Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/44whc6aRXwGDbnrDOy4tA4YzgVU.roa
File: 44whc6aRXwGDbnrDOy4tA4YzgVU.roa (raw, json)
Hash identifier: RZE2kkEhM5GYOllx8ePYyXfl88kxzxsJYku6YVwkMoo=
Subject key identifier: E3:8C:21:73:A6:91:5F:01:83:6E:7A:C3:3B:2E:2D:03:86:33:81:55
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018CC6B83B888CEF37A02A59606415B34425
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/44whc6aRXwGDbnrDOy4tA4YzgVU.roa
Signing time: Mon 01 Jan 2024 20:30:11 +0000
ROA not before: Mon 01 Jan 2024 20:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 77.73.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:3b:88:8c:ef:37:a0:2a:59:60:64:15:b3:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 1 20:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38c2173a6915f01836e7ac33b2e2d0386338155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:e0:e0:11:a1:df:be:95:d8:4e:34:ba:6f:
5a:ff:e6:54:23:f9:55:e4:90:ec:01:86:f5:31:e3:
ce:75:8c:51:ff:0e:21:f7:2a:3f:d6:04:3c:1d:ce:
f7:7f:e5:97:d8:8e:0b:19:41:32:19:6b:01:d3:29:
a2:26:03:d5:11:ea:f0:b2:5d:3a:8b:e0:86:06:57:
1c:8a:bb:f5:7d:c6:b1:c8:c2:59:3e:b3:c5:28:85:
4b:25:15:db:ea:1d:5f:a1:d7:23:24:b3:a4:81:e2:
e2:13:22:72:d4:b4:d0:19:62:a0:a7:8f:0b:b0:42:
a6:07:57:33:12:72:9a:c6:6d:b3:2c:ea:f9:e9:8b:
d7:b1:70:14:12:29:b7:de:29:4c:dc:f6:41:40:dd:
b8:cc:8d:b9:02:f4:27:56:57:26:1d:e9:a7:fe:50:
ea:6e:7d:2f:f4:63:1e:55:5a:18:c1:97:00:ed:12:
89:35:8a:b3:64:08:cd:df:53:3d:e3:11:47:c9:7c:
b4:d4:b5:ec:1b:1f:e2:87:26:70:36:e0:73:53:3c:
bc:01:6f:4f:d4:17:ec:df:81:80:08:36:7d:25:15:
2e:98:97:72:6b:ab:51:49:29:69:d2:3a:bd:3c:5b:
e1:a2:d1:d7:d1:6a:38:1b:a3:ee:e0:b6:cf:1a:43:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:21:73:A6:91:5F:01:83:6E:7A:C3:3B:2E:2D:03:86:33:81:55
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/44whc6aRXwGDbnrDOy4tA4YzgVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8a:e7:63:9c:89:fb:3a:c8:8d:e0:6e:ab:69:b3:0b:d4:65:
c4:1a:68:5e:dc:ad:7c:0f:28:81:f4:ca:c4:21:6a:e2:3c:32:
e2:47:97:c0:a3:a4:8c:37:c1:14:b8:1f:9e:a9:62:ba:d2:57:
47:4b:0f:52:f5:50:93:b6:41:eb:79:e5:06:0d:a6:90:28:60:
b9:99:d8:f0:fb:d7:fb:f7:b4:ce:de:87:56:4c:57:d2:16:08:
29:ed:a4:be:08:1f:46:b3:f7:69:05:cf:62:12:50:06:81:24:
58:00:65:f7:38:cd:e9:33:6d:bd:fa:41:1e:2f:d2:42:9c:49:
94:8f:c0:25:e7:5c:c4:6b:df:00:06:12:a4:5c:fd:01:f9:63:
9a:d2:d7:0c:be:96:f4:1a:ca:94:6f:67:e8:1b:78:3d:d3:2f:
69:c9:2c:65:f4:f3:e4:44:37:4b:18:c5:0a:ed:7c:87:a5:e7:
e7:1b:ea:4b:b7:40:34:27:81:39:79:0d:c0:79:1a:d5:49:e7:
02:ac:b3:28:93:b9:9c:99:43:8e:8b:2e:3a:67:ba:6f:1c:3c:
d5:fc:46:42:95:40:a8:73:c1:06:61:14:7a:f5:f2:f7:47:95:
8b:6f:77:16:c5:04:94:23:6f:4d:68:33:41:78:1d:89:3f:4d:
12:68:81:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuDuIjO83oCpZYGQVs0QlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjQwMTAxMjAzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzhjMjE3M2E2OTE1ZjAxODM2ZTdhYzMzYjJlMmQwMzg2MzM4MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXg4BGh376V2E40um9a/+ZUI/lV
5JDsAYb1MePOdYxR/w4h9yo/1gQ8Hc73f+WX2I4LGUEyGWsB0ymiJgPVEerwsl06
i+CGBlccirv1fcaxyMJZPrPFKIVLJRXb6h1fodcjJLOkgeLiEyJy1LTQGWKgp48L
sEKmB1czEnKaxm2zLOr56YvXsXAUEim33ilM3PZBQN24zI25AvQnVlcmHemn/lDq
bn0v9GMeVVoYwZcA7RKJNYqzZAjN31M94xFHyXy01LXsGx/ihyZwNuBzUzy8AW9P
1Bfs34GACDZ9JRUumJdya6tRSSlp0jq9PFvhotHX0Wo4G6Pu4LbPGkMlsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOMIXOmkV8Bg256wzsuLQOGM4FVMB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvNDR3aGM2YVJYd0dEYm5yRE95NHRBNFl6Z1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmEMA0G
CSqGSIb3DQEBCwUAA4IBAQAHiudjnIn7OsiN4G6rabML1GXEGmhe3K18DyiB9MrE
IWriPDLiR5fAo6SMN8EUuB+eqWK60ldHSw9S9VCTtkHreeUGDaaQKGC5mdjw+9f7
97TO3odWTFfSFggp7aS+CB9Gs/dpBc9iElAGgSRYAGX3OM3pM229+kEeL9JCnEmU
j8Al51zEa98ABhKkXP0B+WOa0tcMvpb0GsqUb2foG3g90y9pySxl9PPkRDdLGMUK
7XyHpefnG+pLt0A0J4E5eQ3AeRrVSecCrLMok7mcmUOOiy46Z7pvHDzV/EZClUCo
c8EGYRR69fL3R5WLb3cWxQSUI29NaDNBeB2JP00SaIGP
-----END CERTIFICATE-----
Generated at Sun May 19 21:26:08 2024 by rpki-client on console-ams.rpki-client.org