Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cPoz_oyo4KzD5jgYUxKGNUH0l6A.roa
File: cPoz_oyo4KzD5jgYUxKGNUH0l6A.roa (raw, json)
Hash identifier: opTOOItsXoQZgr1lQ1D2gEsz0wvwWVJUccrErZ4vAZM=
Subject key identifier: 70:FA:33:FE:8C:A8:E0:AC:C3:E6:38:18:53:12:86:35:41:F4:97:A0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80132071C18275BC5CE7520226340B1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cPoz_oyo4KzD5jgYUxKGNUH0l6A.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201611
IP address blocks: 217.69.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:32:07:1c:18:27:5b:c5:ce:75:20:22:63:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70fa33fe8ca8e0acc3e638185312863541f497a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:92:cb:d8:90:f2:56:54:09:7f:b1:d8:67:
48:73:56:0a:a6:5d:aa:e6:13:cf:04:d9:28:1a:51:
a7:71:0c:40:25:fe:27:66:94:8a:b1:38:38:ce:31:
f7:5f:b5:fa:90:44:7b:03:c1:0e:01:73:83:3f:c2:
07:8d:66:72:7b:ff:82:97:ea:01:97:2c:70:09:21:
08:7e:96:16:57:c5:7d:d2:01:80:18:61:35:c6:11:
21:1f:af:56:45:29:16:10:28:a8:3f:d1:df:f2:04:
0e:25:60:e8:66:71:c8:a3:f4:3b:86:0c:5d:b5:e6:
c0:44:fb:78:ec:6b:93:66:06:b8:01:9a:39:59:ab:
2f:ad:8e:22:c0:b5:bc:f7:c2:ed:4f:af:5c:4d:f4:
65:4a:cf:d0:3b:82:b5:0a:2e:cf:28:7a:99:c8:1f:
a7:d8:5e:ce:38:6b:e6:cd:d4:79:53:fe:60:b1:29:
58:15:bb:43:09:8c:c0:8a:89:28:54:33:d4:17:6e:
fb:57:b5:c2:fb:90:7a:23:04:af:47:6e:62:70:58:
a9:fd:bb:30:ae:8c:4b:d1:32:1a:b7:c6:c6:d6:6c:
26:86:0d:40:da:05:1c:c4:29:d3:00:7d:7e:15:32:
f7:c1:01:68:d2:bb:95:39:8b:f1:93:9c:5f:86:66:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:33:FE:8C:A8:E0:AC:C3:E6:38:18:53:12:86:35:41:F4:97:A0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cPoz_oyo4KzD5jgYUxKGNUH0l6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.69.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5e:04:93:38:c2:4d:50:0d:46:23:51:88:5e:aa:0f:62:d8:
16:4d:11:30:74:7d:56:f7:01:15:cc:df:6d:35:44:31:43:85:
0f:25:23:5c:32:74:e2:bf:41:e6:bb:e7:57:d6:a5:ca:de:41:
8b:98:f6:9c:35:bc:a3:0e:d1:db:df:87:4e:3c:0f:41:44:8b:
7b:ce:40:35:8d:f1:39:48:e8:78:76:77:41:e9:fc:f7:89:c3:
2d:6c:41:c1:5a:f9:ce:a3:02:09:15:8b:1c:64:e7:8b:cb:1e:
ec:2c:d8:79:ce:37:c4:e8:e2:a1:83:da:cc:2a:ef:ff:3f:e8:
63:15:7b:35:69:05:8d:e8:00:c7:fc:2c:0f:54:b6:21:70:5c:
5c:60:b6:c2:c5:b1:d5:f7:22:09:d6:3c:8a:db:c9:82:82:1c:
23:5d:69:87:eb:1c:aa:df:d4:34:bb:ff:43:57:57:d6:0d:2c:
f5:7e:b4:0d:b7:5f:26:03:55:36:c9:7a:7e:c7:11:3f:f3:ae:
de:79:2e:e4:9a:95:92:00:e9:bf:74:ca:8a:b1:b0:4f:88:76:
02:75:57:04:13:2d:07:d9:d0:eb:2a:e8:62:d3:b6:a8:bc:8e:
e1:30:ed:6b:7b:6f:a7:36:29:93:91:29:4f:c7:d6:3e:c5:80:
85:36:ff:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATIHHBgnW8XOdSAiY0CxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGZhMzNmZThjYThlMGFjYzNlNjM4MTg1MzEyODYzNTQxZjQ5N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloaSy9iQ8lZUCX+x2GdIc1YKpl2q
5hPPBNkoGlGncQxAJf4nZpSKsTg4zjH3X7X6kER7A8EOAXODP8IHjWZye/+Cl+oB
lyxwCSEIfpYWV8V90gGAGGE1xhEhH69WRSkWECioP9Hf8gQOJWDoZnHIo/Q7hgxd
tebARPt47GuTZga4AZo5WasvrY4iwLW898LtT69cTfRlSs/QO4K1Ci7PKHqZyB+n
2F7OOGvmzdR5U/5gsSlYFbtDCYzAiokoVDPUF277V7XC+5B6IwSvR25icFip/bsw
roxL0TIat8bG1mwmhg1A2gUcxCnTAH1+FTL3wQFo0ruVOYvxk5xfhmay0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHD6M/6MqOCsw+Y4GFMShjVB9JegMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvY1Bvel9veW80S3pENWpnWVV4S0dOVUgwbDZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UV4MA0G
CSqGSIb3DQEBCwUAA4IBAQCPXgSTOMJNUA1GI1GIXqoPYtgWTREwdH1W9wEVzN9t
NUQxQ4UPJSNcMnTiv0Hmu+dX1qXK3kGLmPacNbyjDtHb34dOPA9BRIt7zkA1jfE5
SOh4dndB6fz3icMtbEHBWvnOowIJFYscZOeLyx7sLNh5zjfE6OKhg9rMKu//P+hj
FXs1aQWN6ADH/CwPVLYhcFxcYLbCxbHV9yIJ1jyK28mCghwjXWmH6xyq39Q0u/9D
V1fWDSz1frQNt18mA1U2yXp+xxE/867eeS7kmpWSAOm/dMqKsbBPiHYCdVcEEy0H
2dDrKuhi07aovI7hMO1re2+nNimTkSlPx9Y+xYCFNv8C
-----END CERTIFICATE-----
Generated at Wed May 1 18:30:38 2024 by rpki-client on console-ams.rpki-client.org