Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/w2ISO6UBr0Jj2m9QThqbaB-v58c.roa
File: w2ISO6UBr0Jj2m9QThqbaB-v58c.roa (raw, json)
Hash identifier: 42SWRxYwJOie5xt+8ZQa5qOdvJwXJD8mg2o+XG9DlWA=
Subject key identifier: C3:62:12:3B:A5:01:AF:42:63:DA:6F:50:4E:1A:9B:68:1F:AF:E7:C7
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 018CC5DC552535B2F5CF20A4B634E1910370
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/w2ISO6UBr0Jj2m9QThqbaB-v58c.roa
Signing time: Mon 01 Jan 2024 16:30:00 +0000
ROA not before: Mon 01 Jan 2024 16:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198558
IP address blocks: 37.0.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:55:25:35:b2:f5:cf:20:a4:b6:34:e1:91:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c362123ba501af4263da6f504e1a9b681fafe7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:7e:0c:62:a3:f0:aa:1a:74:07:a8:0b:55:
53:09:38:d8:32:05:af:0c:1b:ee:4f:b2:0c:72:fa:
35:fe:78:a0:b1:9e:c6:6f:bf:f5:f9:c1:cf:cb:e8:
21:bf:2d:dc:ef:bb:d0:c4:51:f4:44:e2:54:67:9e:
e6:d2:ef:82:01:ac:69:80:a4:a0:31:c4:1b:cb:d9:
94:55:7a:c5:0c:d4:4c:1b:79:f5:5e:5b:c7:6a:96:
f8:c0:bd:4e:dc:25:2e:50:5a:d0:60:39:09:b8:27:
89:be:6d:bd:6d:49:49:e0:ee:69:7e:02:d9:f4:7d:
34:82:0f:db:f1:20:52:ce:63:7e:e6:6c:7c:71:ae:
ed:3b:71:b5:4d:88:19:9a:0b:6c:48:55:7c:bf:12:
e8:ef:49:40:2f:4c:d5:32:88:d4:3c:f1:e6:61:87:
5c:bc:37:93:5a:85:a5:ef:84:de:16:c3:a5:6d:72:
7e:a6:69:f7:ea:79:e2:3b:85:6e:6a:71:46:46:ad:
87:3e:de:ae:60:15:39:9e:1a:87:5c:4f:f9:27:1a:
07:d9:ca:e3:92:ea:d3:23:3f:6d:fd:9c:47:b2:dd:
1b:4c:e2:de:52:03:16:52:cb:06:23:a5:24:d4:4b:
c9:39:d6:dc:40:d1:50:2b:03:1c:b9:6b:56:bb:97:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:12:3B:A5:01:AF:42:63:DA:6F:50:4E:1A:9B:68:1F:AF:E7:C7
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/w2ISO6UBr0Jj2m9QThqbaB-v58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.112.0/24
Signature Algorithm: sha256WithRSAEncryption
26:52:86:67:9e:a6:b9:65:51:2b:5b:97:d8:70:f7:95:65:b9:
47:39:8e:cb:26:95:c8:f8:a7:54:fb:2e:4d:df:03:ca:8c:c8:
6e:fb:b4:03:5b:00:67:e3:12:07:d0:e8:0c:33:02:7c:8a:d1:
65:1f:10:79:0e:64:70:8c:12:69:37:57:7b:80:fd:ee:8c:43:
3a:00:c1:79:07:35:7a:a6:b3:2e:5d:ed:bf:58:59:31:63:89:
5e:be:18:24:61:30:88:0a:0c:94:bf:6c:4d:c2:d7:c8:de:5f:
7e:9f:1c:da:0f:32:c0:21:dc:81:0a:51:d5:a1:0f:b1:73:40:
fe:79:4a:dd:7b:5e:97:44:90:94:e1:6e:7a:e1:34:f9:32:c3:
b2:8d:4a:ca:01:7c:4c:04:3e:eb:a3:e6:7d:c3:43:54:d4:3c:
32:ac:a3:19:9b:98:f3:68:55:d7:62:a5:da:ff:99:79:12:fe:
80:a5:8c:9d:61:4a:01:95:93:75:a8:5c:db:d1:f9:52:35:32:
04:7e:b8:bd:5a:c1:65:aa:46:b8:02:84:c9:1c:c8:f9:f8:53:
77:f0:ce:34:61:38:25:3e:1f:45:c3:46:b2:d5:91:bb:aa:ba:
e0:e3:f8:a4:43:d4:30:19:fc:45:ad:32:f9:d0:63:69:aa:7b:
1a:3e:a7:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3FUlNbL1zyCktjThkQNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl
MGY2NDEwHhcNMjQwMTAxMTYzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzYyMTIzYmE1MDFhZjQyNjNkYTZmNTA0ZTFhOWI2ODFmYWZlN2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosd+DGKj8KoadAeoC1VTCTjYMgWv
DBvuT7IMcvo1/nigsZ7Gb7/1+cHPy+ghvy3c77vQxFH0ROJUZ57m0u+CAaxpgKSg
McQby9mUVXrFDNRMG3n1XlvHapb4wL1O3CUuUFrQYDkJuCeJvm29bUlJ4O5pfgLZ
9H00gg/b8SBSzmN+5mx8ca7tO3G1TYgZmgtsSFV8vxLo70lAL0zVMojUPPHmYYdc
vDeTWoWl74TeFsOlbXJ+pmn36nniO4VuanFGRq2HPt6uYBU5nhqHXE/5JxoH2crj
kurTIz9t/ZxHst0bTOLeUgMWUssGI6Uk1EvJOdbcQNFQKwMcuWtWu5f9LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNiEjulAa9CY9pvUE4am2gfr+fHMB8GA1UdIwQY
MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt
ZWY0NmRkZWVhYmY0LzEvdzJJU082VUJyMEpqMm05UVRocWJhQi12NThjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0
LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQBwMA0G
CSqGSIb3DQEBCwUAA4IBAQAmUoZnnqa5ZVErW5fYcPeVZblHOY7LJpXI+KdU+y5N
3wPKjMhu+7QDWwBn4xIH0OgMMwJ8itFlHxB5DmRwjBJpN1d7gP3ujEM6AMF5BzV6
prMuXe2/WFkxY4levhgkYTCICgyUv2xNwtfI3l9+nxzaDzLAIdyBClHVoQ+xc0D+
eUrde16XRJCU4W564TT5MsOyjUrKAXxMBD7ro+Z9w0NU1DwyrKMZm5jzaFXXYqXa
/5l5Ev6ApYydYUoBlZN1qFzb0flSNTIEfri9WsFlqka4AoTJHMj5+FN38M40YTgl
Ph9Fw0ay1ZG7qrrg4/ikQ9QwGfxFrTL50GNpqnsaPqfw
-----END CERTIFICATE-----
Generated at Fri May 17 18:44:21 2024 by rpki-client on console-fra.rpki-client.org