Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/enqwDc9J8DP5EPYT43EUyO9vjFY.roa
File: enqwDc9J8DP5EPYT43EUyO9vjFY.roa (raw, json)
Hash identifier: PYCwigrNNvCVmzi4mwud/doRd+wrlR/3DOoxzrHauvg=
Subject key identifier: 7A:7A:B0:0D:CF:49:F0:33:F9:10:F6:13:E3:71:14:C8:EF:6F:8C:56
Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Certificate serial: 018CC5002342E91EBC28B2C3CCFEC7A1B980
Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/enqwDc9J8DP5EPYT43EUyO9vjFY.roa
Signing time: Mon 01 Jan 2024 12:29:29 +0000
ROA not before: Mon 01 Jan 2024 12:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206706
IP address blocks: 185.126.32.0/24 maxlen: 24
2a10:18c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:23:42:e9:1e:bc:28:b2:c3:cc:fe:c7:a1:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3
Validity
Not Before: Jan 1 12:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7ab00dcf49f033f910f613e37114c8ef6f8c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:41:b4:e6:37:1d:a4:63:2b:36:41:2f:1b:
0b:7f:bf:ed:94:39:ee:fa:7b:47:b2:9a:17:ff:db:
0e:d0:07:d2:8f:e9:64:e8:e8:59:ec:b4:05:8c:21:
82:ea:82:9d:91:8d:9f:fb:ab:2c:50:ac:dd:d8:62:
fd:5b:4c:0d:cc:fd:14:e2:8c:ef:c3:fb:19:43:80:
86:35:88:ea:4a:88:d9:47:11:e4:33:28:51:ad:fb:
15:b6:8e:55:97:a7:96:79:72:2c:f0:21:c1:86:9a:
25:93:2d:aa:8c:c1:09:50:54:e0:1e:50:79:d2:9c:
a0:21:d8:b0:3c:e5:39:9a:f1:25:65:d8:ba:2c:8c:
ae:d6:7d:8b:f2:53:ba:6c:e8:cc:3f:98:9d:a2:3c:
34:2d:f4:40:1f:c6:aa:5b:73:82:36:f6:58:29:77:
70:c5:a7:35:ad:eb:b4:01:ca:0e:99:82:4f:90:bf:
27:5c:9c:af:56:09:c6:c1:01:cc:32:e5:6e:db:e7:
aa:a2:02:df:ca:05:8e:5a:af:ae:e7:49:4d:39:0e:
fd:ef:61:32:3e:d7:4e:db:33:d3:4a:30:f8:7c:65:
77:5d:78:0c:c7:2b:ae:26:2a:cf:7b:59:0d:9f:d3:
4d:24:c4:a9:16:4e:b7:92:fc:b7:89:9d:14:76:65:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:B0:0D:CF:49:F0:33:F9:10:F6:13:E3:71:14:C8:EF:6F:8C:56
X509v3 Authority Key Identifier:
keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/enqwDc9J8DP5EPYT43EUyO9vjFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.32.0/24
IPv6:
2a10:18c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:5e:cb:12:6e:4f:11:9c:a4:ab:f1:45:8b:0b:b2:a5:7d:fa:
04:e2:47:42:3c:70:ac:b8:c9:72:59:79:75:7e:0a:20:72:3f:
ad:70:0b:c1:56:8d:30:7e:50:60:e5:b1:0e:68:fa:1a:9c:c1:
e5:18:ed:a7:33:2f:ab:d7:45:e2:b2:27:a2:a2:2f:c4:e5:31:
a9:f9:5d:cd:47:e9:71:9f:cb:8d:62:36:18:27:37:72:5c:d5:
1e:d9:3a:29:18:ad:98:b1:75:8f:fb:c5:68:49:0b:f2:e4:f7:
ca:02:e4:7a:4f:71:c2:2c:bc:ca:b2:a8:55:ee:79:be:4f:69:
1b:95:9b:39:3d:43:48:27:ed:fa:8b:6d:40:87:59:00:7d:b4:
39:46:f7:ea:70:c3:52:d0:86:70:61:12:42:4d:5a:f4:66:53:
c1:7c:69:36:94:e7:fa:54:bc:5d:08:3a:5d:f2:3f:9f:50:f7:
22:b7:41:0b:00:ce:7e:8a:b8:c5:03:2f:d4:cb:7b:dd:b0:29:
ba:ad:8b:e9:4b:10:c1:fb:f1:6b:6f:02:b3:e0:81:6d:44:57:
a1:ec:88:19:c6:bd:0d:8b:81:3a:04:27:60:61:34:ad:4b:a8:
6d:ea:56:28:c7:b7:3b:c6:c9:05:8c:36:61:f6:7a:22:e9:c0:
74:06:5e:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFACNC6R68KLLDzP7HobmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4
OGVmYzMwHhcNMjQwMTAxMTIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdhYjAwZGNmNDlmMDMzZjkxMGY2MTNlMzcxMTRjOGVmNmY4YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFdBtOY3HaRjKzZBLxsLf7/tlDnu
+ntHspoX/9sO0AfSj+lk6OhZ7LQFjCGC6oKdkY2f+6ssUKzd2GL9W0wNzP0U4ozv
w/sZQ4CGNYjqSojZRxHkMyhRrfsVto5Vl6eWeXIs8CHBhpolky2qjMEJUFTgHlB5
0pygIdiwPOU5mvElZdi6LIyu1n2L8lO6bOjMP5idojw0LfRAH8aqW3OCNvZYKXdw
xac1reu0AcoOmYJPkL8nXJyvVgnGwQHMMuVu2+eqogLfygWOWq+u50lNOQ7972Ey
PtdO2zPTSjD4fGV3XXgMxyuuJirPe1kNn9NNJMSpFk63kvy3iZ0UdmXy0wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHp6sA3PSfAz+RD2E+NxFMjvb4xWMB8GA1UdIwQY
MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt
OWEzN2M2MDY5YmMxLzEvZW5xd0RjOUo4RFA1RVBZVDQzRVV5Tzl2akZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx
LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuX4gMA0E
AgACMAcDBQMqEBjAMA0GCSqGSIb3DQEBCwUAA4IBAQCPXssSbk8RnKSr8UWLC7Kl
ffoE4kdCPHCsuMlyWXl1fgogcj+tcAvBVo0wflBg5bEOaPoanMHlGO2nMy+r10Xi
sieioi/E5TGp+V3NR+lxn8uNYjYYJzdyXNUe2TopGK2YsXWP+8VoSQvy5PfKAuR6
T3HCLLzKsqhV7nm+T2kblZs5PUNIJ+36i21Ah1kAfbQ5RvfqcMNS0IZwYRJCTVr0
ZlPBfGk2lOf6VLxdCDpd8j+fUPcit0ELAM5+irjFAy/Uy3vdsCm6rYvpSxDB+/Fr
bwKz4IFtRFeh7IgZxr0Ni4E6BCdgYTStS6ht6lYox7c7xskFjDZh9noi6cB0Bl5O
-----END CERTIFICATE-----
Generated at Fri May 17 09:21:33 2024 by rpki-client on console-ams.rpki-client.org