Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/shNnNjloR7Iz3DiaNG6lkBqbkAQ.roa
File: shNnNjloR7Iz3DiaNG6lkBqbkAQ.roa (raw, json)
Hash identifier: TfNw11sammT1kKhJ2mulM+QWwSHai8l2yvGCPJ+v2dA=
Subject key identifier: B2:13:67:36:39:68:47:B2:33:DC:38:9A:34:6E:A5:90:1A:9B:90:04
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 018CC56EE76C018448C984AE72D619DB64FD
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/shNnNjloR7Iz3DiaNG6lkBqbkAQ.roa
Signing time: Mon 01 Jan 2024 14:30:28 +0000
ROA not before: Mon 01 Jan 2024 14:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213192
IP address blocks: 46.235.40.0/21 maxlen: 21
83.150.232.0/22 maxlen: 22
83.150.235.0/24 maxlen: 24
2a00:d640::/32 maxlen: 32
2a00:d641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e7:6c:01:84:48:c9:84:ae:72:d6:19:db:64:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jan 1 14:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2136736396847b233dc389a346ea5901a9b9004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:2a:f1:a8:45:c5:9d:16:a0:36:6b:a6:77:
ff:e4:54:19:54:f5:f8:80:85:f8:d1:d8:0f:03:da:
d5:fe:82:f9:c0:b1:57:1b:10:6a:ae:d4:eb:7d:2d:
06:a1:78:12:36:de:fc:39:c6:d6:92:cb:63:3d:10:
1f:6b:a2:f0:13:b3:ab:35:a0:ed:33:8f:2f:b1:8d:
80:c5:19:f0:1b:a1:9c:55:4d:14:d9:49:04:e6:67:
93:4c:40:a3:99:ba:43:e8:55:f9:2b:fc:76:6a:97:
d4:ab:97:28:f9:71:97:12:15:55:fd:77:8d:4b:9d:
4a:7e:c7:6f:d9:3a:6f:16:9c:7f:3e:39:3d:94:12:
b2:14:90:49:85:87:ed:84:e5:c6:7a:b6:24:22:22:
44:93:97:06:72:c7:98:88:ad:62:11:de:7e:0b:54:
64:47:bf:8a:97:d9:fc:9e:95:8d:c6:2c:7c:3f:4a:
b1:0b:a0:49:c4:b6:a8:26:07:c8:e1:f3:9b:ef:fa:
b3:25:50:9e:91:97:b0:31:9e:97:be:b7:24:17:95:
c6:5c:cf:9a:d1:e1:d1:19:b4:af:51:d2:db:69:c3:
04:ca:ed:ac:7d:aa:d3:1a:e1:4a:80:92:3b:0d:c5:
5b:22:78:cd:ca:83:8c:f6:34:d8:0c:ed:0d:7c:16:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:13:67:36:39:68:47:B2:33:DC:38:9A:34:6E:A5:90:1A:9B:90:04
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/shNnNjloR7Iz3DiaNG6lkBqbkAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.40.0/21
83.150.232.0/22
IPv6:
2a00:d640::/31
Signature Algorithm: sha256WithRSAEncryption
0b:b4:55:64:06:34:4a:96:6d:aa:32:e9:b0:f5:8b:62:a0:08:
19:78:4b:4b:25:26:ee:4e:56:82:ee:d0:84:5f:f5:35:9d:4a:
f5:0d:cc:89:41:3c:7c:44:f2:37:f9:87:b5:41:43:2d:5c:4c:
36:9a:e6:bf:38:67:26:7f:e4:0e:d5:e2:fd:bb:65:7d:93:b3:
63:0f:8a:45:74:41:85:c4:c2:43:ee:cb:f0:5d:e6:c2:67:63:
46:bc:bf:d7:e3:0e:24:26:c0:05:37:a8:47:91:c0:58:2b:8b:
b0:2c:5d:4f:cd:c8:6e:d2:66:a6:18:21:73:20:f9:13:19:32:
da:6a:1f:93:29:f6:1a:be:b7:7c:73:5d:c9:28:75:46:0e:60:
b8:ca:8e:5b:f3:da:eb:7a:38:2e:ef:8e:13:ec:ae:6a:ee:ca:
13:df:0b:b8:24:79:61:f4:f4:55:5a:d7:00:d6:0a:84:c0:e8:
53:22:b2:0b:aa:bd:8c:15:c4:8a:02:f0:9e:89:32:3c:79:0b:
1b:1d:9e:09:11:ad:df:6c:25:41:25:b6:13:28:23:0d:d8:cb:
13:81:e7:06:ae:b6:b6:60:db:b4:1f:79:53:13:a0:3f:ad:95:
c0:0b:b5:b3:57:f1:f8:3e:83:c3:11:40:38:73:22:77:63:0b:
5f:b7:66:4c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFbudsAYRIyYSuctYZ22T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz
NTQxYTQwHhcNMjQwMTAxMTQzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjEzNjczNjM5Njg0N2IyMzNkYzM4OWEzNDZlYTU5MDFhOWI5MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQUq8ahFxZ0WoDZrpnf/5FQZVPX4
gIX40dgPA9rV/oL5wLFXGxBqrtTrfS0GoXgSNt78OcbWkstjPRAfa6LwE7OrNaDt
M48vsY2AxRnwG6GcVU0U2UkE5meTTECjmbpD6FX5K/x2apfUq5co+XGXEhVV/XeN
S51Kfsdv2TpvFpx/Pjk9lBKyFJBJhYfthOXGerYkIiJEk5cGcseYiK1iEd5+C1Rk
R7+Kl9n8npWNxix8P0qxC6BJxLaoJgfI4fOb7/qzJVCekZewMZ6XvrckF5XGXM+a
0eHRGbSvUdLbacMEyu2sfarTGuFKgJI7DcVbInjNyoOM9jTYDO0NfBYTlQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLITZzY5aEeyM9w4mjRupZAam5AEMB8GA1UdIwQY
MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt
YTc5NjUwMWU3N2ExLzEvc2hObk5qbG9SN0l6M0RpYU5HNmxrQnFia0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex
LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLusoAwQC
U5boMA0EAgACMAcDBQEqANZAMA0GCSqGSIb3DQEBCwUAA4IBAQALtFVkBjRKlm2q
Mumw9YtioAgZeEtLJSbuTlaC7tCEX/U1nUr1DcyJQTx8RPI3+Ye1QUMtXEw2mua/
OGcmf+QO1eL9u2V9k7NjD4pFdEGFxMJD7svwXebCZ2NGvL/X4w4kJsAFN6hHkcBY
K4uwLF1Pzchu0mamGCFzIPkTGTLaah+TKfYavrd8c13JKHVGDmC4yo5b89rrejgu
744T7K5q7soT3wu4JHlh9PRVWtcA1gqEwOhTIrILqr2MFcSKAvCeiTI8eQsbHZ4J
Ea3fbCVBJbYTKCMN2MsTgecGrra2YNu0H3lTE6A/rZXAC7WzV/H4PoPDEUA4cyJ3
Ywtft2ZM
-----END CERTIFICATE-----
Generated at Sat May 11 06:31:29 2024 by rpki-client on console-ams.rpki-client.org