Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3cz6P760pBFdi7ZQJ2WSO-PiQ40.roa
File: 3cz6P760pBFdi7ZQJ2WSO-PiQ40.roa (raw, json)
Hash identifier: k3rdywD0ImOdPlVTj0zcpCECcVTQFML9mEjgGMGXris=
Subject key identifier: DD:CC:FA:3F:BE:B4:A4:11:5D:8B:B6:50:27:65:92:3B:E3:E2:43:8D
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018CC6B783A7EACA560862D0442DC05DED49
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3cz6P760pBFdi7ZQJ2WSO-PiQ40.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61008
IP address blocks: 46.143.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:83:a7:ea:ca:56:08:62:d0:44:2d:c0:5d:ed:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddccfa3fbeb4a4115d8bb6502765923be3e2438d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:98:23:78:f1:0a:e4:1e:42:1b:23:df:01:6e:
57:19:6e:05:f4:d0:15:b1:77:8e:0c:51:7a:b6:3d:
b7:27:ea:17:da:87:1e:e7:92:05:91:cb:d4:e0:3d:
bd:e4:0d:12:86:fe:57:1b:7b:bc:fb:ac:ba:4f:8e:
71:ad:ee:f1:68:77:c6:83:87:cb:e6:61:76:f5:10:
ca:9d:07:8c:17:0d:68:d7:db:18:a7:9a:02:2a:7f:
6a:bf:e6:7a:1c:5d:99:bf:93:3c:90:e7:14:39:b8:
42:cd:4d:73:09:94:77:e5:ce:6e:0e:36:f9:17:e7:
1a:87:14:05:5d:fa:7a:e1:60:aa:9a:00:2f:87:c0:
5c:fc:91:2b:03:d3:e3:e1:32:1a:7d:65:48:d4:31:
92:8f:f3:19:a0:5b:80:a3:89:4f:2f:56:a3:b3:5d:
41:3c:56:14:24:23:59:32:97:5b:da:18:f3:9a:be:
11:b3:89:80:41:47:71:62:6b:01:00:80:75:e3:5f:
c7:1b:93:00:e2:5d:25:df:5d:8d:f1:2e:9b:80:e0:
fc:18:8b:ef:87:7e:ed:e9:32:dd:21:83:61:ef:03:
2c:5c:7d:82:bd:f1:45:32:ce:ae:6a:4a:dc:46:21:
e8:64:7c:36:3c:e0:1c:1e:b9:81:c4:62:d0:b0:dc:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:FA:3F:BE:B4:A4:11:5D:8B:B6:50:27:65:92:3B:E3:E2:43:8D
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/3cz6P760pBFdi7ZQJ2WSO-PiQ40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.240.0/20
Signature Algorithm: sha256WithRSAEncryption
79:87:a7:5f:47:50:23:cc:13:4d:e7:1e:7a:23:ca:24:7d:07:
e8:dd:77:ce:48:59:bd:ce:27:2f:93:4d:c3:91:3e:ee:94:c9:
a4:5a:3d:5a:22:8c:10:85:ce:dd:60:0c:f8:21:73:a2:59:f0:
c0:fa:b8:40:9b:26:31:42:d0:08:53:e3:f4:18:f4:d1:5d:4f:
1c:b3:15:8a:ef:63:20:66:fa:35:05:54:56:4e:ac:09:02:70:
d5:0f:67:34:f3:b4:4f:0b:57:07:40:d9:dd:38:b7:96:b2:37:
1a:a5:44:9d:bc:bb:78:e9:c6:0e:4d:3a:65:30:f1:23:4d:9d:
a1:26:10:05:b5:51:2d:6a:65:90:4a:e0:c1:85:62:b0:9f:08:
76:29:7f:25:5f:37:3e:25:4e:4e:87:ff:37:d9:1c:19:e1:b5:
39:d6:c9:b4:df:da:fb:35:da:9a:b7:d1:e1:94:10:ab:ce:42:
cf:ee:b0:fa:4e:55:b9:7e:1e:7b:77:f7:ce:d2:a9:42:38:7f:
f5:3f:fa:20:d0:a7:68:70:5c:97:9b:a4:52:e0:24:90:4b:9a:
2f:ae:8a:33:56:8e:15:d2:85:83:5f:c4:7a:4b:fe:74:3b:fa:
26:cc:fe:d9:9b:b8:69:b0:25:4a:12:2a:20:af:08:0e:2a:be:
90:38:dc:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt4On6spWCGLQRC3AXe1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjQwMTAxMjAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGNjZmEzZmJlYjRhNDExNWQ4YmI2NTAyNzY1OTIzYmUzZTI0MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpgjePEK5B5CGyPfAW5XGW4F9NAV
sXeODFF6tj23J+oX2oce55IFkcvU4D295A0Shv5XG3u8+6y6T45xre7xaHfGg4fL
5mF29RDKnQeMFw1o19sYp5oCKn9qv+Z6HF2Zv5M8kOcUObhCzU1zCZR35c5uDjb5
F+cahxQFXfp64WCqmgAvh8Bc/JErA9Pj4TIafWVI1DGSj/MZoFuAo4lPL1ajs11B
PFYUJCNZMpdb2hjzmr4Rs4mAQUdxYmsBAIB141/HG5MA4l0l312N8S6bgOD8GIvv
h37t6TLdIYNh7wMsXH2CvfFFMs6uakrcRiHoZHw2POAcHrmBxGLQsNywDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3M+j++tKQRXYu2UCdlkjvj4kONMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvM2N6NlA3NjBwQkZkaTdaUUoyV1NPLVBpUTQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELo/wMA0G
CSqGSIb3DQEBCwUAA4IBAQB5h6dfR1AjzBNN5x56I8okfQfo3XfOSFm9zicvk03D
kT7ulMmkWj1aIowQhc7dYAz4IXOiWfDA+rhAmyYxQtAIU+P0GPTRXU8csxWK72Mg
Zvo1BVRWTqwJAnDVD2c087RPC1cHQNndOLeWsjcapUSdvLt46cYOTTplMPEjTZ2h
JhAFtVEtamWQSuDBhWKwnwh2KX8lXzc+JU5Oh/832RwZ4bU51sm039r7Ndqat9Hh
lBCrzkLP7rD6TlW5fh57d/fO0qlCOH/1P/og0KdocFyXm6RS4CSQS5ovroozVo4V
0oWDX8R6S/50O/omzP7Zm7hpsCVKEiogrwgOKr6QONyf
-----END CERTIFICATE-----
Generated at Sun May 12 06:08:20 2024 by rpki-client on console-fra.rpki-client.org