Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/i3MI_aIrB9MMJu210WVUV5EymHE.roa
File: i3MI_aIrB9MMJu210WVUV5EymHE.roa (raw, json)
Hash identifier: C13Ww4sinkizanDRrIkWZfpVI/M45Lfe/nSkJu33+Go=
Subject key identifier: 8B:73:08:FD:A2:2B:07:D3:0C:26:ED:B5:D1:65:54:57:91:32:98:71
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 018E1BF4F0CCA654FF414E4006EBEC6EC83E
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/i3MI_aIrB9MMJu210WVUV5EymHE.roa
Signing time: Fri 08 Mar 2024 02:47:01 +0000
ROA not before: Fri 08 Mar 2024 02:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48271
IP address blocks: 212.2.224.0/21 maxlen: 24
212.2.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1b:f4:f0:cc:a6:54:ff:41:4e:40:06:eb:ec:6e:c8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Mar 8 02:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7308fda22b07d30c26edb5d165545791329871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:83:9e:5e:0f:43:34:6b:bc:4c:dd:2d:61:
d5:47:3c:11:e4:4e:67:8d:87:30:73:37:d5:4a:93:
a3:b6:12:a5:0b:ff:a3:27:bf:18:c0:32:61:65:7a:
04:c7:76:21:15:20:78:a4:26:54:7e:9e:a4:08:68:
86:ab:80:51:16:56:9b:33:d8:c5:f8:e8:36:e7:a2:
e8:95:0b:a5:58:01:bf:9a:d0:2f:51:2d:03:bf:62:
66:2b:12:3a:de:e3:c9:42:49:d8:5b:e8:90:e6:da:
e1:99:2b:db:bc:17:5e:9b:c2:f4:b4:db:1a:dc:5d:
8e:d3:92:f4:eb:41:b4:38:ce:76:6d:15:dc:b0:54:
a6:4a:0a:c2:9c:6c:d0:91:3e:1e:00:64:07:71:09:
3d:9d:87:a6:64:62:81:8b:6f:dd:c6:c0:45:14:05:
7a:51:e8:d1:6b:45:6e:56:a9:e3:11:6c:82:3a:15:
d3:c1:30:77:9c:1a:96:5c:1e:25:ba:77:1e:83:7b:
10:f3:cb:2b:65:29:c8:03:19:e4:23:1f:b7:4a:e7:
fa:d2:bc:c3:f2:9e:f5:68:58:36:3a:6a:4e:b5:45:
41:37:71:8f:81:66:c8:3b:fc:d9:fa:71:15:76:6a:
4d:6d:58:86:3d:f1:d9:09:9f:67:9a:d3:7a:0f:f7:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:08:FD:A2:2B:07:D3:0C:26:ED:B5:D1:65:54:57:91:32:98:71
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/i3MI_aIrB9MMJu210WVUV5EymHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.224.0-212.2.233.255
Signature Algorithm: sha256WithRSAEncryption
4a:d9:1b:fa:64:2c:17:f5:47:7c:51:1d:cc:dd:27:f8:74:eb:
dc:1c:f4:4e:8f:75:26:eb:58:1c:c6:d4:85:f9:d7:c6:9d:22:
31:b7:7f:e6:8b:5d:b9:75:ab:b1:8f:d4:16:fc:01:75:ee:12:
08:80:9a:b3:62:a6:83:fd:a3:9d:de:19:af:11:e1:a6:ec:60:
84:a4:7c:c5:8d:b1:41:3c:aa:a0:0f:ff:09:54:8a:b3:c2:9a:
bc:5c:75:3c:0b:c2:7e:61:77:da:12:bc:c0:47:2e:d5:fd:6f:
a1:f5:60:bb:20:82:46:39:46:88:22:cc:b3:5b:cf:3e:b3:53:
94:f7:25:40:0c:37:f3:7c:e5:5f:ec:4c:e0:e6:ec:59:08:fc:
01:ba:3d:d4:58:18:1f:b2:6b:d2:e7:b5:26:51:9d:4e:91:ad:
a9:be:8e:52:54:d1:0a:0e:c9:33:89:d6:83:4a:61:57:d1:39:
d2:d7:1b:65:57:f2:ae:bb:a2:29:c1:6a:04:0c:f4:7b:b3:67:
5c:51:83:cd:93:76:f3:ae:ef:f0:24:ac:79:df:75:20:29:a7:
3d:73:c5:97:fb:79:7d:cf:5c:0d:c5:1e:8c:a0:de:bc:a2:ad:
47:52:b0:4f:55:ba:f7:fe:60:1b:26:e1:42:be:a4:8c:61:36:
a7:34:26:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY4b9PDMplT/QU5ABuvsbsg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2
NjU0ODAwHhcNMjQwMzA4MDI0NzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjczMDhmZGEyMmIwN2QzMGMyNmVkYjVkMTY1NTQ1NzkxMzI5ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBCDnl4PQzRrvEzdLWHVRzwR5E5n
jYcwczfVSpOjthKlC/+jJ78YwDJhZXoEx3YhFSB4pCZUfp6kCGiGq4BRFlabM9jF
+Og256LolQulWAG/mtAvUS0Dv2JmKxI63uPJQknYW+iQ5trhmSvbvBdem8L0tNsa
3F2O05L060G0OM52bRXcsFSmSgrCnGzQkT4eAGQHcQk9nYemZGKBi2/dxsBFFAV6
UejRa0VuVqnjEWyCOhXTwTB3nBqWXB4lunceg3sQ88srZSnIAxnkIx+3Suf60rzD
8p71aFg2OmpOtUVBN3GPgWbIO/zZ+nEVdmpNbViGPfHZCZ9nmtN6D/fWdQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFItzCP2iKwfTDCbttdFlVFeRMphxMB8GA1UdIwQY
MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct
YTU1YjU4MGIwZWEzLzEvaTNNSV9hSXJCOU1NSnUyMTBXVlVWNUV5bUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz
LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXUAuAD
BAHUAugwDQYJKoZIhvcNAQELBQADggEBAErZG/pkLBf1R3xRHczdJ/h069wc9E6P
dSbrWBzG1IX518adIjG3f+aLXbl1q7GP1Bb8AXXuEgiAmrNipoP9o53eGa8R4abs
YISkfMWNsUE8qqAP/wlUirPCmrxcdTwLwn5hd9oSvMBHLtX9b6H1YLsggkY5Rogi
zLNbzz6zU5T3JUAMN/N85V/sTODm7FkI/AG6PdRYGB+ya9LntSZRnU6Rram+jlJU
0QoOyTOJ1oNKYVfROdLXG2VX8q67oinBagQM9HuzZ1xRg82TdvOu7/AkrHnfdSAp
pz1zxZf7eX3PXA3FHoyg3ryirUdSsE9Vuvf+YBsm4UK+pIxhNqc0JnY=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:15:40 2024 by rpki-client on console-ams.rpki-client.org