Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/onrMYieAvELRf3u8sehAjIpLipU.roa
File: onrMYieAvELRf3u8sehAjIpLipU.roa (raw, json)
Hash identifier: Mu9bUuY0LL0flKV6WrA3TujcdIDP499b2TIi+QDw0Rw=
Subject key identifier: A2:7A:CC:62:27:80:BC:42:D1:7F:7B:BC:B1:E8:40:8C:8A:4B:8A:95
Certificate issuer: /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial: 018CC94D489DE7F9BEF966929F1EF54A2514
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/onrMYieAvELRf3u8sehAjIpLipU.roa
Signing time: Tue 02 Jan 2024 08:32:14 +0000
ROA not before: Tue 02 Jan 2024 08:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60017
IP address blocks: 185.156.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:48:9d:e7:f9:be:f9:66:92:9f:1e:f5:4a:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Validity
Not Before: Jan 2 08:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a27acc622780bc42d17f7bbcb1e8408c8a4b8a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1a:10:71:ec:66:f7:d2:d3:4a:f0:6b:cb:c7:
42:e6:2d:05:80:bc:f1:e8:08:9c:63:b4:8c:45:8d:
1a:dc:d8:28:71:ab:3a:1c:35:62:c9:9f:ff:8e:90:
cf:38:94:a0:86:ef:50:15:f1:e6:35:9b:6c:fb:13:
3f:5f:88:89:d1:08:53:93:96:3a:16:60:86:9c:52:
71:c9:05:0d:57:3f:e4:3c:5d:a6:1c:26:2b:cc:e9:
6a:d0:2e:8b:b6:1f:d6:06:e5:30:94:e4:aa:c8:62:
cf:da:52:da:74:5e:ba:cf:88:10:91:43:bb:82:20:
fd:46:4b:83:9d:21:d0:ea:5b:42:12:98:13:f7:e1:
92:c7:c6:27:a6:1b:99:53:50:8a:4f:72:bf:18:91:
cc:9b:19:ae:30:20:8c:c1:d3:9c:52:c1:92:3c:6e:
c7:e4:9a:08:4f:b5:25:1a:16:82:c3:07:37:9f:a7:
22:ba:88:16:be:39:8f:e0:cb:7a:97:d3:7c:17:7d:
b0:7c:0c:a0:ec:37:fd:00:68:a5:d5:c3:16:0e:2b:
ff:6d:b9:d9:e8:71:ea:39:73:f1:15:37:46:a8:3a:
95:df:e7:7f:fe:51:f8:78:d7:60:53:ff:73:43:33:
96:a4:53:6d:1f:55:9b:65:ac:08:78:95:7d:4e:11:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7A:CC:62:27:80:BC:42:D1:7F:7B:BC:B1:E8:40:8C:8A:4B:8A:95
X509v3 Authority Key Identifier:
keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/onrMYieAvELRf3u8sehAjIpLipU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.232.0/22
Signature Algorithm: sha256WithRSAEncryption
38:fd:95:47:43:bc:04:7d:f8:fd:a8:28:0c:f3:2a:92:7f:fe:
86:e6:5b:16:5f:23:3d:23:ae:9c:82:76:73:6d:98:a5:23:8c:
3c:48:64:30:e7:3d:9e:e4:0b:28:0e:75:5e:82:77:6e:df:70:
e6:e0:97:91:ea:ca:0a:f9:39:08:aa:69:68:94:28:43:9e:c8:
1e:20:39:07:73:40:82:cb:97:b1:b1:a5:dd:41:61:e6:26:48:
5c:5b:22:63:8b:a8:a2:36:85:15:36:0f:1a:86:0d:5d:79:f1:
05:f3:07:be:9d:7b:b2:a8:b0:e1:da:cd:21:f6:41:dd:aa:a9:
1e:da:86:72:50:04:e4:78:a4:12:0d:d5:25:58:3f:36:31:a7:
ed:96:99:08:d7:8b:f9:6d:44:67:3a:29:2e:26:38:2a:0e:46:
3f:40:c3:1b:e6:1c:f4:8a:cd:79:1c:51:a1:74:d2:1e:2b:a8:
7a:52:c8:c7:f9:5c:95:4c:39:f4:3b:00:94:4e:8d:ba:6e:b4:
be:4c:ed:ea:9a:2b:98:d7:21:0e:4f:1a:cf:15:bd:d5:77:66:
ee:a7:65:ae:65:ce:fd:64:ef:90:d5:74:41:15:2f:7f:15:f0:
e1:70:48:4e:4c:18:2f:8c:0f:d8:29:48:f7:2c:88:2e:c0:a8:
8f:00:61:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTUid5/m++WaSnx71SiUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWU4YjA3MDFlMzVkNjZhOTc4NzZkODA1NTAxMmE4OTY4
MmZkYzMwHhcNMjQwMTAyMDgzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjdhY2M2MjI3ODBiYzQyZDE3ZjdiYmNiMWU4NDA4YzhhNGI4YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBoQcexm99LTSvBry8dC5i0FgLzx
6AicY7SMRY0a3Ngocas6HDViyZ//jpDPOJSghu9QFfHmNZts+xM/X4iJ0QhTk5Y6
FmCGnFJxyQUNVz/kPF2mHCYrzOlq0C6Lth/WBuUwlOSqyGLP2lLadF66z4gQkUO7
giD9RkuDnSHQ6ltCEpgT9+GSx8YnphuZU1CKT3K/GJHMmxmuMCCMwdOcUsGSPG7H
5JoIT7UlGhaCwwc3n6ciuogWvjmP4Mt6l9N8F32wfAyg7Df9AGil1cMWDiv/bbnZ
6HHqOXPxFTdGqDqV3+d//lH4eNdgU/9zQzOWpFNtH1WbZawIeJV9ThGGiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJ6zGIngLxC0X97vLHoQIyKS4qVMB8GA1UdIwQY
MBaAFGteiwcB411mqXh22AVQEqiWgv3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2Ut
ZDk1NzI2NDY1M2UyLzEvb25yTVlpZUF2RUxSZjN1OHNlaEFqSXBMaXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8wMmFhM2ItZTNhOC00YzY5LTgyY2UtZDk1NzI2NDY1M2Uy
LzEvYTE2TEJ3SGpYV2FwZUhiWUJWQVNxSmFDX2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZzoMA0G
CSqGSIb3DQEBCwUAA4IBAQA4/ZVHQ7wEffj9qCgM8yqSf/6G5lsWXyM9I66cgnZz
bZilI4w8SGQw5z2e5AsoDnVegndu33Dm4JeR6soK+TkIqmlolChDnsgeIDkHc0CC
y5exsaXdQWHmJkhcWyJji6iiNoUVNg8ahg1defEF8we+nXuyqLDh2s0h9kHdqqke
2oZyUATkeKQSDdUlWD82MaftlpkI14v5bURnOikuJjgqDkY/QMMb5hz0is15HFGh
dNIeK6h6UsjH+VyVTDn0OwCUTo26brS+TO3qmiuY1yEOTxrPFb3Vd2bup2WuZc79
ZO+Q1XRBFS9/FfDhcEhOTBgvjA/YKUj3LIguwKiPAGGh
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:43:10 2024 by rpki-client on console-ams.rpki-client.org