Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/AANJlOmt3Y5QyeNQxYyXSgI3bkE.roa
File: AANJlOmt3Y5QyeNQxYyXSgI3bkE.roa (raw, json)
Hash identifier: ZD7AbXhhkg6luGVvPg8yhCsGF+h78gozqiqJr22GXzI=
Subject key identifier: 00:03:49:94:E9:AD:DD:8E:50:C9:E3:50:C5:8C:97:4A:02:37:6E:41
Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial: 018F52A724E331240E064899BE4C51B349A1
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/AANJlOmt3Y5QyeNQxYyXSgI3bkE.roa
Signing time: Tue 07 May 2024 10:43:56 +0000
ROA not before: Tue 07 May 2024 10:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212144
IP address blocks: 94.154.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:a7:24:e3:31:24:0e:06:48:99:be:4c:51:b3:49:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Validity
Not Before: May 7 10:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00034994e9addd8e50c9e350c58c974a02376e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:26:f7:a1:64:e2:84:a5:e7:0e:eb:af:38:
d3:a6:e6:ab:ae:45:1d:97:e1:1d:e7:9a:78:69:9a:
2b:27:b5:21:e8:8f:55:ea:88:c9:7d:f7:27:c7:18:
bd:e5:15:4e:e8:4f:06:72:69:7e:5d:a0:a5:01:b3:
13:48:cc:53:32:c7:e9:86:d6:a9:0b:a2:75:42:00:
b7:13:37:60:76:96:3c:9c:d7:f4:f0:6e:5d:57:c3:
9a:dc:16:eb:a2:09:7e:48:86:fc:d0:d6:2d:cf:99:
32:8a:df:ca:b1:82:2a:97:de:62:6e:f7:17:ae:38:
de:9c:2a:75:ea:69:b6:3a:8d:a0:60:78:1e:ab:ae:
b2:54:c5:95:27:f2:47:c2:ab:be:30:a9:23:62:14:
7a:4f:3a:9f:a2:57:f4:69:c3:a5:76:cb:72:2b:7f:
b6:f7:f5:03:1b:b4:0e:54:62:6a:c1:85:87:1d:42:
6a:4d:be:34:77:b2:a7:20:86:be:77:51:6e:99:f3:
51:a6:3e:d8:d8:f8:0e:47:6d:94:92:aa:35:df:c8:
01:f2:31:3d:f1:8e:78:19:82:7e:29:07:f7:68:63:
b7:5d:39:36:ee:e3:43:70:15:95:d5:83:96:8a:e6:
04:97:bf:db:4e:76:0b:18:8f:bd:9d:6a:09:e1:69:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:49:94:E9:AD:DD:8E:50:C9:E3:50:C5:8C:97:4A:02:37:6E:41
X509v3 Authority Key Identifier:
keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/AANJlOmt3Y5QyeNQxYyXSgI3bkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7d:c9:88:3e:94:35:b0:f6:c0:bd:19:b9:bc:c2:24:6c:ea:
24:9c:60:08:6d:51:ab:5b:16:10:2f:fc:b4:96:b6:44:b4:ad:
b8:50:ac:10:a9:9d:86:24:43:c1:6e:29:83:91:93:a9:1a:11:
a8:eb:78:21:2e:43:ce:09:9c:55:9d:87:bb:16:1d:ec:47:20:
a6:2c:f5:0c:85:25:dd:f9:1b:b1:75:c1:7c:b6:48:ec:ef:3b:
72:59:d9:14:5b:ff:c9:dc:c8:77:75:d0:42:c4:b7:9a:86:4d:
91:16:23:bd:1f:6e:c4:93:f3:f5:83:b6:55:ac:59:45:33:f3:
57:cc:0e:99:e9:75:68:b1:4e:af:d5:0e:de:76:42:f5:6e:4a:
22:b9:7f:ea:98:ac:4f:6a:3b:ed:31:34:7e:42:9b:55:4a:1e:
30:1a:f3:d5:22:dd:5e:94:a2:df:e0:4f:dd:c2:77:35:be:01:
19:c2:7e:a5:1a:fa:e1:d7:da:34:4d:aa:f7:7b:d0:81:02:1b:
a9:43:ec:44:3a:13:83:b4:86:45:71:1f:85:42:ae:d8:30:05:
f9:b5:01:16:45:b8:37:a0:ea:86:36:53:73:49:7b:b5:c5:f7:
3d:06:e2:1a:71:07:6c:8e:c9:9f:0d:92:9f:e7:05:31:79:22:
56:45:a7:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9SpyTjMSQOBkiZvkxRs0mhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl
MTRlNDQwHhcNMjQwNTA3MTA0MzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDAzNDk5NGU5YWRkZDhlNTBjOWUzNTBjNThjOTc0YTAyMzc2ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZAm96Fk4oSl5w7rrzjTpuarrkUd
l+Ed55p4aZorJ7Uh6I9V6ojJffcnxxi95RVO6E8Gcml+XaClAbMTSMxTMsfphtap
C6J1QgC3EzdgdpY8nNf08G5dV8Oa3Bbrogl+SIb80NYtz5kyit/KsYIql95ibvcX
rjjenCp16mm2Oo2gYHgeq66yVMWVJ/JHwqu+MKkjYhR6Tzqfolf0acOldstyK3+2
9/UDG7QOVGJqwYWHHUJqTb40d7KnIIa+d1FumfNRpj7Y2PgOR22Ukqo138gB8jE9
8Y54GYJ+KQf3aGO3XTk27uNDcBWV1YOWiuYEl7/bTnYLGI+9nWoJ4WlL/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAADSZTprd2OUMnjUMWMl0oCN25BMB8GA1UdIwQY
MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt
NzlmN2I2ZWE3YzE0LzEvQUFOSmxPbXQzWTVReWVOUXhZeVhTZ0kzYmtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0
LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp2MA0G
CSqGSIb3DQEBCwUAA4IBAQBufcmIPpQ1sPbAvRm5vMIkbOoknGAIbVGrWxYQL/y0
lrZEtK24UKwQqZ2GJEPBbimDkZOpGhGo63ghLkPOCZxVnYe7Fh3sRyCmLPUMhSXd
+RuxdcF8tkjs7ztyWdkUW//J3Mh3ddBCxLeahk2RFiO9H27Ek/P1g7ZVrFlFM/NX
zA6Z6XVosU6v1Q7edkL1bkoiuX/qmKxPajvtMTR+QptVSh4wGvPVIt1elKLf4E/d
wnc1vgEZwn6lGvrh19o0Tar3e9CBAhupQ+xEOhODtIZFcR+FQq7YMAX5tQEWRbg3
oOqGNlNzSXu1xfc9BuIacQdsjsmfDZKf5wUxeSJWRafn
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:01:07 2024 by rpki-client on console-ams.rpki-client.org