Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ok42s4KJieMdnCoxSLC2_ANwv0c.roa
File: ok42s4KJieMdnCoxSLC2_ANwv0c.roa (raw, json)
Hash identifier: h7c1nbFC5MKtOOdKRhjiU4neAHHGaTM5dY/tnnULad4=
Subject key identifier: A2:4E:36:B3:82:89:89:E3:1D:9C:2A:31:48:B0:B6:FC:03:70:BF:47
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 019016B4EEBCB20916C292F3923BC6615215
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ok42s4KJieMdnCoxSLC2_ANwv0c.roa
Signing time: Fri 14 Jun 2024 12:24:34 +0000
ROA not before: Fri 14 Jun 2024 12:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 78.142.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:b4:ee:bc:b2:09:16:c2:92:f3:92:3b:c6:61:52:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jun 14 12:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a24e36b3828989e31d9c2a3148b0b6fc0370bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:68:b2:f1:8f:58:0b:9f:d5:6f:53:64:59:5a:
01:9c:9a:0a:02:7a:de:d8:1c:17:62:ab:b6:fa:9a:
dd:08:33:3a:2a:79:77:b8:e8:63:62:45:d8:ae:13:
55:4c:66:a0:70:a7:ba:bf:15:9e:a1:c2:09:6b:45:
d3:ae:69:49:95:36:e6:59:74:af:dc:28:cf:07:1d:
ae:b4:aa:15:9d:0a:eb:29:2b:e9:ba:c2:57:d8:95:
a5:6e:7d:46:2c:b3:91:eb:5f:89:d9:18:df:d9:4f:
e5:ca:e1:1c:ac:7c:0a:17:84:63:bb:7d:9a:c0:f7:
25:f9:68:3a:02:db:54:c4:24:34:09:54:59:71:e2:
db:2f:b7:d8:ad:14:d8:3c:3e:ac:bf:80:6f:42:41:
22:c5:1d:58:91:b9:39:ab:31:3b:77:d4:a3:cd:43:
ec:a3:c7:16:aa:83:8c:30:a0:12:71:f9:f7:f3:00:
2e:7e:c3:d8:b2:3e:63:0b:c3:19:86:f4:b8:75:47:
7a:86:9f:e4:a9:1a:b3:78:ef:37:77:65:ac:33:da:
01:04:2c:06:ec:72:19:81:c3:16:62:10:0f:92:d5:
e1:7b:a9:60:ef:33:72:f8:24:98:d6:8b:e4:18:0b:
4a:d1:5a:75:a0:2f:5b:8d:ef:e1:89:38:5b:8c:86:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:36:B3:82:89:89:E3:1D:9C:2A:31:48:B0:B6:FC:03:70:BF:47
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/ok42s4KJieMdnCoxSLC2_ANwv0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a7:d8:f1:16:7c:67:4e:43:10:33:fa:13:20:7d:1c:b2:bd:
67:cb:5a:29:de:87:b8:20:97:4d:13:15:7f:af:ff:d6:e5:91:
f9:36:92:5a:7f:f3:6a:d9:c0:a4:1e:5d:98:87:84:1e:db:77:
c4:24:53:0d:53:78:a6:c1:c2:fa:95:dc:d5:6f:d5:e0:35:0a:
03:62:eb:ad:4b:06:90:71:b9:31:d4:fb:9a:e7:b0:b4:5d:2f:
1c:cf:d2:c5:2a:25:84:98:28:f2:40:fd:4e:09:f7:d6:6f:bc:
30:ba:38:c2:aa:15:9e:95:48:39:e2:b7:a6:3c:41:a2:3a:c3:
37:4b:1d:76:a4:ea:cb:75:50:6e:34:dc:69:9c:c1:2d:6e:ff:
d1:e6:9a:5e:59:9b:5f:2f:34:58:b1:35:dc:c8:0f:c9:71:99:
da:6d:a6:92:d4:51:95:74:69:5f:ab:04:9f:20:8f:ca:18:8d:
a1:25:9e:5c:a0:59:e8:37:11:f6:13:9b:b5:95:f3:b2:31:1c:
0f:ad:0a:d2:29:5e:43:fa:bd:a3:06:f5:93:71:42:81:fa:93:
1b:a7:52:08:d6:f4:9a:7d:d3:d5:d3:42:cc:ff:51:67:5f:3c:
ca:c1:5a:8a:53:2b:0e:ac:31:16:b0:77:b4:47:fd:75:2a:aa:
3c:eb:7d:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAWtO68sgkWwpLzkjvGYVIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjQwNjE0MTIyNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjRlMzZiMzgyODk4OWUzMWQ5YzJhMzE0OGIwYjZmYzAzNzBiZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5miy8Y9YC5/Vb1NkWVoBnJoKAnre
2BwXYqu2+prdCDM6Knl3uOhjYkXYrhNVTGagcKe6vxWeocIJa0XTrmlJlTbmWXSv
3CjPBx2utKoVnQrrKSvpusJX2JWlbn1GLLOR61+J2Rjf2U/lyuEcrHwKF4Rju32a
wPcl+Wg6AttUxCQ0CVRZceLbL7fYrRTYPD6sv4BvQkEixR1Ykbk5qzE7d9SjzUPs
o8cWqoOMMKAScfn38wAufsPYsj5jC8MZhvS4dUd6hp/kqRqzeO83d2WsM9oBBCwG
7HIZgcMWYhAPktXhe6lg7zNy+CSY1ovkGAtK0Vp1oC9bje/hiThbjIZ0MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJONrOCiYnjHZwqMUiwtvwDcL9HMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvb2s0MnM0S0ppZU1kbkNveFNMQzJfQU53djBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTo7YMA0G
CSqGSIb3DQEBCwUAA4IBAQBsp9jxFnxnTkMQM/oTIH0csr1ny1op3oe4IJdNExV/
r//W5ZH5NpJaf/Nq2cCkHl2Yh4Qe23fEJFMNU3imwcL6ldzVb9XgNQoDYuutSwaQ
cbkx1Pua57C0XS8cz9LFKiWEmCjyQP1OCffWb7wwujjCqhWelUg54remPEGiOsM3
Sx12pOrLdVBuNNxpnMEtbv/R5ppeWZtfLzRYsTXcyA/JcZnabaaS1FGVdGlfqwSf
II/KGI2hJZ5coFnoNxH2E5u1lfOyMRwPrQrSKV5D+r2jBvWTcUKB+pMbp1II1vSa
fdPV00LM/1FnXzzKwVqKUysOrDEWsHe0R/11Kqo86305
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:38:59 2024 by rpki-client on console-fra.rpki-client.org