Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/ieCi14EzecEnAs_BMWpdP7kz42Q.roa
File: ieCi14EzecEnAs_BMWpdP7kz42Q.roa (raw, json)
Hash identifier: XWjBilU8akuyIHc0fPR4ThII9u7vmhyMDDx1Qmyx0jU=
Subject key identifier: 89:E0:A2:D7:81:33:79:C1:27:02:CF:C1:31:6A:5D:3F:B9:33:E3:64
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018CC42498DA19D2D434C4932C9AE1AC92CB
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/ieCi14EzecEnAs_BMWpdP7kz42Q.roa
Signing time: Mon 01 Jan 2024 08:29:41 +0000
ROA not before: Mon 01 Jan 2024 08:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198964
IP address blocks: 46.21.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:98:da:19:d2:d4:34:c4:93:2c:9a:e1:ac:92:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Jan 1 08:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89e0a2d7813379c12702cfc1316a5d3fb933e364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:34:aa:ac:d6:d3:c1:91:0a:a3:47:2c:d8:
8e:87:67:b0:f9:6e:90:76:a0:e1:43:a9:5c:5f:db:
93:6b:16:ee:b4:7f:a4:15:ee:d7:9c:cd:9d:52:6f:
25:ef:e9:0e:d5:b8:b8:f3:90:b1:ac:40:4b:5c:57:
55:9d:2b:dc:0b:c4:93:26:41:a0:17:56:e8:59:1b:
2e:5b:d5:3d:77:91:b6:76:fc:97:93:61:ed:f1:5f:
1f:8d:54:08:e2:27:4c:9a:3a:0a:26:20:87:b3:e7:
de:52:12:03:2e:f8:a6:a6:18:d0:84:9d:3a:82:94:
90:b0:c7:20:55:d6:c2:a0:14:0b:91:b8:b4:8b:cd:
32:9a:86:f8:77:8f:35:3c:c1:83:77:b7:fa:5d:82:
95:92:ef:2f:4d:d5:f1:57:2f:7e:cd:54:db:4a:e5:
d8:ec:d3:d6:44:36:9f:bf:7a:f7:3f:18:09:49:10:
3b:b6:49:6d:22:70:36:f0:47:dc:ae:e2:62:f4:7c:
d8:fd:ac:f8:3a:58:3a:61:c3:da:3c:21:ac:92:1a:
ca:2c:55:ec:b9:aa:63:55:f9:21:98:41:63:1a:ef:
ea:df:b2:70:ab:e3:1d:e2:76:da:20:78:c1:ee:82:
09:42:5e:c4:c3:92:8f:84:fa:c0:65:e8:11:98:5a:
86:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:A2:D7:81:33:79:C1:27:02:CF:C1:31:6A:5D:3F:B9:33:E3:64
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/ieCi14EzecEnAs_BMWpdP7kz42Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:2f:7e:41:eb:f4:49:86:6d:8a:52:6f:e3:e7:3f:c9:8c:
d1:1e:bb:2f:58:6b:30:fa:5e:9f:9f:68:bc:dc:a4:ce:2c:86:
3a:19:33:d0:dd:de:eb:15:9c:65:06:68:98:ee:45:ca:7e:34:
30:49:3c:07:4c:44:37:2a:da:e5:86:77:9e:2f:57:37:9b:a3:
70:d6:68:a4:d1:c4:cc:cc:8d:26:1a:e3:e7:29:2a:f4:6e:d2:
06:19:4a:f7:37:04:b3:6f:a1:91:ce:16:60:12:7d:51:2e:07:
b0:45:de:04:54:95:3c:d9:43:a9:fb:bd:d2:79:cc:95:25:82:
6d:6b:c5:37:47:22:44:b4:70:e6:03:9c:3c:12:e2:34:37:b3:
63:7a:77:69:5b:72:d7:c0:2c:36:5e:2a:7f:22:ec:94:09:fe:
65:51:12:0f:05:85:f2:56:f8:17:70:bf:00:7b:4d:9f:a8:dc:
b0:38:75:73:5f:d1:b9:9a:bd:f6:7e:ef:50:bb:b3:6a:a8:45:
28:2a:24:9b:25:1d:74:51:83:4d:60:87:6a:ef:e0:0a:0a:12:
2c:c7:d2:fd:cc:c2:59:c0:a9:fe:2c:69:76:52:8e:e1:14:cd:
a1:cc:b0:38:dc:e9:ae:f5:e9:60:e6:02:ae:56:1b:3a:7f:41:
0a:8d:70:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJJjaGdLUNMSTLJrhrJLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjc3MTBkZjhhZGQ2NGJiOTY4OGUwZjQ1ODFiZWE2N2U0
MDJjNjYwHhcNMjQwMTAxMDgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWUwYTJkNzgxMzM3OWMxMjcwMmNmYzEzMTZhNWQzZmI5MzNlMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY00qqzW08GRCqNHLNiOh2ew+W6Q
dqDhQ6lcX9uTaxbutH+kFe7XnM2dUm8l7+kO1bi485CxrEBLXFdVnSvcC8STJkGg
F1boWRsuW9U9d5G2dvyXk2Ht8V8fjVQI4idMmjoKJiCHs+feUhIDLvimphjQhJ06
gpSQsMcgVdbCoBQLkbi0i80ymob4d481PMGDd7f6XYKVku8vTdXxVy9+zVTbSuXY
7NPWRDafv3r3PxgJSRA7tkltInA28EfcruJi9HzY/az4Olg6YcPaPCGskhrKLFXs
uapjVfkhmEFjGu/q37Jwq+Md4nbaIHjB7oIJQl7Ew5KPhPrAZegRmFqGqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIngoteBM3nBJwLPwTFqXT+5M+NkMB8GA1UdIwQY
MBaAFDr3cQ34rdZLuWiOD0WBvqZ+QCxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQt
ZWVjNDE2YTg4NmY3LzEvaWVDaTE0RXplY0VuQXNfQk1XcGRQN2t6NDJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mNTlmZTMtOTU2ZS00OTM3LTg1OGQtZWVjNDE2YTg4NmY3
LzEvT3ZkeERmaXQxa3U1YUk0UFJZRy1wbjVBTEdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhUfMA0G
CSqGSIb3DQEBCwUAA4IBAQAqOi9+Qev0SYZtilJv4+c/yYzRHrsvWGsw+l6fn2i8
3KTOLIY6GTPQ3d7rFZxlBmiY7kXKfjQwSTwHTEQ3KtrlhneeL1c3m6Nw1mik0cTM
zI0mGuPnKSr0btIGGUr3NwSzb6GRzhZgEn1RLgewRd4EVJU82UOp+73SecyVJYJt
a8U3RyJEtHDmA5w8EuI0N7NjendpW3LXwCw2Xip/IuyUCf5lURIPBYXyVvgXcL8A
e02fqNywOHVzX9G5mr32fu9Qu7NqqEUoKiSbJR10UYNNYIdq7+AKChIsx9L9zMJZ
wKn+LGl2Uo7hFM2hzLA43Omu9elg5gKuVhs6f0EKjXDA
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:47:39 2024 by rpki-client on console-ams.rpki-client.org