Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/RAogwIMHYGq53tdXC7Gk8RO040I.roa
File: RAogwIMHYGq53tdXC7Gk8RO040I.roa (raw, json)
Hash identifier: 20D9xmPXdHE0UN/T0VfXCh0YrtJtyiqyPTxdX6SdmrQ=
Subject key identifier: 44:0A:20:C0:83:07:60:6A:B9:DE:D7:57:0B:B1:A4:F1:13:B4:E3:42
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 018CC80177978FC49BE818F1F061BE289406
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/RAogwIMHYGq53tdXC7Gk8RO040I.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205111
IP address blocks: 217.163.72.0/24 maxlen: 24
213.244.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:77:97:8f:c4:9b:e8:18:f1:f0:61:be:28:94:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=440a20c08307606ab9ded7570bb1a4f113b4e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:f4:49:29:9a:5f:bd:69:30:fb:d7:d5:cc:
c6:d6:20:5c:d0:3a:94:92:40:b7:34:e9:e2:d6:bb:
6c:43:49:65:2c:e3:51:cc:51:19:61:ee:66:00:04:
f4:40:91:1a:ac:f7:f7:ed:27:0d:9b:bd:60:07:aa:
f7:cc:e2:5f:b7:f9:a9:01:df:15:7c:4a:8c:b3:e9:
c3:eb:83:4f:31:ac:52:6d:65:19:c3:dc:5d:5b:e2:
45:ca:b7:e6:13:77:1b:4a:18:ae:6b:39:30:44:1d:
79:ab:8b:79:25:02:27:a3:a2:d6:fd:44:e7:61:6c:
f6:82:d0:b9:01:96:08:80:91:f3:09:58:6c:69:56:
ce:fe:ce:e9:bb:16:0b:f4:be:cf:2f:32:b9:8a:de:
04:ea:fc:cb:51:7a:64:5f:29:3d:6b:db:09:74:b9:
37:86:1d:da:04:ae:62:65:4a:5b:43:6b:f3:2a:2f:
15:44:00:59:16:f4:7f:11:f3:e4:74:31:58:46:78:
c7:5b:d7:ec:9f:0e:2c:68:18:da:a6:13:57:2c:98:
0d:60:d0:6f:d6:a4:b9:b4:09:6e:29:d6:69:fa:81:
3d:cb:01:0b:4c:15:20:19:9e:7c:c4:dc:84:d5:50:
bb:9c:13:23:10:39:5d:a5:7e:2a:95:47:96:e4:a4:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:20:C0:83:07:60:6A:B9:DE:D7:57:0B:B1:A4:F1:13:B4:E3:42
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/RAogwIMHYGq53tdXC7Gk8RO040I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.244.146.0/24
217.163.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c2:b9:e2:d9:cc:c0:75:7e:81:6c:7a:39:64:b5:1f:32:0e:
4c:02:f1:c9:b7:af:32:7a:76:69:28:f6:bd:ba:2e:2e:af:2c:
db:60:a6:b4:b9:44:00:d1:26:a4:6e:cf:ad:da:5d:a7:72:0e:
99:52:4b:a3:fe:5a:22:3f:83:79:92:71:91:7b:ad:7d:17:13:
fb:5d:89:0d:38:65:ff:bd:37:a5:33:65:d7:ec:41:a5:c3:6b:
8c:04:ce:96:5f:4a:a7:4e:86:b8:cf:d2:b1:41:5d:fa:31:bb:
60:23:54:9d:96:c7:54:f9:11:b8:37:d2:f3:35:4b:89:33:42:
70:79:23:a2:ab:01:ad:0f:6e:ca:ed:3c:3c:fd:f2:c5:1c:3f:
bf:f9:ff:bb:6f:1e:d2:dd:e7:3c:e7:0e:37:81:e4:36:e2:10:
e0:f3:6d:53:42:30:ad:ed:a7:df:04:2c:e9:ff:d4:d0:17:f5:
46:cf:36:11:40:8b:7c:b0:1e:b9:be:3c:23:8d:d7:9e:e0:71:
d6:c5:b0:43:7e:c5:64:24:dd:3f:c4:54:a6:b3:d1:00:93:dc:
7a:d0:13:bf:ce:f4:11:63:5b:ff:60:0b:15:8c:83:c8:05:8a:
c7:f0:3e:53:41:3d:83:f6:af:65:89:57:8c:e5:cc:4a:74:2c:
5f:c0:b0:44
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAXeXj8Sb6Bjx8GG+KJQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk
MzcxMjkwHhcNMjQwMTAyMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDBhMjBjMDgzMDc2MDZhYjlkZWQ3NTcwYmIxYTRmMTEzYjRlMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVb0SSmaX71pMPvX1czG1iBc0DqU
kkC3NOni1rtsQ0llLONRzFEZYe5mAAT0QJEarPf37ScNm71gB6r3zOJft/mpAd8V
fEqMs+nD64NPMaxSbWUZw9xdW+JFyrfmE3cbShiuazkwRB15q4t5JQIno6LW/UTn
YWz2gtC5AZYIgJHzCVhsaVbO/s7puxYL9L7PLzK5it4E6vzLUXpkXyk9a9sJdLk3
hh3aBK5iZUpbQ2vzKi8VRABZFvR/EfPkdDFYRnjHW9fsnw4saBjaphNXLJgNYNBv
1qS5tAluKdZp+oE9ywELTBUgGZ58xNyE1VC7nBMjEDldpX4qlUeW5KSkwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEQKIMCDB2Bqud7XVwuxpPETtONCMB8GA1UdIwQY
MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt
M2JiNGQ2MjAwNTE4LzEvUkFvZ3dJTUhZR3E1M3RkWEM3R2s4Uk8wNDBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4
LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1fSSAwQA
2aNIMA0GCSqGSIb3DQEBCwUAA4IBAQCLwrni2czAdX6BbHo5ZLUfMg5MAvHJt68y
enZpKPa9ui4uryzbYKa0uUQA0Sakbs+t2l2ncg6ZUkuj/loiP4N5knGRe619FxP7
XYkNOGX/vTelM2XX7EGlw2uMBM6WX0qnToa4z9KxQV36MbtgI1SdlsdU+RG4N9Lz
NUuJM0JweSOiqwGtD27K7Tw8/fLFHD+/+f+7bx7S3ec85w43geQ24hDg821TQjCt
7affBCzp/9TQF/VGzzYRQIt8sB65vjwjjdee4HHWxbBDfsVkJN0/xFSms9EAk9x6
0BO/zvQRY1v/YAsVjIPIBYrH8D5TQT2D9q9liVeM5cxKdCxfwLBE
-----END CERTIFICATE-----
Generated at Sun May 5 19:36:51 2024 by rpki-client on console-ams.rpki-client.org