Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa
File: pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa (raw, json)
Hash identifier: jPr+1uwvxqwwGvYG31GyAoJ9FMAEt+s771XPKXdMFNI=
Subject key identifier: A7:00:C0:CC:D7:07:31:5F:C8:FE:8A:83:D6:D8:21:E9:F1:57:F1:23
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 018CC2DB0B26686C49B02D1C05EAC053ED4A
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2850
IP address blocks: 137.43.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0b:26:68:6c:49:b0:2d:1c:05:ea:c0:53:ed:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a700c0ccd707315fc8fe8a83d6d821e9f157f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:2a:39:06:77:16:15:64:08:8c:d5:24:88:
93:28:c7:8a:45:02:3a:be:7b:a8:1e:e2:a6:42:04:
9e:5b:7a:00:98:71:c0:8e:f0:62:4e:b6:16:7b:3e:
1e:33:f7:7e:57:6c:cd:52:df:7c:65:80:25:cc:7d:
fc:f7:7a:2d:6c:61:4c:0b:d7:83:2a:ed:3c:e3:b3:
8d:5d:f8:38:ec:fa:0d:a0:18:b8:1c:fd:72:6d:0b:
72:13:02:0b:d4:b0:b4:98:91:65:b6:2f:89:03:1d:
83:f8:c5:ec:ea:d6:64:03:3a:d1:87:ce:a8:c0:f6:
ae:8d:98:9f:dd:8d:30:84:11:29:06:d3:1f:8d:f6:
59:cf:c7:f2:14:3b:5b:d1:a3:fb:30:60:5b:14:77:
98:86:99:d4:94:da:36:c3:9b:c4:71:cd:e4:89:7f:
ac:d0:90:ed:19:07:5a:07:bc:c4:3a:69:60:a0:41:
c9:a4:e6:9b:11:89:dd:71:bb:ba:01:99:3e:30:5a:
1f:6a:74:cb:d3:9a:18:49:f2:74:68:8d:79:5e:ce:
2b:03:90:54:8a:4e:54:1d:b1:5f:2a:35:53:73:1e:
d3:a5:d1:f0:42:cb:75:bc:4f:f1:97:5e:63:14:97:
8e:20:1b:40:11:99:7c:25:5f:f2:ab:50:67:ff:da:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:C0:CC:D7:07:31:5F:C8:FE:8A:83:D6:D8:21:E9:F1:57:F1:23
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/pwDAzNcHMV_I_oqD1tgh6fFX8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:5c:ac:0f:c2:5e:e5:c9:80:40:d2:fa:27:bf:31:20:bb:95:
27:e4:48:9f:6f:5c:1f:98:b5:c3:d9:4c:ff:8f:57:52:78:e2:
6c:d9:4c:81:ff:7d:a4:bf:a6:c0:77:df:b9:f1:84:97:40:c0:
f0:b9:7c:32:eb:f0:38:8c:1e:cd:34:bd:93:ea:d9:c9:32:ba:
54:c2:40:de:ea:d7:e8:6e:bf:ba:1b:e4:17:42:86:02:57:af:
38:d0:eb:08:00:24:bf:21:ac:47:fd:a5:c2:e8:48:13:c1:a8:
8d:65:98:cb:84:73:58:47:db:ae:8e:69:aa:59:95:a4:60:49:
c7:da:46:07:d5:04:dc:f5:8c:83:77:6c:ed:38:7c:98:53:39:
47:33:3b:0f:02:4f:4f:1a:e9:fe:ff:dc:60:55:5f:38:f3:17:
ed:87:02:90:a9:81:83:08:c6:51:e0:f7:fb:38:e4:11:77:c7:
b4:33:b3:d6:d9:20:3b:ec:67:1a:a1:33:a5:a9:3e:34:e1:1e:
fe:67:ef:66:dd:ce:41:35:71:0a:fd:f7:5f:61:e2:94:09:f9:
af:ad:d0:4a:c4:e0:62:6a:c4:e9:ca:0b:fb:29:66:10:87:02:
d6:9b:3c:05:d0:d3:2a:12:94:85:9d:0d:8e:d3:f8:70:3f:2a:
fd:e3:e0:aa
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzC2wsmaGxJsC0cBerAU+1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjQwMTAxMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzAwYzBjY2Q3MDczMTVmYzhmZThhODNkNmQ4MjFlOWYxNTdmMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNsqOQZ3FhVkCIzVJIiTKMeKRQI6
vnuoHuKmQgSeW3oAmHHAjvBiTrYWez4eM/d+V2zNUt98ZYAlzH3893otbGFMC9eD
Ku0847ONXfg47PoNoBi4HP1ybQtyEwIL1LC0mJFlti+JAx2D+MXs6tZkAzrRh86o
wPaujZif3Y0whBEpBtMfjfZZz8fyFDtb0aP7MGBbFHeYhpnUlNo2w5vEcc3kiX+s
0JDtGQdaB7zEOmlgoEHJpOabEYndcbu6AZk+MFofanTL05oYSfJ0aI15Xs4rA5BU
ik5UHbFfKjVTcx7TpdHwQst1vE/xl15jFJeOIBtAEZl8JV/yq1Bn/9pwOwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKcAwMzXBzFfyP6Kg9bYIenxV/EjMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvcHdEQXpOY0hNVl9JX29xRDF0Z2g2ZkZYOFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiSswDQYJ
KoZIhvcNAQELBQADggEBAKpcrA/CXuXJgEDS+ie/MSC7lSfkSJ9vXB+YtcPZTP+P
V1J44mzZTIH/faS/psB337nxhJdAwPC5fDLr8DiMHs00vZPq2ckyulTCQN7q1+hu
v7ob5BdChgJXrzjQ6wgAJL8hrEf9pcLoSBPBqI1lmMuEc1hH266OaapZlaRgScfa
RgfVBNz1jIN3bO04fJhTOUczOw8CT08a6f7/3GBVXzjzF+2HApCpgYMIxlHg9/s4
5BF3x7Qzs9bZIDvsZxqhM6WpPjThHv5n72bdzkE1cQr9919h4pQJ+a+t0ErE4GJq
xOnKC/spZhCHAtabPAXQ0yoSlIWdDY7T+HA/Kv3j4Ko=
-----END CERTIFICATE-----
Generated at Sun May 19 21:25:03 2024 by rpki-client on console-ams.rpki-client.org