Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4fDgncTrWaYDjak1pzrx19XdoU.roa
File: r4fDgncTrWaYDjak1pzrx19XdoU.roa (raw, json)
Hash identifier: HrwWcOTmAxfph+VT66NxvNEgibv5Z5rQgiMUnDaBtiI=
Subject key identifier: AF:87:C3:82:77:13:AD:66:98:0E:36:A4:D6:9C:EB:C7:5F:57:76:85
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A68494AFCFDC18BCB48B0A53B7961
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4fDgncTrWaYDjak1pzrx19XdoU.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 188.253.8.0/22 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:68:49:4a:fc:fd:c1:8b:cb:48:b0:a5:3b:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af87c3827713ad66980e36a4d69cebc75f577685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:c1:c2:ee:3f:27:53:0b:f3:81:85:65:89:
9a:f0:a1:c4:4a:c3:0e:ed:5a:56:ae:c3:ec:59:0e:
19:f4:c7:08:9c:df:1d:cd:ae:7b:a8:ca:06:f9:ef:
cb:cd:b8:6b:db:b6:98:dd:32:ab:3a:69:e4:31:81:
bf:6a:d0:5f:48:5d:20:80:09:e6:f9:83:92:1a:57:
42:ba:26:2c:46:6e:e6:05:7f:60:d1:14:04:e8:ce:
4d:91:39:ff:f9:fb:08:1e:36:3d:f3:a4:07:63:6d:
15:c1:fb:44:d6:f6:18:78:1d:4a:71:a7:e4:12:40:
14:9c:1e:d3:ba:52:51:d7:d9:d3:cd:8b:9a:22:4e:
ed:06:6d:81:90:06:92:59:16:0b:b7:4c:87:46:1f:
d0:28:11:4a:ed:c5:c8:bc:f9:49:92:7e:cf:6d:16:
fa:39:a5:27:47:b5:18:ba:37:38:62:e7:a9:8d:8e:
8b:8e:86:f6:a0:75:4c:de:9e:c0:85:46:ba:12:39:
1a:6e:1d:d3:77:7c:70:de:1a:df:97:a6:d1:7c:4a:
f2:6f:17:f3:db:b8:36:dd:15:80:de:03:4c:44:07:
ce:55:e5:15:5d:5f:c4:e8:2b:9b:fd:1f:23:b8:45:
41:cc:7a:be:a9:7c:be:68:bb:00:ce:59:a7:1e:43:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:C3:82:77:13:AD:66:98:0E:36:A4:D6:9C:EB:C7:5F:57:76:85
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/r4fDgncTrWaYDjak1pzrx19XdoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.8.0/22
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:48:55:b0:80:4c:45:ec:81:0b:5e:b7:a7:2f:37:9b:5d:79:
ae:16:fe:fa:79:6a:e8:01:98:fc:cc:19:9a:a9:0e:53:7b:c6:
c9:95:dd:e1:ab:3f:d8:7f:c9:53:94:9b:80:7f:77:a0:ab:6a:
3b:47:03:55:1d:3a:b7:3c:e0:b9:be:c7:34:27:28:bc:42:8c:
e3:e4:ce:60:43:22:9c:45:8d:b2:af:4c:35:7e:57:ee:9f:d1:
13:2d:a7:5c:32:2f:7e:52:80:c0:f6:cd:2d:54:68:56:28:d0:
31:04:7c:f7:e0:08:c6:ce:99:71:c1:ec:39:19:ec:17:8a:69:
dc:83:45:85:3e:a5:3e:e6:dd:d7:6c:71:a1:e0:e0:a0:cd:93:
9a:03:0d:da:f4:ba:54:6a:92:1b:9c:5e:79:56:fb:85:86:fc:
9a:64:91:c9:f2:d8:dd:b1:92:bf:82:3f:2a:c5:0e:ff:4c:a4:
c7:72:af:ae:55:1d:ea:e1:fc:10:18:b5:12:b6:ff:98:7a:a1:
d1:7c:54:16:0a:02:aa:a3:6e:57:c8:92:c5:ab:47:ea:46:f1:
61:0f:18:a5:72:08:c8:d8:5d:45:55:77:84:00:d0:31:ab:fd:
c0:4b:a0:5b:74:3a:34:fa:0f:31:a9:9c:3b:56:14:02:b3:90:
cd:0a:2e:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKmhJSvz9wYvLSLClO3lhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQwMTAyMTIzMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjg3YzM4Mjc3MTNhZDY2OTgwZTM2YTRkNjljZWJjNzVmNTc3Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzBwu4/J1ML84GFZYma8KHESsMO
7VpWrsPsWQ4Z9McInN8dza57qMoG+e/Lzbhr27aY3TKrOmnkMYG/atBfSF0ggAnm
+YOSGldCuiYsRm7mBX9g0RQE6M5NkTn/+fsIHjY986QHY20VwftE1vYYeB1Kcafk
EkAUnB7TulJR19nTzYuaIk7tBm2BkAaSWRYLt0yHRh/QKBFK7cXIvPlJkn7PbRb6
OaUnR7UYujc4YuepjY6Ljob2oHVM3p7AhUa6Ejkabh3Td3xw3hrfl6bRfErybxfz
27g23RWA3gNMRAfOVeUVXV/E6Cub/R8juEVBzHq+qXy+aLsAzlmnHkM5vQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK+Hw4J3E61mmA42pNac68dfV3aFMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvcjRmRGduY1RyV2FZRGphazFwenJ4MTlYZG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvP0IAwQC
1a0gMA0GCSqGSIb3DQEBCwUAA4IBAQAuSFWwgExF7IELXrenLzebXXmuFv76eWro
AZj8zBmaqQ5Te8bJld3hqz/Yf8lTlJuAf3egq2o7RwNVHTq3POC5vsc0Jyi8Qozj
5M5gQyKcRY2yr0w1flfun9ETLadcMi9+UoDA9s0tVGhWKNAxBHz34AjGzplxwew5
GewXimncg0WFPqU+5t3XbHGh4OCgzZOaAw3a9LpUapIbnF55VvuFhvyaZJHJ8tjd
sZK/gj8qxQ7/TKTHcq+uVR3q4fwQGLUStv+YeqHRfFQWCgKqo25XyJLFq0fqRvFh
DxilcgjI2F1FVXeEANAxq/3AS6BbdDo0+g8xqZw7VhQCs5DNCi5o
-----END CERTIFICATE-----
Generated at Mon May 6 18:11:23 2024 by rpki-client on console-ams.rpki-client.org