Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa
File: ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa (raw, json)
Hash identifier: Uoa+6kwjK3viuK4uPnXGVGULuDkWcIcziKgOTQvX144=
Subject key identifier: 38:D0:04:77:CA:3B:8F:8B:51:1E:81:28:6C:18:34:16:B3:61:9E:74
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018F242D69BE9A63EDC6D07A1C96426EFD9A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa
Signing time: Sun 28 Apr 2024 10:08:27 +0000
ROA not before: Sun 28 Apr 2024 10:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 46.148.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:2d:69:be:9a:63:ed:c6:d0:7a:1c:96:42:6e:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Apr 28 10:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38d00477ca3b8f8b511e81286c183416b3619e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:c9:67:cc:0b:88:fe:19:23:7b:a3:b6:bf:
fb:d5:9e:f5:a4:62:50:78:31:e1:51:0a:36:e1:90:
d7:7d:99:77:2f:c8:aa:ed:79:03:c4:b7:ba:96:2a:
6b:a6:3f:ad:4d:84:ed:d7:c5:8c:5f:35:fb:11:1b:
9a:2e:41:67:ac:1d:82:c3:89:21:e8:97:21:ce:29:
76:c7:c6:70:25:3c:d5:74:3e:c2:36:62:0c:22:a8:
eb:d8:e2:d0:07:68:40:c4:fc:4d:7e:35:ea:87:f5:
59:ae:49:4a:8c:82:02:49:f7:45:94:2b:96:da:1d:
f0:fa:d3:15:1d:e0:52:68:11:0e:7c:41:6c:5a:f0:
96:c8:cd:1f:22:b0:68:77:c0:7c:17:46:09:08:55:
4d:e2:7b:bd:6a:f0:99:ad:ab:ba:1a:95:45:9e:0d:
86:1b:be:fe:c2:05:aa:88:1f:1c:02:a6:96:14:97:
da:6d:84:c0:11:9f:f7:76:e2:be:27:bd:2c:15:73:
6b:71:22:88:1e:f3:68:86:a1:26:66:07:70:83:2f:
e2:d0:96:3b:6a:51:1f:b6:73:8f:c4:b1:87:91:a0:
6f:7d:4e:c4:fd:25:3c:ed:82:f3:82:00:1a:ef:f5:
71:ff:3c:e9:fb:37:4e:6a:89:88:18:e0:32:66:96:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:04:77:CA:3B:8F:8B:51:1E:81:28:6C:18:34:16:B3:61:9E:74
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ONAEd8o7j4tRHoEobBg0FrNhnnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:80:6a:9c:c6:86:dc:df:6c:fd:09:e6:e5:a9:17:b6:4c:17:
84:22:dd:d9:c8:82:4b:85:35:a2:33:0b:06:bb:b2:ba:31:da:
89:21:b3:e7:19:37:a5:d4:ad:bb:15:69:24:85:31:bb:42:a1:
0d:6d:73:b9:78:1f:a4:90:62:f6:4c:25:5e:73:1c:19:ba:97:
f1:9d:b3:13:48:e6:82:47:89:41:a9:4b:45:5a:5d:ae:9d:51:
90:75:88:ff:d7:6e:b2:73:4e:c7:c9:51:4d:d8:fa:44:6e:98:
e3:02:c6:cd:bd:14:b8:cd:91:7a:6e:d4:80:44:da:31:d9:c7:
13:ab:01:a1:9a:38:ca:7d:23:fc:e5:31:52:46:42:5b:3f:53:
ab:26:6b:4b:d8:a1:73:84:0b:75:40:d1:ae:6d:f8:d2:e7:b4:
9d:3d:3b:ed:86:8a:72:ae:78:25:3a:f5:bd:3f:1b:35:df:3e:
09:2a:07:af:d7:fa:74:6b:86:36:7e:41:f4:30:47:9c:06:b4:
db:87:e0:76:b6:c8:6a:8a:6c:3a:67:ee:c2:36:db:34:af:b5:
93:94:0a:d9:6c:ee:b0:eb:0e:2c:0c:d7:b6:ac:7b:08:0a:ab:
fe:23:7a:b9:47:14:71:60:4e:0f:a0:95:fa:51:d4:8d:4e:e4:
24:92:74:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8kLWm+mmPtxtB6HJZCbv2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjQwNDI4MTAwODI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGQwMDQ3N2NhM2I4ZjhiNTExZTgxMjg2YzE4MzQxNmIzNjE5ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ujJZ8wLiP4ZI3ujtr/71Z71pGJQ
eDHhUQo24ZDXfZl3L8iq7XkDxLe6liprpj+tTYTt18WMXzX7ERuaLkFnrB2Cw4kh
6Jchzil2x8ZwJTzVdD7CNmIMIqjr2OLQB2hAxPxNfjXqh/VZrklKjIICSfdFlCuW
2h3w+tMVHeBSaBEOfEFsWvCWyM0fIrBod8B8F0YJCFVN4nu9avCZrau6GpVFng2G
G77+wgWqiB8cAqaWFJfabYTAEZ/3duK+J70sFXNrcSKIHvNohqEmZgdwgy/i0JY7
alEftnOPxLGHkaBvfU7E/SU87YLzggAa7/Vx/zzp+zdOaomIGOAyZpaweQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjQBHfKO4+LUR6BKGwYNBazYZ50MB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEvT05BRWQ4bzdqNHRSSG9Fb2JCZzBGck5obm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpQoMA0G
CSqGSIb3DQEBCwUAA4IBAQAsgGqcxobc32z9CeblqRe2TBeEIt3ZyIJLhTWiMwsG
u7K6MdqJIbPnGTel1K27FWkkhTG7QqENbXO5eB+kkGL2TCVecxwZupfxnbMTSOaC
R4lBqUtFWl2unVGQdYj/126yc07HyVFN2PpEbpjjAsbNvRS4zZF6btSARNox2ccT
qwGhmjjKfSP85TFSRkJbP1OrJmtL2KFzhAt1QNGubfjS57SdPTvthopyrnglOvW9
Pxs13z4JKgev1/p0a4Y2fkH0MEecBrTbh+B2tshqimw6Z+7CNts0r7WTlArZbO6w
6w4sDNe2rHsICqv+I3q5RxRxYE4PoJX6UdSNTuQkknTL
-----END CERTIFICATE-----
Generated at Sun May 19 14:09:05 2024 by rpki-client on console-fra.rpki-client.org