C4:C1:D9:15:CF:B1:0A:07:C3:BC:E5:B0:46:0F:80:96:28:1A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018EA6B5547FE63181D813C0D681023244BE
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7jEwdkVz7EKB8O85bBGD4CWKBo.roa
Signing time: Thu 04 Apr 2024 01:24:45 +0000
ROA not before: Thu 04 Apr 2024 01:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215537
IP address blocks: 159.148.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a6:b5:54:7f:e6:31:81:d8:13:c0:d6:81:02:32:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Apr 4 01:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bb8c4c1d915cfb10a07c3bce5b0460f8096281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:6e:52:4a:40:9b:88:74:f2:32:48:d0:32:
f6:5f:69:aa:87:c4:60:e7:72:bf:f6:ed:ac:8b:f1:
1e:32:74:ef:df:76:0e:e5:46:0f:16:eb:5b:90:eb:
bb:83:a3:d6:4a:2a:a5:54:93:a3:2e:8c:aa:f8:f9:
19:61:6d:b5:2b:b0:2a:a0:76:d5:d5:1a:04:fc:a3:
60:6a:89:f3:ee:a7:e2:de:42:ad:a5:2d:9f:4a:1c:
31:1c:eb:f3:9b:21:b8:03:65:b3:67:e3:12:f2:dd:
51:0c:9e:e1:45:19:e4:4c:b4:5c:b7:da:f7:1e:28:
0a:2c:c7:76:b0:4f:e8:d0:db:6c:f0:27:57:34:7b:
6d:af:b4:0f:28:af:31:58:58:0b:33:fe:4b:77:16:
4a:32:60:b2:e2:63:51:6a:f4:d6:40:cc:c4:1d:14:
d5:6d:f5:c0:7a:80:a1:25:11:bc:d2:ec:b8:9c:8b:
e9:ee:ce:e3:20:bb:ef:46:56:19:52:11:40:f2:bf:
65:ae:31:3a:ce:f5:25:78:2a:92:e8:85:c0:8c:43:
8f:18:0e:73:86:a8:95:64:03:62:a4:b8:64:5c:96:
89:63:ba:42:ff:ef:86:19:a5:14:10:1d:3f:1a:74:
bb:37:48:b9:12:1d:7d:96:cc:8e:ed:bf:08:15:d2:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B8:C4:C1:D9:15:CF:B1:0A:07:C3:BC:E5:B0:46:0F:80:96:28:1A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C7jEwdkVz7EKB8O85bBGD4CWKBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.124.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:86:55:4e:37:09:0d:05:0c:d4:3a:20:08:12:7e:b3:c0:2c:
24:9c:a1:c4:a6:c8:83:4b:d5:25:52:0b:75:99:28:aa:03:fc:
68:4b:7a:f9:a8:bf:4e:ab:49:b1:7c:64:39:08:57:90:8f:92:
a5:f7:ba:8e:3b:d4:de:56:11:25:71:87:05:9e:89:15:f3:03:
d9:21:c9:cb:66:81:bf:f2:4c:5c:77:a2:29:cb:59:db:30:2a:
f7:bb:99:64:61:66:3a:67:5b:33:bd:0d:37:f0:da:27:a1:22:
be:6f:1e:a1:01:f8:a9:28:1b:2e:d6:f4:02:b1:47:1f:32:0c:
66:cc:70:a0:52:8f:81:f8:fc:e8:9a:97:73:90:3f:fe:74:56:
35:9b:e3:7d:33:9d:f8:a1:96:42:aa:f5:a3:80:e9:89:a3:81:
7a:33:6d:db:e4:11:3f:8d:43:a3:85:56:e2:42:39:bc:16:3f:
ae:c0:3e:93:85:0b:e0:8e:ed:0b:70:bb:91:c6:ac:f4:37:5c:
35:f4:51:5e:25:89:d9:c9:8a:7b:57:57:cd:78:85:b1:47:31:
fc:dd:f9:1b:09:b5:3d:ba:d5:ed:fd:26:22:56:51:cc:d2:29:
a2:eb:7f:8c:79:e5:ac:c1:18:d6:24:54:30:e4:b0:ff:30:86:
ad:f0:8f:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6mtVR/5jGB2BPA1oECMkS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwNDA0MDEyNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmI4YzRjMWQ5MTVjZmIxMGEwN2MzYmNlNWIwNDYwZjgwOTYyODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK1uUkpAm4h08jJI0DL2X2mqh8Rg
53K/9u2si/EeMnTv33YO5UYPFutbkOu7g6PWSiqlVJOjLoyq+PkZYW21K7AqoHbV
1RoE/KNgaonz7qfi3kKtpS2fShwxHOvzmyG4A2WzZ+MS8t1RDJ7hRRnkTLRct9r3
HigKLMd2sE/o0Nts8CdXNHttr7QPKK8xWFgLM/5LdxZKMmCy4mNRavTWQMzEHRTV
bfXAeoChJRG80uy4nIvp7s7jILvvRlYZUhFA8r9lrjE6zvUleCqS6IXAjEOPGA5z
hqiVZANipLhkXJaJY7pC/++GGaUUEB0/GnS7N0i5Eh19lsyO7b8IFdLnGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAu4xMHZFc+xCgfDvOWwRg+AligaMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvQzdqRXdka1Z6N0VLQjhPODViQkdENENXS0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5R8MA0G
CSqGSIb3DQEBCwUAA4IBAQBrhlVONwkNBQzUOiAIEn6zwCwknKHEpsiDS9UlUgt1
mSiqA/xoS3r5qL9Oq0mxfGQ5CFeQj5Kl97qOO9TeVhElcYcFnokV8wPZIcnLZoG/
8kxcd6Ipy1nbMCr3u5lkYWY6Z1szvQ038NonoSK+bx6hAfipKBsu1vQCsUcfMgxm
zHCgUo+B+PzompdzkD/+dFY1m+N9M534oZZCqvWjgOmJo4F6M23b5BE/jUOjhVbi
Qjm8Fj+uwD6ThQvgju0LcLuRxqz0N1w19FFeJYnZyYp7V1fNeIWxRzH83fkbCbU9
utXt/SYiVlHM0imi63+MeeWswRjWJFQw5LD/MIat8I8G
-----END CERTIFICATE-----
Generated at Wed May 1 20:55:51 2024 by rpki-client on console-ams.rpki-client.org