Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/arAGENeWK8E3mth1RL1oKLfGxAM.roa
File: arAGENeWK8E3mth1RL1oKLfGxAM.roa (raw, json)
Hash identifier: 5UTCmLLAcN9uA/fJw4VY+cL3Hb+5w2L9dCRicPobDZ0=
Subject key identifier: 6A:B0:06:10:D7:96:2B:C1:37:9A:D8:75:44:BD:68:28:B7:C6:C4:03
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0190EEB6549A1B43045A79D37C3B5157CD6B
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/arAGENeWK8E3mth1RL1oKLfGxAM.roa
Signing time: Fri 26 Jul 2024 11:04:04 +0000
ROA not before: Fri 26 Jul 2024 11:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49805
IP address blocks: 185.118.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:b6:54:9a:1b:43:04:5a:79:d3:7c:3b:51:57:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 26 11:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ab00610d7962bc1379ad87544bd6828b7c6c403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:1d:aa:ee:2f:b5:59:93:6c:9d:84:0b:c5:
b2:e1:d8:a9:e1:89:25:eb:5b:4f:ba:31:c4:6a:a1:
8f:9f:4e:a1:46:7b:9b:3f:26:43:51:eb:4d:00:61:
40:b8:6f:9d:b1:b0:b5:1e:08:20:c0:85:1f:4a:47:
79:ae:47:81:83:e1:f3:b9:36:f8:1c:18:73:c0:02:
9b:56:74:53:04:3c:d0:88:1d:26:5f:30:62:ee:d4:
23:fc:c5:22:87:8c:59:7a:8c:14:3a:58:ea:47:e6:
c6:69:4c:8f:e4:19:84:7a:73:55:85:4f:c1:0f:4c:
3a:e7:a3:dc:43:6d:b9:e1:9e:bc:e9:37:27:81:de:
f9:2b:ca:8f:18:a1:e7:8a:d0:22:c2:fd:38:75:0f:
09:1e:5d:35:19:56:c6:65:be:4c:39:c5:f3:e9:5a:
8e:85:61:5f:ea:72:fd:b7:aa:9b:24:4e:b5:db:a0:
d3:1c:76:dc:b6:35:2e:14:76:8f:47:e5:be:9a:a9:
78:65:81:39:10:8b:07:ea:79:ce:d0:b0:d6:3d:74:
9f:8e:93:5f:bb:dd:b1:24:4b:2d:9e:74:94:57:e4:
7d:27:ff:50:b9:60:e4:ba:b8:38:27:2a:4c:5b:a9:
b4:5e:97:05:71:4c:44:93:4a:b1:50:7d:63:ec:10:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:06:10:D7:96:2B:C1:37:9A:D8:75:44:BD:68:28:B7:C6:C4:03
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/arAGENeWK8E3mth1RL1oKLfGxAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.141.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1b:58:de:03:c6:dd:da:5c:de:4a:f3:c5:dc:b5:12:15:60:
36:d0:16:cd:9e:5f:1c:02:84:fd:51:7e:60:16:13:7a:7a:b8:
f5:40:40:cb:c5:4e:52:c1:8e:d0:74:26:3d:04:07:16:95:f8:
9b:0f:5d:37:ab:d6:7f:96:c8:83:1f:0e:70:8d:5a:d7:c7:2a:
f8:62:90:d1:a7:be:6f:97:75:1e:19:8c:9f:32:e2:bf:91:85:
c9:f5:f1:23:e9:48:df:20:33:92:80:b5:f0:5d:e6:b5:7d:df:
75:32:1d:3a:5e:07:80:e0:5e:2a:f2:17:38:16:04:b6:1a:74:
26:78:8d:1f:85:f2:fb:19:75:b4:06:87:1d:c6:7f:58:c9:9a:
4c:68:8c:94:af:5c:eb:5b:fc:d3:a9:a4:b7:cb:1a:54:01:c7:
0d:1b:96:26:9d:21:1b:57:4b:6a:e6:a4:7e:9f:35:8d:e7:11:
a8:a9:27:b5:06:fe:ce:9d:92:14:2d:6a:ed:ab:09:6e:c3:bf:
d1:22:c6:b4:2d:c1:cd:15:7d:68:7f:0b:83:92:ff:dd:ba:5d:
ec:2e:1a:ed:af:12:df:8b:8a:9d:1a:a9:61:5a:68:ad:0e:74:
99:85:11:e7:04:b4:66:71:93:69:a1:d1:ff:58:0e:54:9d:fd:
97:94:2e:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDutlSaG0MEWnnTfDtRV81rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh
ODZhNDgwHhcNMjQwNzI2MTEwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWIwMDYxMGQ3OTYyYmMxMzc5YWQ4NzU0NGJkNjgyOGI3YzZjNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16kdqu4vtVmTbJ2EC8Wy4dip4Ykl
61tPujHEaqGPn06hRnubPyZDUetNAGFAuG+dsbC1HgggwIUfSkd5rkeBg+HzuTb4
HBhzwAKbVnRTBDzQiB0mXzBi7tQj/MUih4xZeowUOljqR+bGaUyP5BmEenNVhU/B
D0w656PcQ2254Z686Tcngd75K8qPGKHnitAiwv04dQ8JHl01GVbGZb5MOcXz6VqO
hWFf6nL9t6qbJE6126DTHHbctjUuFHaPR+W+mql4ZYE5EIsH6nnO0LDWPXSfjpNf
u92xJEstnnSUV+R9J/9QuWDkurg4JypMW6m0XpcFcUxEk0qxUH1j7BDcGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqwBhDXlivBN5rYdUS9aCi3xsQDMB8GA1UdIwQY
MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt
MTQyN2RkMTZlZmE0LzEvYXJBR0VOZVdLOEUzbXRoMVJMMW9LTGZHeEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0
LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXaNMA0G
CSqGSIb3DQEBCwUAA4IBAQCSG1jeA8bd2lzeSvPF3LUSFWA20BbNnl8cAoT9UX5g
FhN6erj1QEDLxU5SwY7QdCY9BAcWlfibD103q9Z/lsiDHw5wjVrXxyr4YpDRp75v
l3UeGYyfMuK/kYXJ9fEj6UjfIDOSgLXwXea1fd91Mh06XgeA4F4q8hc4FgS2GnQm
eI0fhfL7GXW0Bocdxn9YyZpMaIyUr1zrW/zTqaS3yxpUAccNG5YmnSEbV0tq5qR+
nzWN5xGoqSe1Bv7OnZIULWrtqwluw7/RIsa0LcHNFX1ofwuDkv/dul3sLhrtrxLf
i4qdGqlhWmitDnSZhRHnBLRmcZNpodH/WA5Unf2XlC44
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:45:22 2024 by rpki-client on console-ams.rpki-client.org