Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa
File: tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa (raw, json)
Hash identifier: ZXotWny2AIx11o7E6So+NW89Pv4fMzvhWH6Qcn3Wvmc=
Subject key identifier: B4:11:AB:90:A8:F0:8E:C5:CA:4C:A4:80:43:CE:7F:05:A3:66:01:1E
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 018F24A642F7289163930C4FC17C09448072
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa
Signing time: Sun 28 Apr 2024 12:20:26 +0000
ROA not before: Sun 28 Apr 2024 12:20:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 217.147.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:24:a6:42:f7:28:91:63:93:0c:4f:c1:7c:09:44:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Apr 28 12:20:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b411ab90a8f08ec5ca4ca48043ce7f05a366011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:1f:ab:cd:2a:06:15:48:c8:bd:ec:6e:3f:
80:44:d4:8d:0f:ab:74:71:0e:0e:9b:a9:da:1b:53:
e5:4e:46:a6:7c:8f:b3:e1:21:89:21:be:42:e5:af:
e8:9a:a2:28:06:38:43:66:41:1c:53:7c:9c:ed:be:
0c:6b:f1:64:02:a8:bb:01:de:e6:50:a3:e8:0a:7e:
0e:c4:d4:8a:61:3e:a7:d4:d1:9e:f3:b4:f7:2e:d0:
04:f9:76:5d:7d:9b:f9:67:a8:2d:79:21:06:45:ef:
92:df:95:1f:f5:7f:d2:69:de:d5:0f:fc:ca:17:c9:
58:39:e2:12:23:64:3b:f8:01:3c:ca:3a:13:80:5c:
f8:05:6e:a4:ef:be:10:72:ab:bf:a9:86:60:f5:c3:
b6:8c:4e:f0:9e:6a:0e:55:8f:68:e8:ec:39:ee:b7:
ec:8c:8f:5f:5d:5f:fd:c4:c7:f1:da:26:b4:32:30:
94:0d:03:c4:0b:f1:c2:b6:49:b9:2f:45:c1:d1:7d:
de:0a:73:ca:64:df:b0:39:83:01:3e:6c:ae:fc:ec:
74:d5:71:a0:87:cc:52:8f:a1:e1:70:43:c8:37:32:
c2:d1:42:59:46:ed:6f:df:07:93:f4:f7:1d:13:70:
a0:b8:af:e1:88:7c:eb:44:09:c1:35:40:a4:30:8a:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:AB:90:A8:F0:8E:C5:CA:4C:A4:80:43:CE:7F:05:A3:66:01:1E
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1a:5d:55:fe:ca:2c:3e:05:a2:8f:66:3e:aa:a6:b4:ca:b3:
68:fa:bd:20:66:5d:f2:4d:56:dd:b0:fe:55:46:e9:49:28:a5:
a4:f2:29:4c:50:62:de:6b:5c:fc:23:63:6f:6c:65:6e:70:b7:
0b:26:da:02:7c:20:b7:35:cf:42:c4:d5:da:dc:a2:65:99:af:
b7:29:79:84:64:dd:aa:29:db:23:42:53:8d:51:ee:77:cb:8a:
ff:06:07:a2:f5:4e:ab:c6:85:4c:63:9c:b9:95:97:ba:d5:1a:
68:1a:ac:c0:ab:85:3a:b2:bc:64:88:a6:b4:f1:a4:4d:e9:40:
03:d4:89:b7:7e:fa:73:ed:16:93:cc:eb:70:c2:40:82:32:95:
8d:86:06:da:e6:1b:c1:7f:a9:e7:74:da:0c:1c:97:c0:e8:86:
32:43:36:b3:07:23:e8:b8:27:18:5c:dc:85:82:12:69:01:cc:
c6:b7:96:b1:90:b6:ea:13:a8:b0:74:3c:ed:2b:6a:f4:98:69:
84:63:28:3f:fb:59:c6:6d:df:35:1d:91:9e:3c:f4:95:91:f6:
49:c4:8b:60:a2:71:ee:89:af:39:9c:b6:e5:40:74:a5:8b:c5:
05:d4:f6:a5:70:75:9b:ce:a7:1d:8f:4b:3b:ec:ae:9f:46:b8:
78:ce:47:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8kpkL3KJFjkwxPwXwJRIByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2
NTZkNWEwHhcNMjQwNDI4MTIyMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDExYWI5MGE4ZjA4ZWM1Y2E0Y2E0ODA0M2NlN2YwNWEzNjYwMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok0fq80qBhVIyL3sbj+ARNSND6t0
cQ4Om6naG1PlTkamfI+z4SGJIb5C5a/omqIoBjhDZkEcU3yc7b4Ma/FkAqi7Ad7m
UKPoCn4OxNSKYT6n1NGe87T3LtAE+XZdfZv5Z6gteSEGRe+S35Uf9X/Sad7VD/zK
F8lYOeISI2Q7+AE8yjoTgFz4BW6k774Qcqu/qYZg9cO2jE7wnmoOVY9o6Ow57rfs
jI9fXV/9xMfx2ia0MjCUDQPEC/HCtkm5L0XB0X3eCnPKZN+wOYMBPmyu/Ox01XGg
h8xSj6HhcEPINzLC0UJZRu1v3weT9PcdE3CguK/hiHzrRAnBNUCkMIqXqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQRq5Co8I7FykykgEPOfwWjZgEeMB8GA1UdIwQY
MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt
MTc2OWZlZjZiZTk2LzEvdEJHcmtLandqc1hLVEtTQVE4NV9CYU5tQVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2
LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZOmMA0G
CSqGSIb3DQEBCwUAA4IBAQAQGl1V/sosPgWij2Y+qqa0yrNo+r0gZl3yTVbdsP5V
RulJKKWk8ilMUGLea1z8I2NvbGVucLcLJtoCfCC3Nc9CxNXa3KJlma+3KXmEZN2q
KdsjQlONUe53y4r/Bgei9U6rxoVMY5y5lZe61RpoGqzAq4U6srxkiKa08aRN6UAD
1Im3fvpz7RaTzOtwwkCCMpWNhgba5hvBf6nndNoMHJfA6IYyQzazByPouCcYXNyF
ghJpAczGt5axkLbqE6iwdDztK2r0mGmEYyg/+1nGbd81HZGePPSVkfZJxItgonHu
ia85nLblQHSli8UF1PalcHWbzqcdj0s77K6fRrh4zkeS
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:18:42 2024 by rpki-client on console-ams.rpki-client.org