Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xPLfJ4gjT8OyBMojHvTlELKhJA8.roa
File: xPLfJ4gjT8OyBMojHvTlELKhJA8.roa (raw, json)
Hash identifier: 0jKpvn3Dbt9TYMQmP+5IuTLQXAuccdXgm7oNE5ZTYaQ=
Subject key identifier: C4:F2:DF:27:88:23:4F:C3:B2:04:CA:23:1E:F4:E5:10:B2:A1:24:0F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 018CC348ED60B49203584D6BF58A3959A6F3
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xPLfJ4gjT8OyBMojHvTlELKhJA8.roa
Signing time: Mon 01 Jan 2024 04:29:45 +0000
ROA not before: Mon 01 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51606
IP address blocks: 217.22.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ed:60:b4:92:03:58:4d:6b:f5:8a:39:59:a6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jan 1 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4f2df2788234fc3b204ca231ef4e510b2a1240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:7e:bd:4f:e0:cd:ea:79:dc:c1:42:35:d0:
11:62:7a:b8:05:94:d4:b0:1f:08:58:ef:f3:5b:f7:
45:3d:1c:11:f6:90:8a:1e:8b:91:41:d9:c6:70:3f:
b5:7f:ff:55:23:da:f0:04:2c:c2:04:80:a7:75:55:
d3:bc:01:b8:2f:91:fa:9d:9a:2c:24:ed:f3:b2:1b:
93:9a:c4:9e:bb:53:14:fb:49:76:aa:01:b5:e4:22:
4e:45:d7:b2:e0:e1:dc:ed:e1:2f:52:96:8c:43:41:
d3:70:34:e5:92:4d:38:49:0c:bb:ab:d9:dc:ad:da:
c5:d6:b8:7d:43:2b:f0:55:35:c0:bc:41:3a:cf:aa:
7e:44:1a:77:a8:e4:69:4f:c9:b8:4c:f3:b9:dc:51:
b3:e3:0f:40:c7:63:f9:25:36:a1:6f:9d:04:8b:07:
77:63:0c:88:29:20:5c:e4:d4:bc:9c:82:26:8d:c4:
38:55:4a:ff:6e:f8:4f:4a:40:44:66:5f:55:3c:c8:
10:6e:fe:81:da:2e:d7:b5:4c:78:c2:e6:2b:b7:23:
87:5a:d7:72:2e:03:53:c3:e3:d7:88:5b:c4:68:9c:
99:7d:2d:34:66:66:19:c3:bb:f0:68:c9:18:47:2d:
7d:e6:03:66:d9:1d:47:91:07:43:9c:13:58:85:0e:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:DF:27:88:23:4F:C3:B2:04:CA:23:1E:F4:E5:10:B2:A1:24:0F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/xPLfJ4gjT8OyBMojHvTlELKhJA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.116.0/23
Signature Algorithm: sha256WithRSAEncryption
03:f0:8d:3c:fd:01:45:b0:86:e2:9d:15:2e:4a:e8:9d:ab:9c:
c7:46:51:31:81:b0:d9:d2:5e:8d:2f:7d:ae:d2:0b:49:a1:1b:
f8:6f:ad:49:5a:a8:db:1d:f7:47:d7:04:31:7e:d2:af:6c:a3:
82:99:fb:24:2d:74:1e:a9:71:bb:ec:cc:38:1a:19:9e:c4:a8:
f3:cd:d5:00:7d:b4:03:a4:c2:c6:15:37:cc:50:ab:3a:8a:a4:
5d:c6:83:ba:92:69:23:1c:ce:fd:0d:24:e9:ba:ff:31:dd:3f:
87:5c:e6:ff:0f:6c:0e:1d:fa:82:81:fd:50:3f:c6:2d:9c:42:
50:dd:8a:fa:b5:5d:b2:fc:75:69:be:10:3e:29:80:ce:ab:6b:
dd:f2:d5:b3:f9:ce:cb:1a:ea:6c:8f:04:49:87:6a:a0:9f:85:
db:7d:01:34:7e:b6:53:18:be:77:74:14:e9:68:42:f9:e9:01:
75:0a:a4:3a:e2:5c:b6:9a:07:11:e9:b1:17:ad:fa:48:75:79:
f2:f8:e8:4f:1f:d1:67:13:01:77:6f:dc:26:b7:19:ad:aa:bf:
49:fc:7b:71:bb:db:81:6f:b1:5b:cd:03:7b:61:8b:1f:f0:78:
c4:ad:53:cf:d3:d8:15:64:7a:66:dd:bf:2f:f0:ce:7a:9e:41:
9b:6b:4a:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSO1gtJIDWE1r9Yo5WabzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjQwMTAxMDQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGYyZGYyNzg4MjM0ZmMzYjIwNGNhMjMxZWY0ZTUxMGIyYTEyNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Z+vU/gzep53MFCNdARYnq4BZTU
sB8IWO/zW/dFPRwR9pCKHouRQdnGcD+1f/9VI9rwBCzCBICndVXTvAG4L5H6nZos
JO3zshuTmsSeu1MU+0l2qgG15CJORdey4OHc7eEvUpaMQ0HTcDTlkk04SQy7q9nc
rdrF1rh9QyvwVTXAvEE6z6p+RBp3qORpT8m4TPO53FGz4w9Ax2P5JTahb50Eiwd3
YwyIKSBc5NS8nIImjcQ4VUr/bvhPSkBEZl9VPMgQbv6B2i7XtUx4wuYrtyOHWtdy
LgNTw+PXiFvEaJyZfS00ZmYZw7vwaMkYRy195gNm2R1HkQdDnBNYhQ6nfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTy3yeII0/DsgTKIx705RCyoSQPMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEveFBMZko0Z2pUOE95Qk1vakh2VGxFTEtoSkE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2RZ0MA0G
CSqGSIb3DQEBCwUAA4IBAQAD8I08/QFFsIbinRUuSuidq5zHRlExgbDZ0l6NL32u
0gtJoRv4b61JWqjbHfdH1wQxftKvbKOCmfskLXQeqXG77Mw4GhmexKjzzdUAfbQD
pMLGFTfMUKs6iqRdxoO6kmkjHM79DSTpuv8x3T+HXOb/D2wOHfqCgf1QP8YtnEJQ
3Yr6tV2y/HVpvhA+KYDOq2vd8tWz+c7LGupsjwRJh2qgn4XbfQE0frZTGL53dBTp
aEL56QF1CqQ64ly2mgcR6bEXrfpIdXny+OhPH9FnEwF3b9wmtxmtqr9J/Htxu9uB
b7FbzQN7YYsf8HjErVPP09gVZHpm3b8v8M56nkGba0p5
-----END CERTIFICATE-----
Generated at Mon Jun 17 06:09:16 2024 by rpki-client on console-ams.rpki-client.org