Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/asZLoYN2XKAisD1XOliArbVi6m4.roa
File: asZLoYN2XKAisD1XOliArbVi6m4.roa (raw, json)
Hash identifier: 6lzXdCZ8y933Ff0ViXLZCYmVl0/k/GN4r0Gq+sc+aYY=
Subject key identifier: 6A:C6:4B:A1:83:76:5C:A0:22:B0:3D:57:3A:58:80:AD:B5:62:EA:6E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0192AF2B0B38AFBA58BA0D1BAD14D8B0A3F1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/asZLoYN2XKAisD1XOliArbVi6m4.roa
Signing time: Mon 21 Oct 2024 13:01:26 +0000
ROA not before: Mon 21 Oct 2024 13:01:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 46.38.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:2b:0b:38:af:ba:58:ba:0d:1b:ad:14:d8:b0:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 21 13:01:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac64ba183765ca022b03d573a5880adb562ea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:0a:51:73:74:66:eb:9b:c7:7a:13:0f:a2:
6b:3d:9a:83:41:d0:79:fb:52:ac:7c:63:44:d8:b6:
62:76:9b:59:67:46:cc:8b:b4:cc:75:e2:d2:44:ce:
f5:cb:c7:ab:cf:38:94:ea:6d:3c:40:4b:d8:8a:c0:
9f:72:ce:a4:57:9b:bb:85:a0:01:02:78:82:e5:3a:
44:4a:24:0c:dd:3f:db:18:12:c7:53:17:89:10:b5:
85:dd:83:fa:bd:4f:fe:fd:7c:b8:58:ba:b9:44:a4:
e0:89:0d:13:bf:5c:87:3c:b1:23:e4:ce:4f:f1:b0:
43:c7:dc:6a:f5:07:07:28:60:43:ac:d4:25:1e:0a:
6b:72:b7:7b:40:b1:ae:f5:e2:12:ba:f4:94:8f:ea:
9c:17:43:f0:e6:20:42:33:7f:f7:90:e2:89:55:43:
93:bb:f6:71:d1:d8:47:ad:e6:4c:98:4c:5f:a1:a3:
fc:19:f8:fe:ae:4f:c0:36:e6:db:83:86:fd:18:43:
f0:a7:6d:b0:54:e0:24:5b:be:81:51:ea:17:e2:eb:
d9:e0:5b:71:f0:a1:85:72:34:49:bf:bc:85:67:b9:
f1:e8:41:84:57:46:31:32:7b:7f:48:83:dc:65:9c:
ff:d4:e2:0e:4e:d4:76:6b:96:2e:cd:50:6e:6d:6e:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:4B:A1:83:76:5C:A0:22:B0:3D:57:3A:58:80:AD:B5:62:EA:6E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/asZLoYN2XKAisD1XOliArbVi6m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.155.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bb:d3:e0:a4:25:3c:e7:e1:05:c7:71:3b:df:e4:9c:4a:7a:
b3:8c:87:e2:d5:c0:5c:7f:02:5b:f4:43:bd:60:e9:03:81:d1:
66:bc:4f:e5:26:00:15:db:5d:53:16:d6:ec:23:60:70:71:ef:
3a:7a:4e:1b:89:ee:c2:12:32:80:d9:aa:42:e0:cb:93:36:3d:
ed:c5:0c:7b:12:da:5d:ae:6f:c3:9e:b6:af:5a:c6:3b:f5:a6:
fb:be:d8:97:2f:d6:d8:6d:b4:10:aa:c5:0c:32:44:4c:f9:d6:
ed:3b:c5:7e:17:65:13:63:69:91:5e:07:17:8a:60:da:18:3c:
85:f4:43:a0:84:11:44:78:66:49:19:73:43:1d:55:e9:9b:33:
89:a4:14:ca:3a:a0:2b:13:6c:7e:98:2b:8e:e4:e1:48:49:e8:
ef:93:f1:a9:eb:4e:0e:41:45:99:fc:66:75:69:c7:cd:22:5b:
6f:3d:9d:3d:77:5d:21:a0:5f:b7:03:4e:b2:31:0b:2a:a9:ed:
ee:1e:20:04:77:1b:21:6b:75:04:ff:25:30:f5:79:71:3a:41:
79:7e:52:5b:aa:c9:0b:c8:f7:b9:2b:3c:25:b5:d3:e3:09:ec:
1d:c1:e2:0f:66:fa:bf:7b:72:f9:e7:ce:4f:5c:e5:11:c0:a3:
62:65:08:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKvKws4r7pYug0brRTYsKPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQxMDIxMTMwMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWM2NGJhMTgzNzY1Y2EwMjJiMDNkNTczYTU4ODBhZGI1NjJlYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/gKUXN0Zuubx3oTD6JrPZqDQdB5
+1KsfGNE2LZidptZZ0bMi7TMdeLSRM71y8erzziU6m08QEvYisCfcs6kV5u7haAB
AniC5TpESiQM3T/bGBLHUxeJELWF3YP6vU/+/Xy4WLq5RKTgiQ0Tv1yHPLEj5M5P
8bBDx9xq9QcHKGBDrNQlHgprcrd7QLGu9eISuvSUj+qcF0Pw5iBCM3/3kOKJVUOT
u/Zx0dhHreZMmExfoaP8Gfj+rk/ANubbg4b9GEPwp22wVOAkW76BUeoX4uvZ4Ftx
8KGFcjRJv7yFZ7nx6EGEV0YxMnt/SIPcZZz/1OIOTtR2a5YuzVBubW6CyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGrGS6GDdlygIrA9VzpYgK21YupuMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvYXNaTG9ZTjJYS0Fpc0QxWE9saUFyYlZpNm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiabMA0G
CSqGSIb3DQEBCwUAA4IBAQAiu9PgpCU85+EFx3E73+ScSnqzjIfi1cBcfwJb9EO9
YOkDgdFmvE/lJgAV211TFtbsI2Bwce86ek4bie7CEjKA2apC4MuTNj3txQx7Etpd
rm/DnravWsY79ab7vtiXL9bYbbQQqsUMMkRM+dbtO8V+F2UTY2mRXgcXimDaGDyF
9EOghBFEeGZJGXNDHVXpmzOJpBTKOqArE2x+mCuO5OFISejvk/Gp604OQUWZ/GZ1
acfNIltvPZ09d10hoF+3A06yMQsqqe3uHiAEdxsha3UE/yUw9XlxOkF5flJbqskL
yPe5KzwltdPjCewdweIPZvq/e3L5585PXOURwKNiZQj/
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:15 2024 by rpki-client on console-fra.rpki-client.org