Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d3L2SR3aDoYhU6WFPwXkLwI91hU.roa
File: d3L2SR3aDoYhU6WFPwXkLwI91hU.roa (raw, json)
Hash identifier: Nktd1oiWFqm66d9ojDbIt0tDA9wP1C3u1ugrqWJdaZU=
Subject key identifier: 77:72:F6:49:1D:DA:0E:86:21:53:A5:85:3F:05:E4:2F:02:3D:D6:15
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 019265F021B08B7F2D88749F3469280EF62B
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d3L2SR3aDoYhU6WFPwXkLwI91hU.roa
Signing time: Mon 07 Oct 2024 07:44:48 +0000
ROA not before: Mon 07 Oct 2024 07:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 158.46.196.0/22 maxlen: 22
178.171.0.0/20 maxlen: 20
178.171.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:65:f0:21:b0:8b:7f:2d:88:74:9f:34:69:28:0e:f6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Oct 7 07:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7772f6491dda0e862153a5853f05e42f023dd615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:68:03:bc:f9:a0:f9:a8:f0:fe:be:b1:3d:
df:79:e4:8f:b3:44:a0:f4:de:33:3f:a5:4f:0f:69:
d0:91:17:3b:8b:b3:ea:dd:2e:91:5a:85:4a:c8:ee:
64:b8:b0:c6:2f:00:7f:15:01:e8:1f:63:83:7a:6c:
ba:1b:8c:7f:3b:c4:d2:1b:8e:93:26:97:50:78:d3:
57:ec:b6:c9:96:1c:26:32:4f:13:22:97:05:19:db:
b1:d8:e3:3b:61:cd:1e:9b:cf:6f:c1:54:af:2c:c1:
59:af:6e:08:87:26:50:ae:7f:ac:48:7a:2e:87:b2:
17:02:18:bf:37:53:26:21:d0:20:f1:37:83:af:fb:
d1:25:0f:4a:2d:e8:af:09:f8:ad:66:0e:55:4c:8a:
74:af:3b:91:3b:e8:fa:19:94:d7:01:62:74:c8:63:
c5:b4:9b:6d:fc:7a:a7:52:d2:ad:3b:43:b4:be:89:
b0:3f:ed:76:9b:57:25:1e:ca:44:08:f3:3b:9d:f2:
f6:6b:fe:41:a7:1e:9c:9d:40:3d:4d:4f:78:70:13:
30:5e:e3:ad:e1:25:db:e2:29:a2:f5:76:8c:35:93:
07:ad:b9:4b:f0:54:48:85:90:30:85:8f:8b:f7:9f:
3d:e8:ef:15:1b:f9:2d:d8:57:24:57:c6:d0:61:2e:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:F6:49:1D:DA:0E:86:21:53:A5:85:3F:05:E4:2F:02:3D:D6:15
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/d3L2SR3aDoYhU6WFPwXkLwI91hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.196.0/22
178.171.0.0/20
178.171.104.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d6:ca:23:f1:e1:cd:ec:96:c5:94:57:e4:de:2b:78:75:28:
13:90:0a:77:ee:5f:a2:e0:27:ad:ee:9c:6f:be:da:3b:2b:05:
57:66:15:42:3a:b6:c8:f3:19:48:3b:39:93:ab:03:02:58:7b:
a3:91:79:88:fc:83:1b:62:ee:13:a2:e1:de:e0:c0:4a:cd:eb:
e5:c5:0d:d1:72:00:85:39:d6:93:39:90:9a:ef:4e:60:4b:6c:
ba:c0:14:28:f1:66:4b:23:c0:43:8a:22:b9:57:b4:7e:da:03:
fb:0b:cb:31:be:69:2c:47:fa:e3:78:60:5b:81:8e:3d:07:c1:
f8:6e:4d:31:45:da:bf:30:63:05:bf:4f:3f:17:2c:08:6a:53:
73:9c:e7:6c:bb:53:5c:14:b6:56:83:da:39:92:e9:3f:b9:55:
56:66:0c:32:ab:2e:96:81:6a:3d:4c:07:e2:4e:a1:01:b6:f5:
4b:44:62:48:45:b9:67:95:6a:78:19:ca:09:22:8f:ff:1a:23:
27:94:b1:c6:d2:2c:4d:31:45:2f:62:ea:99:a1:37:8b:3b:e4:
5c:a8:b5:3f:fa:49:05:5e:35:69:1d:83:1a:8d:41:ee:b3:89:
78:be:c2:c2:59:95:9c:95:e7:76:a8:08:07:f2:31:27:70:96:
d3:df:02:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJl8CGwi38tiHSfNGkoDvYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjQxMDA3MDc0NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzcyZjY0OTFkZGEwZTg2MjE1M2E1ODUzZjA1ZTQyZjAyM2RkNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKBoA7z5oPmo8P6+sT3feeSPs0Sg
9N4zP6VPD2nQkRc7i7Pq3S6RWoVKyO5kuLDGLwB/FQHoH2ODemy6G4x/O8TSG46T
JpdQeNNX7LbJlhwmMk8TIpcFGdux2OM7Yc0em89vwVSvLMFZr24IhyZQrn+sSHou
h7IXAhi/N1MmIdAg8TeDr/vRJQ9KLeivCfitZg5VTIp0rzuRO+j6GZTXAWJ0yGPF
tJtt/HqnUtKtO0O0vomwP+12m1clHspECPM7nfL2a/5Bpx6cnUA9TU94cBMwXuOt
4SXb4imi9XaMNZMHrblL8FRIhZAwhY+L95896O8VG/kt2FckV8bQYS42OwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHdy9kkd2g6GIVOlhT8F5C8CPdYVMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvZDNMMlNSM2FEb1loVTZXRlB3WGtMd0k5MWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCni7EAwQE
sqsAAwQAsqtoMA0GCSqGSIb3DQEBCwUAA4IBAQAF1soj8eHN7JbFlFfk3it4dSgT
kAp37l+i4Cet7pxvvto7KwVXZhVCOrbI8xlIOzmTqwMCWHujkXmI/IMbYu4TouHe
4MBKzevlxQ3RcgCFOdaTOZCa705gS2y6wBQo8WZLI8BDiiK5V7R+2gP7C8sxvmks
R/rjeGBbgY49B8H4bk0xRdq/MGMFv08/FywIalNznOdsu1NcFLZWg9o5kuk/uVVW
Zgwyqy6WgWo9TAfiTqEBtvVLRGJIRblnlWp4GcoJIo//GiMnlLHG0ixNMUUvYuqZ
oTeLO+RcqLU/+kkFXjVpHYMajUHus4l4vsLCWZWcled2qAgH8jEncJbT3wIV
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:03:19 2024 by rpki-client on console-ams.rpki-client.org