Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0t9ajUYp_Aoqrx3LJUwBtTc1KMA.roa
File: 0t9ajUYp_Aoqrx3LJUwBtTc1KMA.roa (raw, json)
Hash identifier: 1hmqD6lClHqGTljQoH5L421Neh6kbaiMAZ2LpugEq+A=
Subject key identifier: D2:DF:5A:8D:46:29:FC:0A:2A:AF:1D:CB:25:4C:01:B5:37:35:28:C0
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01927C834D5D49CC38D2539E4B695E0F910A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0t9ajUYp_Aoqrx3LJUwBtTc1KMA.roa
Signing time: Fri 11 Oct 2024 16:57:12 +0000
ROA not before: Fri 11 Oct 2024 16:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 212.116.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:83:4d:5d:49:cc:38:d2:53:9e:4b:69:5e:0f:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Oct 11 16:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2df5a8d4629fc0a2aaf1dcb254c01b5373528c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:0e:a8:80:25:46:df:af:be:7c:b5:6c:b7:
52:e1:b4:ab:e6:5f:8a:56:3d:2c:02:63:f6:71:9d:
4b:36:7c:f7:ea:fe:e9:5b:c5:80:66:47:a6:06:bb:
b1:95:83:8a:08:e7:b4:af:08:d5:95:2b:43:15:ba:
32:f2:fa:e1:c8:9d:3a:64:7e:4e:a6:82:81:3f:ad:
7e:9d:86:92:0d:d2:a0:4c:54:7f:b9:ce:47:8b:9e:
68:1c:1d:fe:21:ca:77:ee:5c:bc:fc:88:c8:d1:d9:
4c:c6:8c:c2:2b:b8:11:cc:ed:d6:7d:a4:f4:21:82:
d3:d5:cb:8e:03:24:ad:79:f8:4a:f8:a8:77:20:e8:
f4:b7:eb:bb:32:76:f9:7a:c4:76:87:11:8c:4f:be:
c0:5d:4b:d7:87:74:49:01:e8:34:d6:86:a3:30:68:
f4:5c:3b:9c:e4:89:e8:72:25:e7:6a:f3:b9:85:36:
0b:3a:d4:96:2a:7c:9e:b1:5e:09:da:17:30:7a:9e:
64:dc:21:e5:0f:f9:0f:43:c3:61:71:b4:6c:21:42:
0e:87:91:d1:21:43:20:50:f6:79:66:0a:13:cd:9c:
0b:32:15:37:5e:42:11:4b:f5:05:5b:79:b3:02:03:
8d:f4:46:92:44:c4:31:9d:29:22:de:04:61:83:53:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:5A:8D:46:29:FC:0A:2A:AF:1D:CB:25:4C:01:B5:37:35:28:C0
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0t9ajUYp_Aoqrx3LJUwBtTc1KMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:d0:ab:05:c2:5b:37:e1:ee:45:6b:9e:4b:ce:22:48:6d:36:
48:0c:02:71:60:fd:af:24:aa:16:5d:a3:da:f6:4c:0d:40:9b:
c7:ef:b3:87:a4:7a:33:ea:ab:0a:c4:87:09:bc:e1:60:13:70:
15:7a:8a:9e:74:34:2b:1e:60:0c:be:00:a4:91:f0:28:cd:c8:
56:5b:cf:b7:b7:7d:ce:82:1b:bc:d7:c3:c9:d6:4c:54:ac:42:
3e:ba:4d:28:28:7b:3e:c0:ea:88:63:e4:c9:b1:96:5b:54:a0:
15:31:93:18:a8:d8:a9:b3:4a:84:6f:0a:7e:ce:a0:4e:fb:e9:
a9:5b:4b:a8:b4:62:da:f5:70:4a:d7:e8:69:ac:a1:79:be:99:
2b:1f:2b:bf:8a:bc:ae:5b:51:73:0c:30:38:ef:9f:3f:0b:44:
7e:02:44:d2:80:c2:cd:f1:98:79:b4:18:39:78:75:75:43:34:
f4:ad:64:11:f4:18:17:25:a3:f6:67:52:fc:4a:ff:7a:cf:59:
86:9e:a8:1c:3b:2b:ff:3a:b7:e7:55:3e:f5:59:c2:83:b7:fc:
4e:32:c7:0e:a5:72:e7:f6:09:9b:79:f9:77:a0:66:19:a7:17:
db:9f:73:88:93:b6:1b:10:4c:da:8d:0c:db:ca:a7:04:56:d5:
73:d0:79:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJ8g01dScw40lOeS2leD5EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjQxMDExMTY1NzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmRmNWE4ZDQ2MjlmYzBhMmFhZjFkY2IyNTRjMDFiNTM3MzUyOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC8OqIAlRt+vvny1bLdS4bSr5l+K
Vj0sAmP2cZ1LNnz36v7pW8WAZkemBruxlYOKCOe0rwjVlStDFboy8vrhyJ06ZH5O
poKBP61+nYaSDdKgTFR/uc5Hi55oHB3+Icp37ly8/IjI0dlMxozCK7gRzO3WfaT0
IYLT1cuOAyStefhK+Kh3IOj0t+u7Mnb5esR2hxGMT77AXUvXh3RJAeg01oajMGj0
XDuc5InociXnavO5hTYLOtSWKnyesV4J2hcwep5k3CHlD/kPQ8NhcbRsIUIOh5HR
IUMgUPZ5ZgoTzZwLMhU3XkIRS/UFW3mzAgON9EaSRMQxnSki3gRhg1NrAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLfWo1GKfwKKq8dyyVMAbU3NSjAMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvMHQ5YWpVWXBfQW9xcngzTEpVd0J0VGMxS01BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT8MA0G
CSqGSIb3DQEBCwUAA4IBAQCg0KsFwls34e5Fa55LziJIbTZIDAJxYP2vJKoWXaPa
9kwNQJvH77OHpHoz6qsKxIcJvOFgE3AVeoqedDQrHmAMvgCkkfAozchWW8+3t33O
ghu818PJ1kxUrEI+uk0oKHs+wOqIY+TJsZZbVKAVMZMYqNips0qEbwp+zqBO++mp
W0uotGLa9XBK1+hprKF5vpkrHyu/iryuW1FzDDA4758/C0R+AkTSgMLN8Zh5tBg5
eHV1QzT0rWQR9BgXJaP2Z1L8Sv96z1mGnqgcOyv/OrfnVT71WcKDt/xOMscOpXLn
9gmbefl3oGYZpxfbn3OIk7YbEEzajQzbyqcEVtVz0HlZ
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:30:00 2024 by rpki-client on console-ams.rpki-client.org