Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/A2K8y2pET-tpyt4DKJKKYZABm2Y.roa
File: A2K8y2pET-tpyt4DKJKKYZABm2Y.roa (raw, json)
Hash identifier: x3tw/Gcz9H1DzDZLEo+GaWYqayrjdu6glG57/yReHXo=
Subject key identifier: 03:62:BC:CB:6A:44:4F:EB:69:CA:DE:03:28:92:8A:61:90:01:9B:66
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 018CC5DD361BA792D4B754D938BD4FAA84CD
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/A2K8y2pET-tpyt4DKJKKYZABm2Y.roa
Signing time: Mon 01 Jan 2024 16:30:58 +0000
ROA not before: Mon 01 Jan 2024 16:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203587
IP address blocks: 217.20.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:36:1b:a7:92:d4:b7:54:d9:38:bd:4f:aa:84:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Jan 1 16:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0362bccb6a444feb69cade0328928a6190019b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:90:23:17:d3:e0:85:34:bb:0f:ca:05:6e:
44:8d:2a:82:d4:d1:3a:05:ea:52:5d:60:90:9c:3f:
fd:60:35:01:0d:c3:ef:a0:43:b3:27:d0:c2:0d:f6:
71:20:56:4d:2a:0b:30:09:0d:11:7b:36:0d:c2:5c:
e1:39:82:08:ab:78:24:04:64:ba:d2:55:14:f3:01:
8b:8e:bd:3c:21:61:d9:83:8f:a0:ed:e4:1b:6f:c6:
e5:a5:7c:4a:55:12:22:1d:ad:87:a0:c0:4c:dd:8c:
8e:14:2e:a9:e6:d4:2b:83:62:78:9e:e1:68:e9:58:
4f:8b:56:57:a6:bc:0b:3b:0d:26:4a:6e:02:73:ca:
c9:54:8a:15:5e:c8:bf:fd:ea:d8:43:a1:02:98:ec:
bc:14:5a:8c:e4:56:67:a8:ec:6d:68:25:49:58:c6:
13:2e:c1:06:0e:33:6e:06:de:4c:72:b3:a4:31:13:
b4:37:57:c2:fb:e1:ac:04:98:1a:5c:70:77:79:ba:
b6:eb:b5:c2:12:97:b6:2e:f0:1b:6d:30:f5:78:04:
30:66:0a:0a:4a:5e:39:35:59:20:fc:9f:4c:4e:8f:
a6:f2:62:3f:b4:69:73:55:c5:d3:43:92:7c:cb:61:
86:29:ce:82:d1:2b:29:c0:b0:b0:4d:c2:5a:49:7e:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:BC:CB:6A:44:4F:EB:69:CA:DE:03:28:92:8A:61:90:01:9B:66
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/A2K8y2pET-tpyt4DKJKKYZABm2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b7:9a:da:d8:8a:a4:74:93:42:63:b7:0b:c0:63:76:f8:6f:
47:0f:d4:de:51:2b:b5:b4:91:7c:e7:ae:8c:a0:a0:15:ce:8a:
e4:c6:49:57:c4:f7:ed:ae:b0:2d:33:b1:d6:d2:f8:f6:c9:c5:
cc:42:a9:8f:cf:70:d5:02:22:c6:e4:ec:a8:46:01:6f:4e:db:
86:9b:13:96:cd:4c:de:54:d1:cb:16:c8:14:a8:73:b5:31:98:
e2:66:35:a7:12:f7:b5:30:f1:4d:73:0d:ff:d3:5c:d1:9c:70:
67:a2:4a:77:e2:32:e9:a4:49:13:78:6e:22:88:40:08:1e:cb:
6d:2d:4f:06:32:03:77:6d:8c:f4:e5:b8:a5:5c:0e:7a:d0:56:
f5:f4:39:0b:a9:61:5a:5b:fd:80:62:69:80:c9:4a:16:f3:39:
9f:f4:c4:df:36:82:68:86:05:9f:45:0d:21:7f:2f:23:dc:08:
6d:49:33:22:fe:61:16:61:67:8a:93:0a:8a:0b:b6:a4:9d:c1:
31:73:91:7a:07:40:52:15:42:9e:95:ce:47:f6:94:13:8d:0c:
2b:d6:46:ff:c5:b4:65:86:f4:d2:18:0c:3a:ca:e2:c4:6e:7f:
cc:c7:99:98:6e:b4:af:44:cb:45:63:41:9d:5e:27:bf:af:12:
e6:68:85:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3TYbp5LUt1TZOL1PqoTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjQwMTAxMTYzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzYyYmNjYjZhNDQ0ZmViNjljYWRlMDMyODkyOGE2MTkwMDE5YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zyQIxfT4IU0uw/KBW5EjSqC1NE6
BepSXWCQnD/9YDUBDcPvoEOzJ9DCDfZxIFZNKgswCQ0RezYNwlzhOYIIq3gkBGS6
0lUU8wGLjr08IWHZg4+g7eQbb8blpXxKVRIiHa2HoMBM3YyOFC6p5tQrg2J4nuFo
6VhPi1ZXprwLOw0mSm4Cc8rJVIoVXsi//erYQ6ECmOy8FFqM5FZnqOxtaCVJWMYT
LsEGDjNuBt5McrOkMRO0N1fC++GsBJgaXHB3ebq267XCEpe2LvAbbTD1eAQwZgoK
Sl45NVkg/J9MTo+m8mI/tGlzVcXTQ5J8y2GGKc6C0SspwLCwTcJaSX7+MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFANivMtqRE/racreAyiSimGQAZtmMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvQTJLOHkycEVULXRweXQ0REtKS0tZWkFCbTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RT/MA0G
CSqGSIb3DQEBCwUAA4IBAQAit5ra2IqkdJNCY7cLwGN2+G9HD9TeUSu1tJF8566M
oKAVzorkxklXxPftrrAtM7HW0vj2ycXMQqmPz3DVAiLG5OyoRgFvTtuGmxOWzUze
VNHLFsgUqHO1MZjiZjWnEve1MPFNcw3/01zRnHBnokp34jLppEkTeG4iiEAIHstt
LU8GMgN3bYz05bilXA560Fb19DkLqWFaW/2AYmmAyUoW8zmf9MTfNoJohgWfRQ0h
fy8j3AhtSTMi/mEWYWeKkwqKC7akncExc5F6B0BSFUKelc5H9pQTjQwr1kb/xbRl
hvTSGAw6yuLEbn/Mx5mYbrSvRMtFY0GdXie/rxLmaIWl
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:34:21 2024 by rpki-client on console-ams.rpki-client.org