Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/I5ecp6Iz7dahbDvn-ol0tOwjBF4.roa
File: I5ecp6Iz7dahbDvn-ol0tOwjBF4.roa (raw, json)
Hash identifier: 7B5j1NJpiqhv6mskCHn6MVFiKZ0gTw5GFzmsBIRN7No=
Subject key identifier: 23:97:9C:A7:A2:33:ED:D6:A1:6C:3B:E7:FA:89:74:B4:EC:23:04:5E
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC794208CA1D1B1A3A296C34CC077CA9D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/I5ecp6Iz7dahbDvn-ol0tOwjBF4.roa
Signing time: Tue 02 Jan 2024 00:30:22 +0000
ROA not before: Tue 02 Jan 2024 00:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201746
IP address blocks: 46.8.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:20:8c:a1:d1:b1:a3:a2:96:c3:4c:c0:77:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23979ca7a233edd6a16c3be7fa8974b4ec23045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:71:04:1f:81:9b:68:9c:05:cd:9c:17:03:
07:2d:22:e8:3e:2d:04:8f:f4:a8:d3:c5:e1:fb:51:
69:0f:c2:ed:89:f4:84:78:ec:11:83:d5:98:5e:9c:
a0:83:1b:c8:6f:1f:40:44:fc:7c:de:d5:8c:38:27:
c2:61:fb:9d:bb:6c:de:e8:85:b0:2c:46:0f:c2:b9:
11:f9:d4:18:65:61:12:7e:19:14:c6:f6:95:7c:67:
7e:3d:c0:44:b6:f7:6d:c5:c4:9e:2d:77:01:1e:11:
d6:68:e9:ed:bb:cf:e0:6b:0d:9a:b5:b0:65:85:4a:
9e:54:ed:86:bb:36:d3:d8:ea:96:57:31:d6:9d:73:
25:b1:5c:63:6f:42:40:2d:51:f7:26:a7:3a:08:4b:
c6:c1:19:35:8d:95:3d:76:5c:50:b1:59:d9:bb:95:
57:83:13:79:e5:a3:d3:a8:fe:b6:6f:bf:c9:3c:ac:
39:f7:4b:88:d3:a0:4a:48:38:85:2b:a3:e5:b9:b4:
87:f0:61:c5:a6:a1:a1:28:77:fa:f9:81:26:ee:3a:
50:68:85:07:a9:a8:1b:1c:8a:ef:4d:47:57:56:a9:
e6:c5:db:cd:48:fe:6b:bc:2b:f7:54:c6:5d:b9:f5:
e3:99:5c:a4:ba:ac:60:f0:19:86:36:f0:3b:61:ef:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:9C:A7:A2:33:ED:D6:A1:6C:3B:E7:FA:89:74:B4:EC:23:04:5E
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/I5ecp6Iz7dahbDvn-ol0tOwjBF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.160.0/20
Signature Algorithm: sha256WithRSAEncryption
89:ff:7a:93:1e:5a:21:11:8b:20:28:a2:82:af:21:a9:1a:5e:
4a:fc:9a:94:d2:b6:44:a4:5d:3f:a8:d1:34:58:7e:c4:f4:62:
c0:32:3c:bb:37:10:06:3d:1f:45:d4:fd:28:42:a3:8d:35:3a:
80:02:11:8d:24:df:62:01:22:fb:1b:fa:8a:74:91:40:30:74:
27:4b:ab:69:69:28:45:e1:c1:fe:99:38:76:23:a4:f0:72:67:
f3:c1:7c:2f:28:00:62:34:c2:ca:05:a8:4a:37:79:6f:99:b5:
a9:45:1f:c8:10:14:8f:e2:12:51:55:b6:6a:49:42:f3:5e:ad:
c2:9d:77:af:12:a0:a8:c2:bd:3c:07:f8:b7:06:52:cf:da:43:
b8:25:a0:b6:fc:8f:53:ef:01:bc:69:a4:2a:02:40:8e:fd:30:
b8:eb:f2:33:d0:bb:cf:db:1c:a9:07:e0:ee:54:0e:c9:70:89:
55:8d:b3:d5:36:12:41:f2:2d:e4:eb:74:11:b4:15:f2:ca:e1:
09:e9:51:32:01:73:d6:eb:6b:03:7a:9d:72:25:eb:28:3d:11:
90:43:53:c5:0c:41:96:39:1c:30:33:96:55:9c:73:f8:54:1a:
23:f3:ab:ed:bb:7d:31:65:d2:50:75:e3:99:54:ab:44:8e:4e:
ef:1e:81:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlCCModGxo6KWw0zAd8qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwMTAyMDAzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzk3OWNhN2EyMzNlZGQ2YTE2YzNiZTdmYTg5NzRiNGVjMjMwNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLBxBB+Bm2icBc2cFwMHLSLoPi0E
j/So08Xh+1FpD8LtifSEeOwRg9WYXpyggxvIbx9ARPx83tWMOCfCYfudu2ze6IWw
LEYPwrkR+dQYZWESfhkUxvaVfGd+PcBEtvdtxcSeLXcBHhHWaOntu8/gaw2atbBl
hUqeVO2GuzbT2OqWVzHWnXMlsVxjb0JALVH3Jqc6CEvGwRk1jZU9dlxQsVnZu5VX
gxN55aPTqP62b7/JPKw590uI06BKSDiFK6PlubSH8GHFpqGhKHf6+YEm7jpQaIUH
qagbHIrvTUdXVqnmxdvNSP5rvCv3VMZdufXjmVykuqxg8BmGNvA7Ye+V9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOXnKeiM+3WoWw75/qJdLTsIwReMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvSTVlY3A2SXo3ZGFoYkR2bi1vbDB0T3dqQkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELgigMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ/3qTHlohEYsgKKKCryGpGl5K/JqU0rZEpF0/qNE0
WH7E9GLAMjy7NxAGPR9F1P0oQqONNTqAAhGNJN9iASL7G/qKdJFAMHQnS6tpaShF
4cH+mTh2I6TwcmfzwXwvKABiNMLKBahKN3lvmbWpRR/IEBSP4hJRVbZqSULzXq3C
nXevEqCowr08B/i3BlLP2kO4JaC2/I9T7wG8aaQqAkCO/TC46/Iz0LvP2xypB+Du
VA7JcIlVjbPVNhJB8i3k63QRtBXyyuEJ6VEyAXPW62sDep1yJesoPRGQQ1PFDEGW
ORwwM5ZVnHP4VBoj86vtu30xZdJQdeOZVKtEjk7vHoEQ
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:22:39 2024 by rpki-client on console-ams.rpki-client.org