Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4bbvsfTpTZPxNhT5WF8mVMd6v7k.roa
File: 4bbvsfTpTZPxNhT5WF8mVMd6v7k.roa (raw, json)
Hash identifier: JS2VdSHMzBKZeCRbPeXSCCPfIiWVkz5erU3wCLbqfto=
Subject key identifier: E1:B6:EF:B1:F4:E9:4D:93:F1:36:14:F9:58:5F:26:54:C7:7A:BF:B9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F7CD29300E16DEFCF228249AE9054C05C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4bbvsfTpTZPxNhT5WF8mVMd6v7k.roa
Signing time: Wed 15 May 2024 15:15:26 +0000
ROA not before: Wed 15 May 2024 15:15:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47122
IP address blocks: 62.233.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:d2:93:00:e1:6d:ef:cf:22:82:49:ae:90:54:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 15 15:15:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1b6efb1f4e94d93f13614f9585f2654c77abfb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:8f:5d:07:3f:4d:d6:d6:48:9b:fd:04:e9:
c9:e9:2d:c0:42:3e:38:bd:f6:1b:f2:f5:40:11:55:
d2:12:6e:61:37:e8:c7:42:7e:a8:a8:e1:2f:78:bd:
cd:e1:63:1d:4c:b0:21:65:81:98:08:a0:69:2b:a6:
b8:3e:09:4d:06:ec:79:e1:96:b1:ff:05:50:3a:5e:
38:1a:bd:9e:c0:d9:75:20:70:8b:54:a5:67:04:6f:
fb:32:97:e8:54:ec:ea:0b:a3:ab:a2:72:17:e9:8b:
06:f1:e3:4a:e7:7e:03:23:1c:1a:59:37:2e:e7:44:
a2:63:e1:b8:18:f4:72:8d:85:68:19:c1:92:92:3f:
ac:fb:e9:b8:04:5c:9f:4e:d8:2d:90:25:f5:24:45:
4d:24:9b:d3:ac:12:99:50:a8:7c:63:41:9e:f0:0f:
d0:5f:49:b3:cf:1f:09:60:8a:c0:92:eb:8a:f9:c0:
33:05:52:0d:99:47:13:b0:4a:49:ce:78:3c:8a:85:
3c:51:ac:14:02:0d:fe:a9:49:98:d5:70:60:07:d3:
24:dc:e4:64:d1:53:69:74:ce:fb:85:f5:20:ad:6a:
9d:7b:86:88:12:dc:98:bd:f8:8e:9c:0f:5e:c7:ff:
c6:73:73:3b:08:4c:d4:ee:e5:93:8c:b9:25:e2:22:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B6:EF:B1:F4:E9:4D:93:F1:36:14:F9:58:5F:26:54:C7:7A:BF:B9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/4bbvsfTpTZPxNhT5WF8mVMd6v7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.46.0/24
Signature Algorithm: sha256WithRSAEncryption
88:79:98:26:7b:e2:3a:40:30:84:cd:51:7b:46:c5:3f:90:37:
8d:34:e5:3a:4c:03:41:8f:2c:3c:71:78:7c:5c:c4:8b:76:b2:
fc:8d:a5:82:ae:63:14:58:e1:58:6e:89:27:0e:22:83:fb:e3:
9b:01:c6:21:f2:93:6c:c0:b5:09:84:be:fc:b5:c1:7d:fa:c8:
ba:8a:c8:ff:6e:a5:a6:b6:a2:5d:7a:09:9e:01:14:18:2f:38:
46:f2:95:1c:fc:fa:27:6c:29:e9:67:57:24:8c:c6:5d:6d:fc:
2b:0d:7d:f0:ef:db:de:a2:d8:77:74:3b:19:c7:a4:95:bb:e7:
66:3b:b4:9d:41:b0:d4:8e:94:5c:91:51:8c:61:d5:0f:00:40:
33:97:aa:20:08:00:8c:67:bc:14:56:70:c2:f0:11:c7:64:f6:
4f:56:bb:81:45:78:e8:a8:ff:60:33:0c:79:8d:2e:03:23:a7:
a0:b7:19:ad:96:b2:23:4c:22:09:a9:16:e7:db:1a:97:05:2a:
96:c8:d8:43:89:6b:8f:e1:16:40:4d:3c:87:3a:ca:10:f2:31:
71:13:58:84:45:34:f8:ef:0e:45:d8:f6:78:2d:d0:21:6b:8c:
df:0a:15:27:0a:2e:7f:aa:8f:28:44:4c:03:e7:8d:f7:04:c2:
9d:e4:7f:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY980pMA4W3vzyKCSa6QVMBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwNTE1MTUxNTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWI2ZWZiMWY0ZTk0ZDkzZjEzNjE0Zjk1ODVmMjY1NGM3N2FiZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcqPXQc/TdbWSJv9BOnJ6S3AQj44
vfYb8vVAEVXSEm5hN+jHQn6oqOEveL3N4WMdTLAhZYGYCKBpK6a4PglNBux54Zax
/wVQOl44Gr2ewNl1IHCLVKVnBG/7MpfoVOzqC6OronIX6YsG8eNK534DIxwaWTcu
50SiY+G4GPRyjYVoGcGSkj+s++m4BFyfTtgtkCX1JEVNJJvTrBKZUKh8Y0Ge8A/Q
X0mzzx8JYIrAkuuK+cAzBVINmUcTsEpJzng8ioU8UawUAg3+qUmY1XBgB9Mk3ORk
0VNpdM77hfUgrWqde4aIEtyYvfiOnA9ex//Gc3M7CEzU7uWTjLkl4iKo6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOG277H06U2T8TYU+VhfJlTHer+5MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvNGJidnNmVHBUWlB4TmhUNVdGOG1WTWQ2djdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPukuMA0G
CSqGSIb3DQEBCwUAA4IBAQCIeZgme+I6QDCEzVF7RsU/kDeNNOU6TANBjyw8cXh8
XMSLdrL8jaWCrmMUWOFYboknDiKD++ObAcYh8pNswLUJhL78tcF9+si6isj/bqWm
tqJdegmeARQYLzhG8pUc/PonbCnpZ1ckjMZdbfwrDX3w79veoth3dDsZx6SVu+dm
O7SdQbDUjpRckVGMYdUPAEAzl6ogCACMZ7wUVnDC8BHHZPZPVruBRXjoqP9gMwx5
jS4DI6egtxmtlrIjTCIJqRbn2xqXBSqWyNhDiWuP4RZATTyHOsoQ8jFxE1iERTT4
7w5F2PZ4LdAha4zfChUnCi5/qo8oREwD5433BMKd5H/g
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:48 2024 by rpki-client on console-ams.rpki-client.org