Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/oOzHvqJJvKd02wqo34lY4Ucb8NM.roa
File: oOzHvqJJvKd02wqo34lY4Ucb8NM.roa (raw, json)
Hash identifier: JZ6fIFIQ0yPUIpKzIm4kqSVeeMBvEL7lrlEX21eon6Y=
Subject key identifier: A0:EC:C7:BE:A2:49:BC:A7:74:DB:0A:A8:DF:89:58:E1:47:1B:F0:D3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF31ACF41090E01CC3CFF01E27A28
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/oOzHvqJJvKd02wqo34lY4Ucb8NM.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 46.34.47.0/24 maxlen: 24
46.34.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f3:1a:cf:41:09:0e:01:cc:3c:ff:01:e2:7a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0ecc7bea249bca774db0aa8df8958e1471bf0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:7f:d4:d8:b3:2f:c5:55:6f:ff:b2:5b:a8:
7e:1c:b5:26:0d:0a:10:bd:f6:ca:fb:ad:b3:d6:3b:
98:79:9c:ba:4c:d1:40:bd:8d:60:71:e8:df:fd:05:
29:5d:f6:9d:a5:fc:d4:ab:54:51:4e:c5:55:d2:8b:
93:28:f1:c2:08:30:1c:3f:ac:5a:dd:58:10:84:97:
77:9b:03:c9:4d:1d:7e:0c:6e:22:fb:1f:5f:92:aa:
70:f1:df:23:f1:48:ed:b7:a4:38:fa:e3:3a:62:bb:
c1:2a:bf:4d:63:82:e6:67:b6:5e:b2:7d:49:ff:f8:
aa:0a:33:18:54:71:13:a5:08:2d:f1:a5:c0:bd:11:
8d:15:a6:10:c9:af:f4:44:56:17:f4:87:34:ed:2b:
68:51:c9:ea:5d:b1:46:23:2e:b8:31:a1:69:00:db:
0b:06:56:12:27:6f:48:2a:d6:d5:cc:4a:c4:bb:b2:
a9:49:82:87:9d:cb:11:36:9d:9e:a7:eb:5c:bf:74:
f6:ec:fa:b5:73:19:9a:92:45:da:31:3a:6d:34:89:
3c:ec:10:19:be:7d:fd:ab:0d:80:d7:93:75:cd:f8:
0e:18:d7:4c:8a:47:1e:a7:8a:be:04:fb:e9:d5:58:
e6:a6:7d:a1:87:a3:b1:5e:14:e2:71:e0:42:f2:f7:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:C7:BE:A2:49:BC:A7:74:DB:0A:A8:DF:89:58:E1:47:1B:F0:D3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/oOzHvqJJvKd02wqo34lY4Ucb8NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.47.0/24
46.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:5c:8b:19:e2:f1:26:5b:7d:d4:2e:ca:41:cf:63:49:39:
98:14:86:33:d0:24:9e:bc:04:83:81:6e:4a:fd:8e:04:61:93:
ba:60:3f:f4:e0:19:cc:cc:55:14:36:a2:73:67:fa:eb:3f:4d:
27:b9:21:47:51:5a:36:5d:4e:db:73:d1:95:14:9d:c5:94:a2:
6d:c2:12:92:30:fd:d2:71:96:cb:46:86:ed:15:53:b4:9e:01:
a4:4b:bd:8e:bd:de:fd:60:3c:b6:69:76:5a:50:3e:85:8d:43:
d2:13:ec:45:6a:45:be:39:9b:55:6f:8b:2c:b2:a2:a5:c2:d3:
78:c3:3c:88:05:ba:e8:37:fb:db:92:d5:57:65:5a:92:7a:0f:
4a:d0:0e:01:f0:4e:86:c5:e0:e4:35:a4:61:72:88:23:c7:43:
5d:96:4f:e1:c0:82:d9:90:39:b3:ff:00:88:9d:d5:7f:ac:af:
49:95:1a:c6:85:3e:3a:a4:b6:60:07:33:92:62:2b:c5:58:57:
c4:b9:b0:7e:f7:d2:f5:2e:32:12:43:cc:26:c4:0f:a0:e7:dc:
25:50:e4:77:9c:76:ce:7d:00:1c:c8:e2:0f:d3:e4:2a:0a:a6:
bd:1b:87:f0:54:9b:72:98:96:64:b3:02:d8:98:89:76:df:35:
d2:59:ec:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJu/Maz0EJDgHMPP8B4nooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjQwMTAyMTAzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGVjYzdiZWEyNDliY2E3NzRkYjBhYThkZjg5NThlMTQ3MWJmMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia9/1NizL8VVb/+yW6h+HLUmDQoQ
vfbK+62z1juYeZy6TNFAvY1gcejf/QUpXfadpfzUq1RRTsVV0ouTKPHCCDAcP6xa
3VgQhJd3mwPJTR1+DG4i+x9fkqpw8d8j8Ujtt6Q4+uM6YrvBKr9NY4LmZ7Zesn1J
//iqCjMYVHETpQgt8aXAvRGNFaYQya/0RFYX9Ic07StoUcnqXbFGIy64MaFpANsL
BlYSJ29IKtbVzErEu7KpSYKHncsRNp2ep+tcv3T27Pq1cxmakkXaMTptNIk87BAZ
vn39qw2A15N1zfgOGNdMikcep4q+BPvp1Vjmpn2hh6OxXhTiceBC8veleQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKDsx76iSbyndNsKqN+JWOFHG/DTMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvb096SHZxSkp2S2QwMndxbzM0bFk0VWNiOE5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiIvAwQA
LiIzMA0GCSqGSIb3DQEBCwUAA4IBAQBU31yLGeLxJlt91C7KQc9jSTmYFIYz0CSe
vASDgW5K/Y4EYZO6YD/04BnMzFUUNqJzZ/rrP00nuSFHUVo2XU7bc9GVFJ3FlKJt
whKSMP3ScZbLRobtFVO0ngGkS72Ovd79YDy2aXZaUD6FjUPSE+xFakW+OZtVb4ss
sqKlwtN4wzyIBbroN/vbktVXZVqSeg9K0A4B8E6GxeDkNaRhcogjx0Ndlk/hwILZ
kDmz/wCIndV/rK9JlRrGhT46pLZgBzOSYivFWFfEubB+99L1LjISQ8wmxA+g59wl
UOR3nHbOfQAcyOIP0+QqCqa9G4fwVJtymJZkswLYmIl23zXSWewu
-----END CERTIFICATE-----
Generated at Thu Apr 25 13:20:31 2024 by rpki-client on console-fra.rpki-client.org