Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/SnQyc28uJ6gsDY-MTz6cRI4qo2o.roa
File: SnQyc28uJ6gsDY-MTz6cRI4qo2o.roa (raw, json)
Hash identifier: onG9pXBaGelyIrfUtnfCDXFcnOFxvs9n2wreFS9OlHc=
Subject key identifier: 4A:74:32:73:6F:2E:27:A8:2C:0D:8F:8C:4F:3E:9C:44:8E:2A:A3:6A
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 018CC79551A59D6D1EC9425C564B235FB2FF
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/SnQyc28uJ6gsDY-MTz6cRI4qo2o.roa
Signing time: Tue 02 Jan 2024 00:31:40 +0000
ROA not before: Tue 02 Jan 2024 00:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 51.199.252.0/23 maxlen: 24
51.199.254.0/23 maxlen: 24
2a06:5901:8000::/40 maxlen: 48
2a06:5901:8100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:51:a5:9d:6d:1e:c9:42:5c:56:4b:23:5f:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 2 00:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a7432736f2e27a82c0d8f8c4f3e9c448e2aa36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:e6:d2:a8:be:2b:2b:3d:94:81:ba:2f:6a:
b6:fe:bd:5e:b5:e2:81:0c:cc:94:63:be:35:b6:85:
02:f2:f4:66:37:3b:c2:32:dc:31:78:8f:35:68:ba:
39:74:4b:9c:9c:6e:86:b5:f7:d3:95:36:ec:e7:c1:
70:53:3b:e8:9a:40:84:c0:87:49:09:78:46:46:bc:
89:1c:bc:16:02:75:0e:cd:7b:da:00:50:5f:21:25:
af:5a:2b:0b:a2:1c:ff:d1:e6:b6:6f:e3:1d:fe:70:
5f:b5:c3:e1:55:33:2f:a2:c6:98:df:65:6c:33:5b:
f1:4b:66:cf:44:11:87:09:a8:5d:35:92:e2:e8:28:
f0:72:32:b6:22:d6:54:9c:1e:c3:c7:94:c5:b4:17:
0d:78:0a:e0:de:6d:7b:26:47:f6:47:c5:07:b3:66:
23:cb:bf:08:36:d2:cb:09:4b:16:9a:d0:a3:0f:0e:
cc:47:50:02:2e:0f:2c:9a:19:ba:20:88:40:d2:37:
21:d5:db:0c:cb:9f:7a:e6:92:6f:f0:1e:e1:f4:f2:
02:e9:09:c3:61:ee:74:05:c6:34:47:4e:82:91:e4:
33:40:f3:42:5b:ee:df:64:40:b8:a2:05:21:0d:3a:
a1:2a:3b:65:77:e2:47:1c:c2:11:8f:6b:50:20:4f:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:32:73:6F:2E:27:A8:2C:0D:8F:8C:4F:3E:9C:44:8E:2A:A3:6A
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/SnQyc28uJ6gsDY-MTz6cRI4qo2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.199.252.0/22
IPv6:
2a06:5901:8000::/39
Signature Algorithm: sha256WithRSAEncryption
87:22:07:52:da:8b:26:20:0a:d7:38:11:d4:26:c5:c6:61:7a:
cd:c7:6c:3a:38:04:cc:bc:62:ab:b5:3a:ea:91:26:8e:81:a5:
83:87:ef:7b:39:80:16:7f:0e:98:b4:b3:6d:57:18:24:f2:db:
1a:b6:75:57:a4:1c:3f:e1:0a:12:5f:27:df:ef:79:d9:75:3f:
95:94:c0:74:c0:ed:36:1f:35:e9:97:4a:39:35:fd:74:7e:e3:
4b:30:70:3e:74:c8:86:bb:c3:53:db:68:d5:2a:3f:97:49:06:
a5:19:c6:be:ec:8f:c6:73:d7:72:7e:4a:c2:36:11:1f:d3:36:
34:97:2e:23:cd:53:92:98:5f:3d:fb:dd:f2:c9:00:e1:04:b0:
9b:cb:ff:40:03:a9:ae:8c:ab:06:cd:49:1c:20:bc:1a:ec:09:
40:da:ca:f4:14:82:2a:5d:0c:fd:34:83:20:43:2b:6f:da:dd:
c5:55:e5:82:1d:72:0b:e0:f3:7d:4e:6d:21:e5:bb:55:a0:00:
59:54:71:ec:19:53:24:c5:8e:17:16:a8:ef:fe:aa:0e:d1:c1:
74:bb:94:c9:92:04:4b:54:23:45:1d:6f:94:49:d0:eb:6d:e2:
86:53:b4:7d:e5:bc:e3:a8:90:97:b1:6d:0c:61:42:2e:3e:89:
5c:b3:cd:f9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzHlVGlnW0eyUJcVksjX7L/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx
ZGFjODIwHhcNMjQwMTAyMDAzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTc0MzI3MzZmMmUyN2E4MmMwZDhmOGM0ZjNlOWM0NDhlMmFhMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHm0qi+Kys9lIG6L2q2/r1eteKB
DMyUY741toUC8vRmNzvCMtwxeI81aLo5dEucnG6GtffTlTbs58FwUzvomkCEwIdJ
CXhGRryJHLwWAnUOzXvaAFBfISWvWisLohz/0ea2b+Md/nBftcPhVTMvosaY32Vs
M1vxS2bPRBGHCahdNZLi6CjwcjK2ItZUnB7Dx5TFtBcNeArg3m17Jkf2R8UHs2Yj
y78INtLLCUsWmtCjDw7MR1ACLg8smhm6IIhA0jch1dsMy5965pJv8B7h9PIC6QnD
Ye50BcY0R06CkeQzQPNCW+7fZEC4ogUhDTqhKjtld+JHHMIRj2tQIE+PTwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFEp0MnNvLieoLA2PjE8+nESOKqNqMB8GA1UdIwQY
MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt
ZTlhYzJiMDAzMTZhLzEvU25ReWMyOHVKNmdzRFktTVR6NmNSSTRxbzJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh
LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCM8f8MA4E
AgACMAgDBgEqBlkBgDANBgkqhkiG9w0BAQsFAAOCAQEAhyIHUtqLJiAK1zgR1CbF
xmF6zcdsOjgEzLxiq7U66pEmjoGlg4fvezmAFn8OmLSzbVcYJPLbGrZ1V6QcP+EK
El8n3+952XU/lZTAdMDtNh816ZdKOTX9dH7jSzBwPnTIhrvDU9to1So/l0kGpRnG
vuyPxnPXcn5KwjYRH9M2NJcuI81TkphfPfvd8skA4QSwm8v/QAOproyrBs1JHCC8
GuwJQNrK9BSCKl0M/TSDIEMrb9rdxVXlgh1yC+DzfU5tIeW7VaAAWVRx7BlTJMWO
Fxao7/6qDtHBdLuUyZIES1QjRR1vlEnQ623ihlO0feW846iQl7FtDGFCLj6JXLPN
+Q==
-----END CERTIFICATE-----
Generated at Thu May 2 04:31:39 2024 by rpki-client on console-fra.rpki-client.org