Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/onm2MA64wEAIHkfQQzaXR2JPZBQ.roa
File: onm2MA64wEAIHkfQQzaXR2JPZBQ.roa (raw, json)
Hash identifier: VQuLy+zzO8PsOIRp5ChI4W874M/oLxW08WXItz7LzhA=
Subject key identifier: A2:79:B6:30:0E:B8:C0:40:08:1E:47:D0:43:36:97:47:62:4F:64:14
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0192FAF2B02F99A5567EBE57A85D8BDA6E01
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/onm2MA64wEAIHkfQQzaXR2JPZBQ.roa
Signing time: Tue 05 Nov 2024 06:11:01 +0000
ROA not before: Tue 05 Nov 2024 06:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 195.178.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:f2:b0:2f:99:a5:56:7e:be:57:a8:5d:8b:da:6e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 5 06:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a279b6300eb8c040081e47d043369747624f6414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:b0:9d:73:8d:9e:35:44:cc:97:eb:61:28:
0d:c2:06:f1:80:5a:bb:dc:69:1d:51:69:f1:1c:bc:
ac:18:a1:da:b2:1e:fa:90:c6:cc:99:63:8c:f0:10:
5b:e5:88:b5:65:58:0b:28:3d:8f:8f:77:c6:31:89:
cd:0d:ac:2a:a9:5a:73:35:18:92:f3:fa:c1:fa:2d:
5a:70:c2:fd:c6:87:87:af:1a:5f:4e:56:30:c9:50:
5e:a5:91:02:49:d3:75:e9:51:e3:c2:21:92:f6:da:
ee:91:fa:64:c2:cc:f4:fc:76:0e:37:4e:8a:fc:29:
bc:a8:ae:a0:c3:06:95:4f:0e:62:33:9a:d8:a0:d6:
92:c0:c8:9f:1f:f7:90:6c:fd:da:03:c5:c9:56:cc:
d0:47:53:b0:d2:e2:ab:fa:48:22:ca:73:5a:0e:bb:
90:c2:98:c7:ef:01:ba:51:22:cc:11:c3:42:cf:8a:
09:9c:91:4c:b3:d9:0d:b1:81:b5:0e:6e:fe:94:ab:
69:c1:2b:17:26:32:8d:f8:9d:1b:24:c4:08:4b:49:
37:e3:d0:a7:7a:ab:c6:fe:d5:fe:63:ab:84:b7:a5:
b4:36:2e:04:c4:1c:39:5e:b0:3f:12:59:9c:1f:21:
30:55:56:e2:5a:18:ce:af:6e:59:b7:76:ce:00:ad:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:B6:30:0E:B8:C0:40:08:1E:47:D0:43:36:97:47:62:4F:64:14
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/onm2MA64wEAIHkfQQzaXR2JPZBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:bd:d9:32:0f:3b:f1:50:a7:30:a9:1b:fe:2e:7e:87:20:b6:
0d:49:6b:12:38:6e:1b:96:f1:11:29:be:70:f1:88:2e:f5:9d:
6f:04:de:87:14:17:33:f9:c1:37:86:03:26:c9:00:9a:da:ea:
92:20:43:27:c1:f0:82:72:3a:91:94:28:a0:e2:bf:04:07:1f:
81:31:53:26:bd:a7:2b:fb:2d:3d:4e:c6:52:12:1f:79:7c:ae:
28:83:67:94:f3:a6:0d:06:94:c3:40:48:50:fa:6d:dc:ea:41:
68:ed:b1:22:3e:62:84:c7:ac:3a:cd:93:84:46:42:45:83:b7:
66:0f:b6:7e:28:4c:55:38:2b:30:89:1b:ab:31:0d:e4:eb:b3:
93:a7:8d:04:92:86:2d:d8:11:65:4a:da:6b:2d:aa:7d:81:e6:
bc:29:e5:6d:49:8c:7f:4f:b3:33:dd:94:49:68:d9:50:f8:3d:
c0:aa:28:0c:ac:e1:28:02:57:22:7f:7a:f9:eb:97:cb:c8:23:
7f:ad:d9:b1:84:48:c8:51:f5:5d:fb:d5:b9:8f:bb:5f:cf:8e:
58:e5:99:c1:7e:fc:f1:65:15:16:1b:3d:db:5b:0f:57:3b:4a:
b9:80:aa:75:06:52:64:20:d7:bf:8c:c0:a8:ae:a9:cf:c7:85:
1d:d7:2b:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL68rAvmaVWfr5XqF2L2m4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjQxMTA1MDYxMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjc5YjYzMDBlYjhjMDQwMDgxZTQ3ZDA0MzM2OTc0NzYyNGY2NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI6wnXONnjVEzJfrYSgNwgbxgFq7
3GkdUWnxHLysGKHash76kMbMmWOM8BBb5Yi1ZVgLKD2Pj3fGMYnNDawqqVpzNRiS
8/rB+i1acML9xoeHrxpfTlYwyVBepZECSdN16VHjwiGS9trukfpkwsz0/HYON06K
/Cm8qK6gwwaVTw5iM5rYoNaSwMifH/eQbP3aA8XJVszQR1Ow0uKr+kgiynNaDruQ
wpjH7wG6USLMEcNCz4oJnJFMs9kNsYG1Dm7+lKtpwSsXJjKN+J0bJMQIS0k349Cn
eqvG/tX+Y6uEt6W0Ni4ExBw5XrA/ElmcHyEwVVbiWhjOr25Zt3bOAK0Y4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKJ5tjAOuMBACB5H0EM2l0diT2QUMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvb25tMk1BNjR3RUFJSGtmUVF6YVhSMkpQWkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw7KIMA0G
CSqGSIb3DQEBCwUAA4IBAQC8vdkyDzvxUKcwqRv+Ln6HILYNSWsSOG4blvERKb5w
8Ygu9Z1vBN6HFBcz+cE3hgMmyQCa2uqSIEMnwfCCcjqRlCig4r8EBx+BMVMmvacr
+y09TsZSEh95fK4og2eU86YNBpTDQEhQ+m3c6kFo7bEiPmKEx6w6zZOERkJFg7dm
D7Z+KExVOCswiRurMQ3k67OTp40EkoYt2BFlStprLap9gea8KeVtSYx/T7Mz3ZRJ
aNlQ+D3AqigMrOEoAlcif3r565fLyCN/rdmxhEjIUfVd+9W5j7tfz45Y5ZnBfvzx
ZRUWGz3bWw9XO0q5gKp1BlJkINe/jMCorqnPx4Ud1ytL
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:45 2024 by rpki-client on console-ams.rpki-client.org