Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rtfNJIDFGUHaq85rivGJfGlq2x8.roa
File: rtfNJIDFGUHaq85rivGJfGlq2x8.roa (raw, json)
Hash identifier: CkLiI2907zgQGv4qt7aspqyjmc728ocagZRw6uA8u8Q=
Subject key identifier: AE:D7:CD:24:80:C5:19:41:DA:AB:CE:6B:8A:F1:89:7C:69:6A:DB:1F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01915F7842AE66E3A269EFEC45AACFA1DA5E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rtfNJIDFGUHaq85rivGJfGlq2x8.roa
Signing time: Sat 17 Aug 2024 08:33:22 +0000
ROA not before: Sat 17 Aug 2024 08:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:78:42:ae:66:e3:a2:69:ef:ec:45:aa:cf:a1:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 17 08:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aed7cd2480c51941daabce6b8af1897c696adb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:4b:74:37:23:84:c0:57:68:7c:76:eb:1f:
6f:f2:7b:0f:19:0e:f3:8e:39:2f:af:b9:f6:5a:92:
25:97:b9:5d:3c:fb:08:36:17:58:bf:2a:f1:88:c6:
23:30:5c:6b:f4:95:3f:88:0c:c7:ec:cc:13:bb:b5:
c9:a0:14:2d:53:f5:63:25:db:a0:76:d8:2a:f7:47:
c6:31:e2:8b:fc:0e:df:34:bc:58:19:ae:2b:45:7b:
09:5b:e7:0a:cd:23:f6:65:bb:ce:16:42:0e:2f:53:
22:ad:5e:78:46:24:33:fd:7d:61:3c:46:ae:75:22:
c4:ea:17:ea:8f:1b:75:fd:1f:80:b1:22:6a:b0:54:
73:c8:cb:5c:15:69:b5:e9:87:8b:60:cf:05:49:6e:
19:01:38:d1:c9:d4:30:d8:7b:75:d8:ae:c1:7c:d8:
68:0e:f1:d0:a0:28:a3:00:8c:dd:6f:85:a5:e6:fe:
e4:9d:3e:d3:84:0a:11:92:70:b1:75:90:d8:dc:f9:
c6:14:24:ba:13:5a:e0:85:90:c1:ca:21:4b:76:c5:
3a:0e:ef:9f:1f:25:d9:92:cf:60:93:9e:3b:dd:ca:
9b:0e:a9:69:49:3f:2c:86:fb:6f:d5:6d:be:68:a3:
b7:8c:bb:3d:a9:5d:0a:22:07:da:7a:19:6e:86:5f:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:CD:24:80:C5:19:41:DA:AB:CE:6B:8A:F1:89:7C:69:6A:DB:1F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rtfNJIDFGUHaq85rivGJfGlq2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:fb:dc:ef:e0:3d:32:cf:e1:5d:2c:a4:8b:22:60:27:db:
7e:ce:73:2b:b9:b0:86:d9:f5:10:25:57:82:e8:80:28:dc:c4:
d2:25:d5:4d:27:10:97:68:9d:6c:9f:9b:9c:72:f9:d4:4d:c4:
30:e4:aa:cb:fa:f3:ad:07:02:98:3f:b8:6d:4c:a2:29:20:32:
f1:ee:ad:a9:9e:a0:0c:bf:48:a6:39:cf:0b:17:47:db:a3:0b:
21:7f:c9:79:43:bf:d4:37:0e:69:16:26:08:d9:b5:8f:bc:c1:
d9:1c:87:04:d0:f8:c5:13:f2:80:e1:1f:6c:27:36:72:fa:9b:
89:01:14:15:f9:68:28:a2:5d:c5:c0:e6:b0:9b:48:55:36:37:
f8:26:a4:17:ea:fe:9c:66:15:be:57:68:71:f3:2f:8c:4f:4b:
79:07:da:58:83:e0:64:82:02:cc:8f:ec:cd:08:b8:88:cb:69:
94:2f:14:99:5b:21:24:d3:33:00:2f:78:3c:6e:01:8c:de:37:
ca:7a:c2:5c:c3:33:52:99:24:a7:20:eb:d7:40:ef:78:73:bd:
97:15:29:b5:e1:e6:6d:53:26:d7:f1:9c:59:53:55:e6:85:e3:
19:2a:5b:e8:9b:ce:bc:cb:91:c1:1a:4f:3b:2f:2f:e4:d8:4f:
73:33:23:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFfeEKuZuOiae/sRarPodpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwODE3MDgzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWQ3Y2QyNDgwYzUxOTQxZGFhYmNlNmI4YWYxODk3YzY5NmFkYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaJLdDcjhMBXaHx26x9v8nsPGQ7z
jjkvr7n2WpIll7ldPPsINhdYvyrxiMYjMFxr9JU/iAzH7MwTu7XJoBQtU/VjJdug
dtgq90fGMeKL/A7fNLxYGa4rRXsJW+cKzSP2ZbvOFkIOL1MirV54RiQz/X1hPEau
dSLE6hfqjxt1/R+AsSJqsFRzyMtcFWm16YeLYM8FSW4ZATjRydQw2Ht12K7BfNho
DvHQoCijAIzdb4Wl5v7knT7ThAoRknCxdZDY3PnGFCS6E1rghZDByiFLdsU6Du+f
HyXZks9gk5473cqbDqlpST8shvtv1W2+aKO3jLs9qV0KIgfaehluhl8HrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7XzSSAxRlB2qvOa4rxiXxpatsfMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvcnRmTkpJREZHVUhhcTg1cml2R0pmR2xxMng4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN9MA0G
CSqGSIb3DQEBCwUAA4IBAQB4lvvc7+A9Ms/hXSykiyJgJ9t+znMrubCG2fUQJVeC
6IAo3MTSJdVNJxCXaJ1sn5uccvnUTcQw5KrL+vOtBwKYP7htTKIpIDLx7q2pnqAM
v0imOc8LF0fbowshf8l5Q7/UNw5pFiYI2bWPvMHZHIcE0PjFE/KA4R9sJzZy+puJ
ARQV+Wgool3FwOawm0hVNjf4JqQX6v6cZhW+V2hx8y+MT0t5B9pYg+BkggLMj+zN
CLiIy2mULxSZWyEk0zMAL3g8bgGM3jfKesJcwzNSmSSnIOvXQO94c72XFSm14eZt
UybX8ZxZU1XmheMZKlvom868y5HBGk87Ly/k2E9zMyOz
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:44 2024 by rpki-client on console-ams.rpki-client.org