Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/PyGlY5U-eJ5Giw4iuiFahpe2kJM.roa
File: PyGlY5U-eJ5Giw4iuiFahpe2kJM.roa (raw, json)
Hash identifier: m6vLBgNRgab2d5JPTqsj7IaONJ8dPANlVB3p1RvCDS8=
Subject key identifier: 3F:21:A5:63:95:3E:78:9E:46:8B:0E:22:BA:21:5A:86:97:B6:90:93
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018CC725B1BD50C22C64DB4F6D5D9720C5C7
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/PyGlY5U-eJ5Giw4iuiFahpe2kJM.roa
Signing time: Mon 01 Jan 2024 22:29:45 +0000
ROA not before: Mon 01 Jan 2024 22:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 37.148.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:b1:bd:50:c2:2c:64:db:4f:6d:5d:97:20:c5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 1 22:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f21a563953e789e468b0e22ba215a8697b69093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a1:cd:14:a5:ba:a7:48:01:79:46:90:60:90:
70:19:95:63:12:79:7d:e8:d3:e9:b6:fc:3d:f1:ef:
94:8a:49:c9:90:c8:3f:1a:33:bc:4a:1f:6c:a4:72:
09:4d:c1:83:2d:05:2d:98:7b:aa:22:57:3a:93:3e:
c2:5e:da:f2:54:d4:57:86:b2:76:cf:86:44:5a:32:
47:93:30:d3:72:6b:ac:e0:1f:0f:aa:16:f5:cd:59:
60:e8:e3:66:1c:d7:78:7d:86:2e:52:56:cf:45:96:
c4:47:08:a0:bc:0f:7f:d7:88:ab:f4:a8:8c:cc:15:
bb:cd:91:f4:9e:e1:19:6a:f3:f7:aa:fd:da:24:ab:
b0:a6:c7:6d:43:8d:6f:3b:d3:65:1a:3b:dd:aa:f6:
2a:95:0a:76:fa:40:a4:1c:7b:ae:e6:10:a9:88:69:
a2:59:02:c2:2d:9b:29:a4:08:3c:7c:a9:e4:b0:b4:
06:71:96:e5:fd:72:e5:e8:5c:11:25:ed:85:3f:f3:
3d:fe:b3:44:cb:0b:1e:1f:51:98:3e:ec:7c:99:bb:
07:57:a0:04:1a:f1:60:0f:23:3f:6d:f0:64:1c:43:
ff:6a:32:bb:3f:9b:41:6b:60:84:d6:43:3b:78:9f:
46:c7:b7:46:b0:36:0d:aa:9b:ea:60:1e:be:bf:e9:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:21:A5:63:95:3E:78:9E:46:8B:0E:22:BA:21:5A:86:97:B6:90:93
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/PyGlY5U-eJ5Giw4iuiFahpe2kJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.220.0/22
Signature Algorithm: sha256WithRSAEncryption
86:3e:96:70:0e:2a:d3:fa:24:1e:c5:8d:e2:cd:2a:ee:e2:65:
98:ef:14:d5:3a:a5:43:0a:af:51:c8:bb:54:ef:10:ae:92:3f:
40:8e:f0:c0:23:0b:b2:54:f2:7e:d4:6e:72:74:06:ae:43:33:
04:0a:22:4d:1b:fb:e5:63:3b:8c:75:cd:d4:b6:76:c1:17:bc:
9f:22:a6:18:85:7b:bc:a0:81:04:a3:fd:49:2d:80:88:5a:59:
a2:e8:df:01:9f:94:17:4f:c8:e9:f7:03:cc:08:5d:d0:c5:9e:
26:8c:5e:63:43:5e:7a:3a:4e:14:7d:5a:02:96:cf:77:f5:db:
07:6f:7b:56:41:ef:1e:d7:e9:d2:b2:44:30:dc:3b:83:c4:d1:
98:50:71:1a:dc:07:eb:10:ef:15:6b:b7:a3:7c:16:51:cb:86:
9b:ab:28:db:61:c2:8c:d2:06:8d:ac:7e:af:c4:7d:96:1a:35:
ab:b2:be:18:d8:76:91:c7:1e:23:4d:a6:47:9b:d4:a7:80:5d:
19:f5:2a:20:44:4f:46:ee:51:d6:e6:39:d9:97:70:42:19:1a:
23:66:64:3b:c3:14:b4:30:fc:bc:8d:ca:e7:3a:cd:e8:e3:b8:
42:95:3b:d5:dd:ba:c7:9b:80:14:d7:84:21:35:46:61:ba:7c:
55:01:bf:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJbG9UMIsZNtPbV2XIMXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjQwMTAxMjIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjIxYTU2Mzk1M2U3ODllNDY4YjBlMjJiYTIxNWE4Njk3YjY5MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKHNFKW6p0gBeUaQYJBwGZVjEnl9
6NPptvw98e+UiknJkMg/GjO8Sh9spHIJTcGDLQUtmHuqIlc6kz7CXtryVNRXhrJ2
z4ZEWjJHkzDTcmus4B8Pqhb1zVlg6ONmHNd4fYYuUlbPRZbERwigvA9/14ir9KiM
zBW7zZH0nuEZavP3qv3aJKuwpsdtQ41vO9NlGjvdqvYqlQp2+kCkHHuu5hCpiGmi
WQLCLZsppAg8fKnksLQGcZbl/XLl6FwRJe2FP/M9/rNEywseH1GYPux8mbsHV6AE
GvFgDyM/bfBkHEP/ajK7P5tBa2CE1kM7eJ9Gx7dGsDYNqpvqYB6+v+l3SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8hpWOVPnieRosOIrohWoaXtpCTMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvUHlHbFk1VS1lSjVHaXc0aXVpRmFocGUya0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJZTcMA0G
CSqGSIb3DQEBCwUAA4IBAQCGPpZwDirT+iQexY3izSru4mWY7xTVOqVDCq9RyLtU
7xCukj9AjvDAIwuyVPJ+1G5ydAauQzMECiJNG/vlYzuMdc3UtnbBF7yfIqYYhXu8
oIEEo/1JLYCIWlmi6N8Bn5QXT8jp9wPMCF3QxZ4mjF5jQ156Ok4UfVoCls939dsH
b3tWQe8e1+nSskQw3DuDxNGYUHEa3AfrEO8Va7ejfBZRy4abqyjbYcKM0gaNrH6v
xH2WGjWrsr4Y2HaRxx4jTaZHm9SngF0Z9SogRE9G7lHW5jnZl3BCGRojZmQ7wxS0
MPy8jcrnOs3o47hClTvV3brHm4AU14QhNUZhunxVAb/m
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:08:12 2024 by rpki-client on console-ams.rpki-client.org