Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/l-i1WGHiFl28Rr2s9UOxJGklFKg.roa
File: l-i1WGHiFl28Rr2s9UOxJGklFKg.roa (raw, json)
Hash identifier: fhf07/86yALBPWTTFS97CPX+nSQwnlIf7P3y45JZ0NI=
Subject key identifier: 97:E8:B5:58:61:E2:16:5D:BC:46:BD:AC:F5:43:B1:24:69:25:14:A8
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 018CC6B77C5F30FEA71D01377F11EA5E2B9D
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/l-i1WGHiFl28Rr2s9UOxJGklFKg.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 138.231.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7c:5f:30:fe:a7:1d:01:37:7f:11:ea:5e:2b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97e8b55861e2165dbc46bdacf543b124692514a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:8a:1c:8b:af:ec:52:6f:f5:d0:52:25:6a:
48:6e:d7:e9:31:5c:eb:44:44:89:1a:ce:c2:2a:17:
f4:57:56:34:13:83:6a:54:92:81:27:d0:53:f4:8e:
52:43:92:e1:95:b3:e7:c3:90:75:77:15:e9:1a:85:
e9:a3:d9:5e:ae:e5:d0:e1:f3:c5:c8:4f:0e:93:65:
ca:bc:df:6c:cc:30:b0:70:42:6c:80:77:2f:e9:4b:
63:8c:c9:d8:68:42:76:64:b8:6b:81:f0:0d:d6:be:
4b:e8:dd:60:a1:67:04:c2:f3:ce:06:5a:51:34:74:
de:95:5f:e3:e6:f0:c4:6e:9a:1d:5e:53:68:9d:52:
29:be:14:83:9f:1f:60:73:3e:da:27:fb:47:32:f5:
53:88:6b:20:ea:9f:03:96:86:53:bf:b0:e2:bd:d0:
68:98:14:3e:43:fe:dc:8e:a8:84:5e:c6:0d:33:a8:
ba:0d:2d:29:a6:34:30:5c:26:be:8b:9f:7c:2b:fe:
f2:7d:90:02:29:90:ea:65:34:41:82:e3:db:5b:c9:
a1:7b:be:42:67:3a:53:19:10:39:0e:e3:3f:a1:cc:
96:8c:1e:c9:7e:ec:c8:51:6e:6a:d7:dd:b0:c9:12:
31:fc:bf:01:58:cd:4f:36:18:4d:09:d0:df:c7:2a:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:B5:58:61:E2:16:5D:BC:46:BD:AC:F5:43:B1:24:69:25:14:A8
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/l-i1WGHiFl28Rr2s9UOxJGklFKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:1e:04:75:68:46:39:cb:e3:dd:64:ce:ee:11:0a:5d:d5:4a:
4e:a6:86:b7:6d:9c:02:2a:03:5e:22:7c:fa:e3:3c:7f:94:98:
5c:e0:e2:38:c9:20:21:a0:31:0a:1b:27:ee:fb:53:e3:30:cc:
dd:43:f3:fa:f7:ba:8f:eb:55:b5:2f:5d:b8:09:fe:09:e2:0e:
7b:3c:86:7b:96:f2:43:84:47:96:1a:bd:22:00:d8:55:eb:ca:
83:f2:64:f2:c4:be:a3:3b:5f:57:ed:76:4e:2f:8a:0d:73:ce:
69:a5:2d:83:5c:e7:6d:bb:ad:67:05:0e:1c:ae:ff:c5:f7:8e:
83:bb:18:24:cc:6e:0f:1f:9a:45:9e:28:04:ab:12:c8:ce:c3:
9f:5f:94:4a:10:df:07:55:cf:12:05:47:3c:68:c2:00:ce:81:
3f:fa:bb:f8:17:37:2e:a7:60:6c:f3:59:bf:bb:34:e5:89:41:
91:b6:20:b6:04:56:71:f4:4e:31:a3:16:d5:dc:a5:02:8b:bb:
56:8c:01:0b:44:7b:2f:82:4b:e9:a7:ac:dc:a0:c4:a5:95:3b:
62:3a:2c:e1:a0:7e:34:0d:66:e8:60:81:d3:86:83:11:51:4d:
a9:f6:79:68:26:d4:a3:51:1b:9a:73:4a:6e:c9:8f:1e:45:79:
57:7e:f3:8e
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzGt3xfMP6nHQE3fxHqXiudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YWQ3OTQ5MmU4MDk5MzRkNjkzYjExODU1ZTc1MTAzMjQx
NTY5ZWIwHhcNMjQwMTAxMjAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2U4YjU1ODYxZTIxNjVkYmM0NmJkYWNmNTQzYjEyNDY5MjUxNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VmKHIuv7FJv9dBSJWpIbtfpMVzr
RESJGs7CKhf0V1Y0E4NqVJKBJ9BT9I5SQ5LhlbPnw5B1dxXpGoXpo9leruXQ4fPF
yE8Ok2XKvN9szDCwcEJsgHcv6UtjjMnYaEJ2ZLhrgfAN1r5L6N1goWcEwvPOBlpR
NHTelV/j5vDEbpodXlNonVIpvhSDnx9gcz7aJ/tHMvVTiGsg6p8DloZTv7DivdBo
mBQ+Q/7cjqiEXsYNM6i6DS0ppjQwXCa+i598K/7yfZACKZDqZTRBguPbW8mhe75C
ZzpTGRA5DuM/ocyWjB7JfuzIUW5q192wyRIx/L8BWM1PNhhNCdDfxyoASwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFJfotVhh4hZdvEa9rPVDsSRpJRSoMB8GA1UdIwQY
MBaAFAWteUkugJk01pOxGFXnUQMkFWnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzIt
ZjM3OTdlZjM0OGZmLzEvbC1pMVdHSGlGbDI4UnIyczlVT3hKR2tsRktnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yODBiNzYtMTVhYy00YzY4LTgwMzItZjM3OTdlZjM0OGZm
LzEvQmExNVNTNkFtVFRXazdFWVZlZFJBeVFWYWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiucwDQYJ
KoZIhvcNAQELBQADggEBAKIeBHVoRjnL491kzu4RCl3VSk6mhrdtnAIqA14ifPrj
PH+UmFzg4jjJICGgMQobJ+77U+MwzN1D8/r3uo/rVbUvXbgJ/gniDns8hnuW8kOE
R5YavSIA2FXryoPyZPLEvqM7X1ftdk4vig1zzmmlLYNc5227rWcFDhyu/8X3joO7
GCTMbg8fmkWeKASrEsjOw59flEoQ3wdVzxIFRzxowgDOgT/6u/gXNy6nYGzzWb+7
NOWJQZG2ILYEVnH0TjGjFtXcpQKLu1aMAQtEey+CS+mnrNygxKWVO2I6LOGgfjQN
ZuhggdOGgxFRTan2eWgm1KNRG5pzSm7Jjx5FeVd+844=
-----END CERTIFICATE-----
Generated at Tue May 21 07:58:42 2024 by rpki-client on console-ams.rpki-client.org