Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/iU2b5zjrktG_VCdiJW23iWkZgpA.roa
File: iU2b5zjrktG_VCdiJW23iWkZgpA.roa (raw, json)
Hash identifier: p67lZdIXi/gBMcGsALKb/Xwn0IigHfsXxQfXlI4vrhQ=
Subject key identifier: 89:4D:9B:E7:38:EB:92:D1:BF:54:27:62:25:6D:B7:89:69:19:82:90
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 018CC7256FEAA5E5C51342D288E850B0ADD6
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/iU2b5zjrktG_VCdiJW23iWkZgpA.roa
Signing time: Mon 01 Jan 2024 22:29:28 +0000
ROA not before: Mon 01 Jan 2024 22:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20794
IP address blocks: 217.12.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:6f:ea:a5:e5:c5:13:42:d2:88:e8:50:b0:ad:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Jan 1 22:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=894d9be738eb92d1bf542762256db78969198290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:f8:e8:14:a3:1b:e0:23:17:15:af:c5:78:
a1:12:b3:1f:5f:ac:24:00:a2:af:65:2d:da:ba:bb:
73:6f:d3:7a:f6:84:b2:0c:40:13:77:d4:b1:77:19:
b9:19:11:03:4b:c6:a2:7a:93:17:f3:c2:f4:e6:81:
36:af:dc:7c:70:52:74:70:e6:49:43:47:2d:cb:32:
2c:e8:82:d0:19:6a:6a:97:35:51:47:91:49:1a:48:
80:ab:53:cf:8a:09:75:2f:7c:34:8c:06:f8:64:d4:
f4:0b:fc:0e:67:bd:66:31:77:6d:92:cf:27:67:29:
fa:62:1c:e8:6d:05:db:f3:b7:24:4d:d2:9a:40:29:
e3:07:28:85:92:79:be:cf:ab:e1:a5:db:0d:27:c4:
67:5b:45:c0:6a:aa:a6:bb:f9:f4:6e:84:69:fc:75:
e3:66:b0:2e:c8:c2:17:71:f5:dd:30:0a:de:75:3f:
bb:2c:21:9e:f0:a9:c6:83:ac:b4:1d:7b:39:b2:fd:
d8:63:c6:e9:82:a2:56:9c:2e:4f:60:50:61:7e:c6:
de:0c:37:4d:23:32:a8:04:5e:2b:83:29:df:cb:b0:
7f:57:42:e5:57:96:52:47:19:3f:86:ae:08:fb:47:
59:5b:9b:13:27:24:ec:22:f2:54:3a:66:5f:36:2b:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:9B:E7:38:EB:92:D1:BF:54:27:62:25:6D:B7:89:69:19:82:90
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/iU2b5zjrktG_VCdiJW23iWkZgpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:46:e1:3d:93:5a:cf:56:db:52:ab:ed:75:24:95:af:1c:2c:
98:ed:50:95:17:4f:a0:5b:99:89:47:7e:20:1d:67:49:34:47:
d2:a1:ec:1d:34:72:13:a5:1f:2f:41:0a:4c:c8:98:57:59:7a:
43:60:c1:22:3e:13:ae:04:c1:48:5e:3e:b7:7b:bb:b8:3d:ae:
44:a4:8e:ce:2c:29:ac:c0:95:31:3d:39:3d:dd:ba:1c:48:12:
91:47:d5:98:44:f7:20:5e:63:af:6e:e6:18:03:cb:fd:14:ff:
e4:02:a0:3c:0a:f9:f3:89:c5:54:49:88:f0:7a:cb:e2:0c:a2:
98:ee:c2:46:cd:e7:cc:a5:cb:51:8e:53:e5:e9:da:df:b7:66:
4d:58:ee:92:64:a3:31:cf:1c:54:b2:47:2d:fc:13:23:32:5d:
05:54:cb:3f:2a:b4:c1:b0:04:02:40:32:e8:8c:2c:04:c8:c2:
09:d2:00:78:37:6a:6d:68:35:07:b9:f5:99:1d:5e:b1:40:68:
9b:c9:b7:64:70:bc:1e:97:99:61:2d:fc:cf:51:e6:78:57:9b:
40:77:ce:cc:88:27:42:37:0c:b2:85:ed:4e:af:61:b4:de:3c:
9f:13:28:fd:87:a3:41:f8:7e:dc:a0:bc:33:b0:58:6f:b6:81:
63:0a:ae:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJW/qpeXFE0LSiOhQsK3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi
MTg1YWYwHhcNMjQwMTAxMjIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTRkOWJlNzM4ZWI5MmQxYmY1NDI3NjIyNTZkYjc4OTY5MTk4MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFP46BSjG+AjFxWvxXihErMfX6wk
AKKvZS3aurtzb9N69oSyDEATd9Sxdxm5GREDS8aiepMX88L05oE2r9x8cFJ0cOZJ
Q0ctyzIs6ILQGWpqlzVRR5FJGkiAq1PPigl1L3w0jAb4ZNT0C/wOZ71mMXdtks8n
Zyn6YhzobQXb87ckTdKaQCnjByiFknm+z6vhpdsNJ8RnW0XAaqqmu/n0boRp/HXj
ZrAuyMIXcfXdMAredT+7LCGe8KnGg6y0HXs5sv3YY8bpgqJWnC5PYFBhfsbeDDdN
IzKoBF4rgynfy7B/V0LlV5ZSRxk/hq4I+0dZW5sTJyTsIvJUOmZfNit7+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlNm+c465LRv1QnYiVtt4lpGYKQMB8GA1UdIwQY
MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt
YmY3OGJiODVhNjllLzEvaVUyYjV6anJrdEdfVkNkaUpXMjNpV2taZ3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll
LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2QygMA0G
CSqGSIb3DQEBCwUAA4IBAQBaRuE9k1rPVttSq+11JJWvHCyY7VCVF0+gW5mJR34g
HWdJNEfSoewdNHITpR8vQQpMyJhXWXpDYMEiPhOuBMFIXj63e7u4Pa5EpI7OLCms
wJUxPTk93bocSBKRR9WYRPcgXmOvbuYYA8v9FP/kAqA8CvnzicVUSYjwesviDKKY
7sJGzefMpctRjlPl6drft2ZNWO6SZKMxzxxUskct/BMjMl0FVMs/KrTBsAQCQDLo
jCwEyMIJ0gB4N2ptaDUHufWZHV6xQGibybdkcLwel5lhLfzPUeZ4V5tAd87MiCdC
Nwyyhe1Or2G03jyfEyj9h6NB+H7coLwzsFhvtoFjCq7z
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:47 2024 by rpki-client on console-fra.rpki-client.org