Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i1r-rFuJclXyxkx9OsqrdYmWNI8.roa
File: i1r-rFuJclXyxkx9OsqrdYmWNI8.roa (raw, json)
Hash identifier: /44qwdLA8Dr4kx7E0zbSwkK2F/6n3Wox8aDd5OPPLOE=
Subject key identifier: 8B:5A:FE:AC:5B:89:72:55:F2:C6:4C:7D:3A:CA:AB:75:89:96:34:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019342CCACA0B3F320B78C270A2898F6C867
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i1r-rFuJclXyxkx9OsqrdYmWNI8.roa
Signing time: Tue 19 Nov 2024 05:02:09 +0000
ROA not before: Tue 19 Nov 2024 05:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214083
IP address blocks: 37.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:42:cc:ac:a0:b3:f3:20:b7:8c:27:0a:28:98:f6:c8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 19 05:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5afeac5b897255f2c64c7d3acaab758996348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:dd:90:ea:43:77:f6:73:ce:24:3f:f4:8c:
f5:ed:da:aa:32:c4:20:87:e6:12:36:0f:89:b4:04:
c5:5c:5c:85:70:2e:48:97:9c:4e:7f:a5:91:a7:05:
61:38:8a:f9:d3:3a:15:cf:0a:39:00:8b:0d:20:3a:
8d:85:08:cf:fa:bd:38:ad:66:e8:67:6d:0d:5f:3e:
c9:61:48:d8:26:01:42:ae:6d:0a:61:70:32:ce:7a:
90:e5:91:48:42:66:6d:fd:02:1e:65:fd:b2:a3:a9:
81:79:e6:fd:6f:5a:8c:17:1c:31:96:88:b9:99:35:
16:fc:56:06:47:3c:b7:f2:d8:6d:87:fe:2f:ba:b3:
12:08:02:32:6c:5c:50:3e:ae:94:5b:b7:3e:ab:63:
eb:ff:ac:bf:1d:b6:76:63:f7:90:4c:d4:07:c8:81:
fd:2b:4e:5f:ab:4d:9f:f3:c7:0e:87:8e:d3:58:9d:
22:75:27:af:a9:65:b9:58:31:04:5c:98:c6:fd:95:
a8:8c:d4:a8:9e:ab:2e:a2:f6:ba:30:78:a6:fe:92:
0f:ad:fb:c1:8e:9f:de:4b:01:2a:cb:30:b1:75:24:
9a:a8:16:9a:f0:d5:c2:9e:8d:bf:18:66:53:f3:64:
83:72:f5:31:93:23:10:26:ee:a2:3f:0b:62:6d:02:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:FE:AC:5B:89:72:55:F2:C6:4C:7D:3A:CA:AB:75:89:96:34:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i1r-rFuJclXyxkx9OsqrdYmWNI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.212.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9c:34:78:d1:e8:f8:7d:39:5c:b0:6a:1d:c2:e2:e8:c2:6b:
0b:d4:5c:d0:80:52:3d:bc:0a:12:27:8a:cc:72:e0:83:0a:01:
e5:e6:74:8b:80:13:b9:8b:af:63:22:ef:2c:26:60:1b:65:da:
d0:c1:70:d2:99:50:dd:1f:b3:65:a8:3d:f1:0c:51:2c:f9:ee:
1c:00:76:a8:fb:02:be:ce:43:65:b9:23:b7:14:c6:ba:5a:47:
c0:ad:0c:9e:ab:b6:21:cf:97:e0:f2:79:19:92:ff:7a:37:d2:
a8:5c:41:f5:a8:16:04:6a:dc:8a:36:fe:85:3f:29:a2:cc:fe:
72:7b:93:55:e4:39:5b:30:63:6a:23:29:69:b6:c2:e6:f7:36:
a0:a0:1a:d5:e1:cc:c7:d5:af:b0:75:d4:d8:45:3d:03:86:30:
c9:e9:07:30:df:f3:ac:32:ce:e3:99:6c:09:23:13:2e:e6:3c:
32:f5:d4:2e:30:60:c4:8a:13:4b:8e:e8:fa:27:aa:61:8a:cc:
67:bd:04:c3:22:3d:3d:bc:55:f1:1b:5f:d2:70:40:be:02:e0:
07:69:ab:a1:9a:53:45:f0:0f:5e:8c:24:55:4e:eb:70:dc:f4:
43:a8:fc:d0:f5:ea:e7:71:bc:6e:93:5e:6a:da:16:ca:82:ba:
b8:98:1f:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNCzKygs/Mgt4wnCiiY9shnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMTE5MDUwMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjVhZmVhYzViODk3MjU1ZjJjNjRjN2QzYWNhYWI3NTg5OTYzNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IvdkOpDd/ZzziQ/9Iz17dqqMsQg
h+YSNg+JtATFXFyFcC5Il5xOf6WRpwVhOIr50zoVzwo5AIsNIDqNhQjP+r04rWbo
Z20NXz7JYUjYJgFCrm0KYXAyznqQ5ZFIQmZt/QIeZf2yo6mBeeb9b1qMFxwxloi5
mTUW/FYGRzy38thth/4vurMSCAIybFxQPq6UW7c+q2Pr/6y/HbZ2Y/eQTNQHyIH9
K05fq02f88cOh47TWJ0idSevqWW5WDEEXJjG/ZWojNSonqsuova6MHim/pIPrfvB
jp/eSwEqyzCxdSSaqBaa8NXCno2/GGZT82SDcvUxkyMQJu6iPwtibQK9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIta/qxbiXJV8sZMfTrKq3WJljSPMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaTFyLXJGdUpjbFh5eGt4OU9zcXJkWW1XTkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrUMA0G
CSqGSIb3DQEBCwUAA4IBAQARnDR40ej4fTlcsGodwuLowmsL1FzQgFI9vAoSJ4rM
cuCDCgHl5nSLgBO5i69jIu8sJmAbZdrQwXDSmVDdH7NlqD3xDFEs+e4cAHao+wK+
zkNluSO3FMa6WkfArQyeq7Yhz5fg8nkZkv96N9KoXEH1qBYEatyKNv6FPymizP5y
e5NV5DlbMGNqIylptsLm9zagoBrV4czH1a+wddTYRT0DhjDJ6Qcw3/OsMs7jmWwJ
IxMu5jwy9dQuMGDEihNLjuj6J6phisxnvQTDIj09vFXxG1/ScEC+AuAHaauhmlNF
8A9ejCRVTutw3PRDqPzQ9erncbxuk15q2hbKgrq4mB84
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:39 2024 by rpki-client on console-ams.rpki-client.org