Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/1PP2pubqi_Ol0fESsDmb28-e-5o.roa
File: 1PP2pubqi_Ol0fESsDmb28-e-5o.roa (raw, json)
Hash identifier: eSnkSAMzUdI0cxj6K+RsyGvhxBdPfNT2lBFTmyMvjNs=
Subject key identifier: D4:F3:F6:A6:E6:EA:8B:F3:A5:D1:F1:12:B0:39:9B:DB:CF:9E:FB:9A
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 018CC64B304005385344CE281E862956286A
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/1PP2pubqi_Ol0fESsDmb28-e-5o.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200624
IP address blocks: 212.48.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:30:40:05:38:53:44:ce:28:1e:86:29:56:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4f3f6a6e6ea8bf3a5d1f112b0399bdbcf9efb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:5b:c1:fd:3d:d7:02:51:f2:1c:d0:21:0d:
e1:50:3f:59:f6:9f:91:3d:29:b3:7a:7d:5c:ae:c0:
e4:1c:d4:7e:b3:16:26:19:16:50:06:4f:bd:75:68:
4b:a4:ff:4a:0d:0a:83:ae:db:2d:eb:34:09:4d:b2:
d4:32:a0:64:ec:e9:49:9a:34:6d:3a:cb:80:75:17:
73:be:a0:2b:25:df:0e:a5:df:48:c3:fe:24:62:87:
5e:72:80:1d:b3:19:b3:66:5e:2b:60:04:3d:74:84:
d3:80:04:83:6a:93:97:2d:ff:d9:bb:11:eb:0c:eb:
d0:53:e4:14:ce:61:1a:36:63:c1:a6:af:b6:b1:e3:
5a:b4:39:17:7e:58:fe:f8:fc:9c:7b:03:62:58:d4:
48:f4:54:99:b7:59:76:ed:67:88:dd:3c:b8:7a:c7:
b8:5c:25:fd:e0:5a:61:2e:6b:3b:54:63:63:6e:2f:
42:f5:04:a8:36:a7:a1:ba:c4:24:35:54:2d:98:06:
4d:42:69:7c:f6:a5:46:16:e1:d8:67:bb:f1:b3:05:
ed:20:25:50:ac:81:d8:0c:78:19:ec:e3:4c:b5:22:
9d:00:27:36:40:e1:20:19:9e:14:4b:26:9f:ce:07:
95:f0:f3:0c:22:c6:f9:c6:19:99:3a:70:5c:f6:c9:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:F6:A6:E6:EA:8B:F3:A5:D1:F1:12:B0:39:9B:DB:CF:9E:FB:9A
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/1PP2pubqi_Ol0fESsDmb28-e-5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.235.0/24
Signature Algorithm: sha256WithRSAEncryption
38:de:8a:60:37:49:d9:24:b1:38:09:3f:d6:6d:61:a9:f0:9f:
e5:58:65:48:ce:52:ed:ec:95:74:18:89:20:4f:a8:06:b1:a4:
79:18:f2:fe:f5:36:ae:e3:b2:35:b3:44:66:84:f8:e5:ef:7d:
80:53:7f:cf:02:86:28:1d:3e:96:7b:91:fd:7a:6f:7c:04:5c:
23:df:11:08:fd:b6:51:ad:35:f2:bd:10:66:6c:6f:9a:b5:78:
7a:f7:98:18:39:ef:db:7c:0a:da:42:db:f2:10:6f:96:51:a3:
40:af:f6:f0:8b:94:e4:34:29:34:fb:4d:19:0f:11:a1:8a:86:
ce:fe:70:da:2f:43:f2:7a:40:38:46:6d:68:90:0c:b3:fa:1e:
db:06:f2:35:30:22:26:0a:19:65:0f:2d:5b:69:0d:a0:eb:38:
8a:40:77:9b:70:ec:c4:b2:96:cd:b6:86:0a:56:cf:6b:4a:a9:
35:0a:3d:63:88:c8:e3:da:51:27:38:db:eb:80:79:65:50:d4:
fd:dd:72:58:e1:00:d4:b6:44:ee:62:97:92:bf:ab:05:61:da:
38:b8:6b:d0:fc:bf:cc:35:ec:ef:4c:53:69:7f:8c:15:b7:40:
05:df:21:1b:3c:0a:30:01:9f:64:77:e8:1f:61:dd:54:d0:d2:
7a:f6:33:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSzBABThTRM4oHoYpVihqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTBhYTg5MjM5MjQyZGFjYzlkMDNlM2FmMjJkNGU4N2E3
ODM0MTQwHhcNMjQwMTAxMTgzMTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGYzZjZhNmU2ZWE4YmYzYTVkMWYxMTJiMDM5OWJkYmNmOWVmYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZbwf091wJR8hzQIQ3hUD9Z9p+R
PSmzen1crsDkHNR+sxYmGRZQBk+9dWhLpP9KDQqDrtst6zQJTbLUMqBk7OlJmjRt
OsuAdRdzvqArJd8Opd9Iw/4kYodecoAdsxmzZl4rYAQ9dITTgASDapOXLf/ZuxHr
DOvQU+QUzmEaNmPBpq+2seNatDkXflj++PycewNiWNRI9FSZt1l27WeI3Ty4ese4
XCX94FphLms7VGNjbi9C9QSoNqehusQkNVQtmAZNQml89qVGFuHYZ7vxswXtICVQ
rIHYDHgZ7ONMtSKdACc2QOEgGZ4USyafzgeV8PMMIsb5xhmZOnBc9sm6hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNTz9qbm6ovzpdHxErA5m9vPnvuaMB8GA1UdIwQY
MBaAFGgQqokjkkLazJ0D468i1Oh6eDQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEt
MWY2ODk5MzViOTBmLzEvMVBQMnB1YnFpX09sMGZFU3NEbWIyOC1lLTVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wMjQ0ZTQtNzNlMy00NDlkLWEwNmEtMWY2ODk5MzViOTBm
LzEvYUJDcWlTT1NRdHJNblFQanJ5TFU2SHA0TkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1DDrMA0G
CSqGSIb3DQEBCwUAA4IBAQA43opgN0nZJLE4CT/WbWGp8J/lWGVIzlLt7JV0GIkg
T6gGsaR5GPL+9Tau47I1s0RmhPjl732AU3/PAoYoHT6We5H9em98BFwj3xEI/bZR
rTXyvRBmbG+atXh695gYOe/bfAraQtvyEG+WUaNAr/bwi5TkNCk0+00ZDxGhiobO
/nDaL0PyekA4Rm1okAyz+h7bBvI1MCImChllDy1baQ2g6ziKQHebcOzEspbNtoYK
Vs9rSqk1Cj1jiMjj2lEnONvrgHllUNT93XJY4QDUtkTuYpeSv6sFYdo4uGvQ/L/M
NezvTFNpf4wVt0AF3yEbPAowAZ9kd+gfYd1U0NJ69jPQ
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:03:57 2024 by rpki-client on console-fra.rpki-client.org