Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PbGYQhgcYuBk8nmBGrsU3udXhm4.roa
File: PbGYQhgcYuBk8nmBGrsU3udXhm4.roa (raw, json)
Hash identifier: 9AcORpepTXBKYcJw/8EPZad0SlQ9OlhIL+tM1Pn4RhI=
Subject key identifier: 3D:B1:98:42:18:1C:62:E0:64:F2:79:81:1A:BB:14:DE:E7:57:86:6E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801362DA3EBCF8A6AEF0C7763EF30CB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PbGYQhgcYuBk8nmBGrsU3udXhm4.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208030
IP address blocks: 46.19.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:36:2d:a3:eb:cf:8a:6a:ef:0c:77:63:ef:30:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db19842181c62e064f279811abb14dee757866e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:f8:07:c0:d4:e6:f5:de:79:0d:bc:b0:1f:
e4:6f:39:4d:4e:0d:48:02:97:d9:fc:ec:a4:5c:3b:
ba:0e:b2:5d:88:cf:35:4d:3e:ce:61:41:4d:a4:55:
89:af:35:66:e7:b9:f9:e8:0a:18:d3:8a:eb:c9:b2:
da:e5:65:8b:2c:fa:0f:b5:f5:79:d7:92:ce:0a:b2:
9c:f3:68:37:3d:c0:4e:78:da:07:1c:32:bd:df:c6:
70:e1:9a:65:b5:ca:78:3b:40:e8:ee:90:f2:d7:4f:
be:bb:2b:02:a8:32:39:22:fc:f9:e7:24:97:35:f3:
e2:55:de:8d:11:62:28:b1:68:9d:67:d8:d3:fd:f5:
ec:3b:2c:0a:37:4a:96:30:76:a2:49:80:9c:73:b0:
30:e5:ef:ce:5b:d3:33:94:1a:3b:ce:28:bc:0d:c4:
95:cb:ff:d5:79:b8:e9:46:f0:a1:a0:5f:7f:81:c4:
20:6f:db:a5:42:81:99:66:a6:1d:3c:5f:3d:ed:70:
fa:2d:27:0f:ba:bc:8f:7d:0a:d4:38:b6:43:b9:2a:
45:96:a6:e3:0d:7e:40:d9:80:4b:7a:0c:5e:48:e0:
4a:56:49:40:40:3b:cb:7d:7f:69:d6:52:fa:d2:d5:
89:58:28:5e:48:24:14:b1:82:37:a8:48:d3:73:9d:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:98:42:18:1C:62:E0:64:F2:79:81:1A:BB:14:DE:E7:57:86:6E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PbGYQhgcYuBk8nmBGrsU3udXhm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.200.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ad:07:de:ff:1c:d5:b1:49:4d:44:a1:cb:ad:bc:18:32:c1:
f4:fa:54:66:fd:16:e5:8f:df:a0:06:9d:c8:29:92:77:01:e3:
0b:42:44:63:b0:c9:e7:22:3d:43:ea:9d:4c:d2:dc:8d:15:dc:
f5:07:e4:51:d2:d5:cf:4e:a3:d6:c6:33:9f:c2:ee:cb:db:ec:
13:81:6d:58:4d:80:7c:db:4e:0b:03:69:5b:db:c1:da:97:3c:
e7:7c:4f:ba:7b:93:d9:7f:ae:11:f4:fe:d1:79:29:f4:ba:ac:
a5:fa:ab:0e:8f:81:a9:7a:1d:d3:e7:58:5a:61:8b:5b:f2:69:
6f:88:08:2d:bb:e7:8e:40:4f:81:27:06:02:f3:0e:6e:6d:3b:
e5:7d:58:4d:d9:1b:c0:2c:a0:3a:5b:ec:a3:e8:62:ec:9d:58:
61:d2:6a:e5:e1:f9:7a:4b:83:86:6b:df:ec:9f:d9:9a:35:5a:
19:31:ab:3c:e6:84:6c:91:e4:46:84:d7:9a:ba:af:ab:58:f7:
1e:cc:9c:ef:9b:4f:ee:e3:9e:bf:b8:fe:b1:e6:5c:32:7a:94:
be:7f:54:b5:3d:37:ba:6d:49:4e:3c:43:de:3f:e6:b7:59:7e:
a2:24:97:6a:7f:6c:70:66:d8:07:77:ee:4a:8c:33:7e:42:01:
a2:54:a0:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATYto+vPimrvDHdj7zDLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGIxOTg0MjE4MWM2MmUwNjRmMjc5ODExYWJiMTRkZWU3NTc4NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn34B8DU5vXeeQ28sB/kbzlNTg1I
ApfZ/OykXDu6DrJdiM81TT7OYUFNpFWJrzVm57n56AoY04rrybLa5WWLLPoPtfV5
15LOCrKc82g3PcBOeNoHHDK938Zw4Zpltcp4O0Do7pDy10++uysCqDI5Ivz55ySX
NfPiVd6NEWIosWidZ9jT/fXsOywKN0qWMHaiSYCcc7Aw5e/OW9MzlBo7zii8DcSV
y//VebjpRvChoF9/gcQgb9ulQoGZZqYdPF897XD6LScPuryPfQrUOLZDuSpFlqbj
DX5A2YBLegxeSOBKVklAQDvLfX9p1lL60tWJWCheSCQUsYI3qEjTc50J9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD2xmEIYHGLgZPJ5gRq7FN7nV4ZuMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvUGJHWVFoZ2NZdUJrOG5tQkdyc1UzdWRYaG00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhPIMA0G
CSqGSIb3DQEBCwUAA4IBAQAJrQfe/xzVsUlNRKHLrbwYMsH0+lRm/Rblj9+gBp3I
KZJ3AeMLQkRjsMnnIj1D6p1M0tyNFdz1B+RR0tXPTqPWxjOfwu7L2+wTgW1YTYB8
204LA2lb28HalzznfE+6e5PZf64R9P7ReSn0uqyl+qsOj4Gpeh3T51haYYtb8mlv
iAgtu+eOQE+BJwYC8w5ubTvlfVhN2RvALKA6W+yj6GLsnVhh0mrl4fl6S4OGa9/s
n9maNVoZMas85oRskeRGhNeauq+rWPcezJzvm0/u456/uP6x5lwyepS+f1S1PTe6
bUlOPEPeP+a3WX6iJJdqf2xwZtgHd+5KjDN+QgGiVKAF
-----END CERTIFICATE-----
Generated at Wed May 1 16:39:26 2024 by rpki-client on console-fra.rpki-client.org