Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa
File: oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa (raw, json)
Hash identifier: VbZ+td3RW+9rmf6Cq1i1rzyCRR3O0rhw7G9mDxsQoH8=
Subject key identifier: A1:93:72:47:2B:58:5A:65:87:7E:1F:D8:D0:87:C1:6E:13:D5:22:FC
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018E6EF26CFC8B7D87569FAA4B395653E89B
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa
Signing time: Sun 24 Mar 2024 05:32:45 +0000
ROA not before: Sun 24 Mar 2024 05:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203163
IP address blocks: 78.40.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6e:f2:6c:fc:8b:7d:87:56:9f:aa:4b:39:56:53:e8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 24 05:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a19372472b585a65877e1fd8d087c16e13d522fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:e8:11:e0:d3:22:56:39:a6:ce:ff:b3:62:
5e:7e:9a:b7:7e:77:3a:0e:c2:61:35:a0:e6:b7:03:
70:75:d2:0f:5f:3f:f3:a3:75:55:2d:e8:f1:fe:8d:
44:96:ca:c7:ba:0b:ad:ff:fe:a8:6f:d4:b0:e5:57:
e0:6a:66:07:54:59:1c:fa:55:a3:30:2d:e6:5e:e4:
fb:35:96:d3:e4:63:33:fb:3c:b7:fa:57:56:a2:42:
33:21:2c:9f:a1:bc:0a:f0:cc:f1:cf:e4:85:bf:98:
60:45:91:3e:f6:96:26:89:7c:d8:7c:e5:b0:61:48:
a4:13:c5:f9:88:3a:bf:89:be:31:ca:3d:c1:eb:34:
f5:98:68:b9:21:fb:1b:09:02:b8:28:c1:6c:72:86:
57:57:c7:68:a5:b8:1c:42:58:ba:00:29:68:a1:1d:
60:e7:ed:66:2a:eb:22:65:51:bb:72:5c:ae:da:4a:
dc:47:f0:ab:66:31:f2:22:21:a7:47:0c:0d:4d:a1:
6f:be:ba:4b:f4:34:5a:21:de:3c:ed:c2:ca:ca:5b:
95:f5:40:34:31:79:1d:a3:89:d0:3e:ee:4f:13:7d:
2d:17:f0:f3:21:74:cd:a9:4a:6b:7b:e2:7f:14:2d:
35:e6:9a:5b:c1:1d:fc:9b:90:73:ff:2f:da:e0:ad:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:93:72:47:2B:58:5A:65:87:7E:1F:D8:D0:87:C1:6E:13:D5:22:FC
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/oZNyRytYWmWHfh_Y0IfBbhPVIvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.118.0/24
Signature Algorithm: sha256WithRSAEncryption
44:99:b9:a9:80:63:98:48:58:a5:49:17:b2:35:3a:78:67:e3:
5f:e0:7b:3f:2d:ce:06:c9:79:d5:95:db:0c:af:8c:e3:4b:82:
54:53:74:a9:63:57:c8:6a:a8:86:3d:4e:88:8d:84:d4:58:af:
0e:61:71:dc:f1:2f:14:e2:1b:2c:26:89:4d:8f:bc:17:2a:a7:
a8:bc:7d:0d:00:eb:9c:dd:40:13:79:a6:dd:42:2f:87:a0:a0:
1d:53:29:84:31:1c:5c:cf:d1:ee:df:60:af:a4:99:7a:b0:b8:
d0:12:83:3a:aa:50:fe:09:5a:ba:d2:6a:cb:bd:cf:57:66:6f:
fa:29:33:75:c4:e7:3b:e6:50:94:85:0b:24:8c:09:ea:1c:a9:
90:34:c5:d9:6d:24:75:1c:07:03:a9:c9:b6:e6:ba:96:b4:42:
6d:11:68:3f:9d:72:9e:40:00:14:5f:01:d1:77:64:5a:d9:79:
11:31:52:9b:42:82:3e:d9:e3:7b:66:8e:7e:18:5c:17:3e:91:
0e:46:69:46:98:13:be:a0:3f:6a:f8:11:c9:28:c4:43:cf:aa:
09:fe:5b:24:d7:1e:c5:b9:62:3a:f5:e1:45:07:42:09:32:e6:
26:4d:aa:56:16:db:4d:6f:0c:0e:4a:dc:38:dd:df:0e:c9:a9:
fb:bd:f7:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5u8mz8i32HVp+qSzlWU+ibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwMzI0MDUzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTkzNzI0NzJiNTg1YTY1ODc3ZTFmZDhkMDg3YzE2ZTEzZDUyMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nvoEeDTIlY5ps7/s2Jefpq3fnc6
DsJhNaDmtwNwddIPXz/zo3VVLejx/o1ElsrHugut//6ob9Sw5VfgamYHVFkc+lWj
MC3mXuT7NZbT5GMz+zy3+ldWokIzISyfobwK8Mzxz+SFv5hgRZE+9pYmiXzYfOWw
YUikE8X5iDq/ib4xyj3B6zT1mGi5IfsbCQK4KMFscoZXV8dopbgcQli6AClooR1g
5+1mKusiZVG7clyu2krcR/CrZjHyIiGnRwwNTaFvvrpL9DRaId487cLKyluV9UA0
MXkdo4nQPu5PE30tF/DzIXTNqUpre+J/FC015ppbwR38m5Bz/y/a4K0VOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGTckcrWFplh34f2NCHwW4T1SL8MB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvb1pOeVJ5dFlXbVdIZmhfWTBJZkJiaFBWSXZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATih2MA0G
CSqGSIb3DQEBCwUAA4IBAQBEmbmpgGOYSFilSReyNTp4Z+Nf4Hs/Lc4GyXnVldsM
r4zjS4JUU3SpY1fIaqiGPU6IjYTUWK8OYXHc8S8U4hssJolNj7wXKqeovH0NAOuc
3UATeabdQi+HoKAdUymEMRxcz9Hu32CvpJl6sLjQEoM6qlD+CVq60mrLvc9XZm/6
KTN1xOc75lCUhQskjAnqHKmQNMXZbSR1HAcDqcm25rqWtEJtEWg/nXKeQAAUXwHR
d2Ra2XkRMVKbQoI+2eN7Zo5+GFwXPpEORmlGmBO+oD9q+BHJKMRDz6oJ/lsk1x7F
uWI69eFFB0IJMuYmTapWFttNbwwOStw43d8Oyan7vfdx
-----END CERTIFICATE-----
Generated at Sun May 19 10:29:40 2024 by rpki-client on console-ams.rpki-client.org