Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa
File: 2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa (raw, json)
Hash identifier: bqrQ96sJiDgJy+ElrxvSTwuD5rccsD8EZd4pRvClx9E=
Subject key identifier: DB:01:35:34:59:EA:1D:1B:06:0C:FB:84:BC:C2:F0:A3:24:19:7E:E2
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 018CC79505579620C2893379951BB90F6CE3
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa
Signing time: Tue 02 Jan 2024 00:31:21 +0000
ROA not before: Tue 02 Jan 2024 00:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44539
IP address blocks: 212.66.32.0/20 maxlen: 24
212.66.56.0/21 maxlen: 24
5.57.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:05:57:96:20:c2:89:33:79:95:1b:b9:0f:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 2 00:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db01353459ea1d1b060cfb84bcc2f0a324197ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:56:8b:77:9a:01:37:a5:c0:16:71:6f:9c:
27:ba:22:99:9d:0d:c5:96:de:32:5c:09:58:93:9e:
d1:6d:9e:ab:84:73:b3:ce:2d:43:d7:cd:fd:4b:f2:
94:be:92:c8:4a:8b:ef:75:37:d5:d5:70:1c:e0:9e:
25:f0:f3:8e:06:d0:11:b5:37:84:99:8d:01:c0:f0:
98:09:cb:1c:f2:58:99:45:55:b0:13:9c:c1:e5:05:
d2:e5:f8:22:a8:f4:9c:34:e0:60:ee:70:15:5d:a5:
17:55:3e:f7:b1:18:e0:48:2c:3c:f5:2a:c8:05:fe:
a0:7b:d0:4e:f2:34:fa:28:f3:1c:11:4c:8e:27:0d:
73:b4:92:b9:fb:b0:e4:c8:ea:dd:45:bd:53:b8:17:
b0:08:b9:9e:28:4c:5a:47:63:9c:8f:1a:36:09:ae:
93:39:f2:29:e3:c3:ed:09:f5:40:03:be:7c:32:91:
e2:70:ed:51:9e:de:d7:bc:05:9a:4e:88:71:bd:09:
c2:42:d4:36:e6:3e:c8:56:a6:95:a6:df:12:0c:54:
d5:6b:2e:c5:f6:4e:53:3e:1f:e9:98:71:a5:14:b2:
31:70:98:96:c3:e2:ad:3c:96:a7:08:1a:b0:43:2c:
f6:13:4f:54:0d:a2:98:4f:73:30:4b:1e:d0:65:d9:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:01:35:34:59:EA:1D:1B:06:0C:FB:84:BC:C2:F0:A3:24:19:7E:E2
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/2wE1NFnqHRsGDPuEvMLwoyQZfuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.212.0/24
212.66.32.0/20
212.66.56.0/21
Signature Algorithm: sha256WithRSAEncryption
83:83:e9:99:ff:b5:fb:f8:75:1a:9d:85:4f:9c:52:9c:f2:2b:
20:67:70:3d:3a:6b:0f:d9:04:17:74:bd:25:0c:3f:36:87:d1:
d5:a0:97:21:9d:7f:0c:ac:0a:fc:e1:3c:21:7e:42:62:25:10:
84:07:9f:4b:9c:f6:c9:e0:9e:eb:dd:74:a6:75:fd:fe:bf:58:
26:b4:4e:73:4a:86:b6:5b:e9:16:4e:9c:37:e7:6f:ac:0a:e3:
33:fb:1a:b6:13:1a:41:6d:c0:91:04:9c:5d:fe:23:9d:54:13:
73:1a:07:a0:f7:19:c4:da:e3:c5:c2:41:6a:9a:3a:2e:fe:e9:
52:68:8d:50:12:7c:74:40:5e:0b:ae:22:7a:47:84:78:d7:d7:
1d:0a:a3:fc:63:fc:51:af:d0:5a:a5:99:be:a1:76:2f:f1:52:
a9:ad:71:5f:11:ce:40:d9:6b:11:43:ed:63:45:b2:de:a9:0f:
09:f7:be:45:f5:8f:18:a2:1a:c8:9d:ed:31:6f:af:02:da:a8:
26:d5:67:5f:cf:bb:58:da:1b:73:6c:0f:72:04:f8:34:a0:df:
f3:c3:62:63:1f:e9:5d:75:8c:f2:56:51:bf:38:fe:3a:c5:59:
d4:0e:14:e9:6c:11:43:d8:80:dd:9a:5a:34:81:63:c6:ea:78:
c4:f9:81:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzHlQVXliDCiTN5lRu5D2zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjQwMTAyMDAzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjAxMzUzNDU5ZWExZDFiMDYwY2ZiODRiY2MyZjBhMzI0MTk3ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq01Wi3eaATelwBZxb5wnuiKZnQ3F
lt4yXAlYk57RbZ6rhHOzzi1D1839S/KUvpLISovvdTfV1XAc4J4l8POOBtARtTeE
mY0BwPCYCcsc8liZRVWwE5zB5QXS5fgiqPScNOBg7nAVXaUXVT73sRjgSCw89SrI
Bf6ge9BO8jT6KPMcEUyOJw1ztJK5+7DkyOrdRb1TuBewCLmeKExaR2Ocjxo2Ca6T
OfIp48PtCfVAA758MpHicO1Rnt7XvAWaTohxvQnCQtQ25j7IVqaVpt8SDFTVay7F
9k5TPh/pmHGlFLIxcJiWw+KtPJanCBqwQyz2E09UDaKYT3MwSx7QZdlFkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNsBNTRZ6h0bBgz7hLzC8KMkGX7iMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvMndFMU5GbnFIUnNHRFB1RXZNTHdveVFaZnVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTnUAwQE
1EIgAwQD1EI4MA0GCSqGSIb3DQEBCwUAA4IBAQCDg+mZ/7X7+HUanYVPnFKc8isg
Z3A9OmsP2QQXdL0lDD82h9HVoJchnX8MrAr84TwhfkJiJRCEB59LnPbJ4J7r3XSm
df3+v1gmtE5zSoa2W+kWTpw352+sCuMz+xq2ExpBbcCRBJxd/iOdVBNzGgeg9xnE
2uPFwkFqmjou/ulSaI1QEnx0QF4LriJ6R4R419cdCqP8Y/xRr9BapZm+oXYv8VKp
rXFfEc5A2WsRQ+1jRbLeqQ8J975F9Y8YohrIne0xb68C2qgm1Wdfz7tY2htzbA9y
BPg0oN/zw2JjH+lddYzyVlG/OP46xVnUDhTpbBFD2IDdmlo0gWPG6njE+YGM
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:12:57 2024 by rpki-client on console-ams.rpki-client.org