Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Au6YhOckxXKm83TU1SCm8QmoS0I.roa
File: Au6YhOckxXKm83TU1SCm8QmoS0I.roa (raw, json)
Hash identifier: xkdM9qtmwVDxqCcLLseP5k1iAcS5yge3LABwySYUQjo=
Subject key identifier: 02:EE:98:84:E7:24:C5:72:A6:F3:74:D4:D5:20:A6:F1:09:A8:4B:42
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018E9DFC5B7A1A0F7E7875ACC557C864BE31
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Au6YhOckxXKm83TU1SCm8QmoS0I.roa
Signing time: Tue 02 Apr 2024 08:45:45 +0000
ROA not before: Tue 02 Apr 2024 08:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:fc:5b:7a:1a:0f:7e:78:75:ac:c5:57:c8:64:be:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 2 08:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02ee9884e724c572a6f374d4d520a6f109a84b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:81:3e:66:da:eb:a7:fe:14:95:76:49:74:
14:5c:80:1f:ba:c8:d0:08:37:f6:cb:d2:2f:d2:13:
c0:d8:d4:7d:78:32:09:d2:7d:cb:e1:ff:01:a1:dc:
de:0a:01:1c:2e:d8:a9:5e:c5:7c:f5:ec:ef:75:d9:
84:d2:0d:b0:9e:b3:56:ef:72:35:f7:47:59:07:04:
d7:fa:de:38:d7:b4:7a:d0:05:97:3b:07:9f:2c:7c:
7e:f9:2a:2d:56:12:93:d1:ad:9c:d1:1a:7f:dd:3d:
fc:4d:ac:e8:da:c6:b8:17:c5:bf:3d:7c:19:af:03:
83:79:ef:06:f2:7b:6f:d6:46:7c:73:4c:f2:95:17:
8d:70:a0:c8:b4:ea:f2:5a:23:0b:0d:93:f5:dd:17:
01:07:32:a9:ff:f5:5c:f9:2c:e8:00:ee:80:e7:6e:
c1:fe:cb:09:ce:cb:2f:34:84:e7:fe:1e:6c:6f:af:
af:4e:02:2f:1b:bd:fb:93:85:89:cc:e1:bd:3c:34:
06:8b:85:ab:83:91:e5:10:9e:68:ba:45:f7:1b:13:
ec:c7:39:1e:68:21:9d:55:3c:a2:92:a6:5e:3c:9b:
e0:76:af:6b:78:35:b3:9a:96:78:e1:e5:65:e1:05:
e6:02:f3:e3:41:f1:85:22:72:50:e8:50:7c:a2:ff:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:98:84:E7:24:C5:72:A6:F3:74:D4:D5:20:A6:F1:09:A8:4B:42
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/Au6YhOckxXKm83TU1SCm8QmoS0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
56:93:c7:4e:11:2f:d8:8a:d6:bf:52:f2:19:b0:68:20:ee:da:
6a:af:fe:29:6a:a7:b0:c1:88:f7:39:61:34:25:d9:12:62:bb:
1b:f2:8f:08:3e:00:5e:66:72:63:4b:18:fc:cf:81:43:51:a6:
54:73:c7:7e:7e:b5:a2:42:71:e2:06:e5:f2:c1:d7:a6:4a:b7:
6e:97:b9:c9:34:c6:a3:40:ae:21:78:97:79:a4:47:e8:e5:01:
56:ba:6e:fd:dc:c1:bb:d2:56:42:3b:47:cf:4c:d5:04:5e:21:
77:15:a4:73:38:98:47:8d:02:16:f9:d3:f2:cc:b9:ea:18:c3:
e6:76:90:11:da:8b:5a:9a:4d:7c:01:b3:b8:91:04:16:53:63:
75:80:39:ac:10:86:c8:f8:62:c6:8d:46:29:f7:01:d3:88:62:
da:2f:78:c6:9c:c7:de:58:31:11:97:b3:f7:51:ae:a1:d7:d8:
09:83:b0:16:5a:bd:23:c9:e5:7d:09:14:a5:3a:fe:90:fe:cd:
d5:9b:a3:b4:38:cf:f8:ab:ef:19:f3:5c:17:3a:7b:b1:a0:a7:
22:82:91:da:04:1f:fb:4e:31:d5:ff:68:bf:92:94:42:00:ed:
9f:72:74:ce:14:28:a2:79:ed:66:c1:50:34:de:83:e2:8c:a2:
7d:b1:c8:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6d/Ft6Gg9+eHWsxVfIZL4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjQwNDAyMDg0NTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVlOTg4NGU3MjRjNTcyYTZmMzc0ZDRkNTIwYTZmMTA5YTg0YjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoWBPmba66f+FJV2SXQUXIAfusjQ
CDf2y9Iv0hPA2NR9eDIJ0n3L4f8BodzeCgEcLtipXsV89ezvddmE0g2wnrNW73I1
90dZBwTX+t4417R60AWXOwefLHx++SotVhKT0a2c0Rp/3T38Tazo2sa4F8W/PXwZ
rwODee8G8ntv1kZ8c0zylReNcKDItOryWiMLDZP13RcBBzKp//Vc+SzoAO6A527B
/ssJzssvNITn/h5sb6+vTgIvG737k4WJzOG9PDQGi4Wrg5HlEJ5oukX3GxPsxzke
aCGdVTyikqZePJvgdq9reDWzmpZ44eVl4QXmAvPjQfGFInJQ6FB8ov+yjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALumITnJMVypvN01NUgpvEJqEtCMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvQXU2WWhPY2t4WEttODNUVTFTQ204UW1vUzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4lMA0G
CSqGSIb3DQEBCwUAA4IBAQBWk8dOES/Yita/UvIZsGgg7tpqr/4paqewwYj3OWE0
JdkSYrsb8o8IPgBeZnJjSxj8z4FDUaZUc8d+frWiQnHiBuXywdemSrdul7nJNMaj
QK4heJd5pEfo5QFWum793MG70lZCO0fPTNUEXiF3FaRzOJhHjQIW+dPyzLnqGMPm
dpAR2otamk18AbO4kQQWU2N1gDmsEIbI+GLGjUYp9wHTiGLaL3jGnMfeWDERl7P3
Ua6h19gJg7AWWr0jyeV9CRSlOv6Q/s3Vm6O0OM/4q+8Z81wXOnuxoKcigpHaBB/7
TjHV/2i/kpRCAO2fcnTOFCiiee1mwVA03oPijKJ9scgo
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:28:04 2024 by rpki-client on console-ams.rpki-client.org