Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/37TI2ftkNXuUIIOyu-E5izw4hNA.roa
File: 37TI2ftkNXuUIIOyu-E5izw4hNA.roa (raw, json)
Hash identifier: xVKqVmx6HsByPUPx8vKkRcas8/aRkAZmAcXuNjKeJeM=
Subject key identifier: DF:B4:C8:D9:FB:64:35:7B:94:20:83:B2:BB:E1:39:8B:3C:38:84:D0
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 018CC86F70951D45AAB8F5538295F665684A
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/37TI2ftkNXuUIIOyu-E5izw4hNA.roa
Signing time: Tue 02 Jan 2024 04:29:55 +0000
ROA not before: Tue 02 Jan 2024 04:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29884
IP address blocks: 57.250.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:70:95:1d:45:aa:b8:f5:53:82:95:f6:65:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 2 04:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfb4c8d9fb64357b942083b2bbe1398b3c3884d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:9e:da:b5:27:f3:0e:82:6a:08:1e:cf:82:
6e:14:9c:7e:63:81:d6:a8:e7:33:b9:4d:71:ec:fc:
c2:44:e4:92:d2:4e:cc:9f:9f:70:74:2a:5e:3a:74:
4f:1a:39:53:4c:59:f4:ad:ad:fb:2b:bb:a8:e4:c1:
12:70:c0:66:fc:90:4a:e6:2c:2a:d5:e7:bf:f7:8d:
1b:df:9f:26:c6:9d:16:df:aa:9a:24:12:b1:59:87:
30:d7:a3:af:26:a7:90:78:fb:07:89:d7:d7:ee:8e:
77:96:f5:c9:67:0d:a4:5b:f4:d0:8a:b9:f5:f7:33:
ff:5e:7b:6b:e1:90:18:24:cd:00:d4:17:a9:13:0f:
44:2c:d3:97:18:fb:73:e9:b2:fe:89:d0:6b:0c:8d:
2a:82:51:82:2d:b3:31:50:62:26:64:ad:bc:c5:62:
08:ee:27:db:e9:cc:b1:67:4d:39:65:47:76:aa:04:
05:bc:72:34:13:e5:f9:bb:7d:d6:63:7c:e4:39:a3:
8e:9c:dc:93:2e:3d:5a:b2:79:55:6e:e9:1e:33:56:
33:20:a0:13:bd:a6:0f:7c:3f:bb:ce:ef:89:2a:62:
bc:47:39:ab:b6:1c:9a:ac:a3:31:4f:cd:22:2b:ca:
00:87:21:13:b6:ad:94:27:5b:91:6e:13:63:88:1d:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:C8:D9:FB:64:35:7B:94:20:83:B2:BB:E1:39:8B:3C:38:84:D0
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/37TI2ftkNXuUIIOyu-E5izw4hNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2e:93:dd:60:56:6e:13:0d:f9:4a:2b:63:58:b5:4a:72:c7:
ef:9d:01:df:79:4e:ac:c1:35:37:f3:a6:7e:5d:b2:ed:bd:98:
8c:4c:5a:cc:a3:d5:2f:12:21:3a:81:69:67:97:72:4d:63:30:
2a:be:3b:b9:33:49:ea:04:24:b6:86:77:74:76:f6:de:fd:d4:
b9:8c:bc:de:e8:75:f9:cb:6a:09:dc:bd:81:15:7c:1b:2a:93:
5a:22:8c:ca:bb:d3:5b:03:f8:8b:e8:63:4e:f3:2b:93:87:3e:
fd:22:46:64:a9:4d:91:22:c1:92:4c:a5:6a:b7:cd:cf:8c:a1:
f9:fa:73:a7:38:18:a0:05:d4:a5:8a:bd:e6:09:61:13:6c:c5:
6d:4b:b7:18:4b:07:6e:c3:1f:17:56:25:cf:b5:12:fe:a0:4d:
57:5e:6a:db:6f:27:4a:6f:9c:c8:9f:cc:69:39:39:9a:32:84:
6c:bc:d5:19:89:c6:93:d4:a7:cc:27:69:ee:83:f4:60:4f:02:
05:d3:8c:fe:04:95:0d:e6:b0:e6:09:08:00:fb:30:f4:cf:c5:
27:04:ef:ef:68:ef:0f:3f:71:f8:7d:a4:5e:08:0e:b1:91:da:
0f:55:05:ad:77:5c:0b:cd:ae:09:05:27:2a:c9:5c:87:ab:98:
18:67:7a:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb3CVHUWquPVTgpX2ZWhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjQwMTAyMDQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmI0YzhkOWZiNjQzNTdiOTQyMDgzYjJiYmUxMzk4YjNjMzg4NGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GWe2rUn8w6Caggez4JuFJx+Y4HW
qOczuU1x7PzCROSS0k7Mn59wdCpeOnRPGjlTTFn0ra37K7uo5MEScMBm/JBK5iwq
1ee/940b358mxp0W36qaJBKxWYcw16OvJqeQePsHidfX7o53lvXJZw2kW/TQirn1
9zP/Xntr4ZAYJM0A1BepEw9ELNOXGPtz6bL+idBrDI0qglGCLbMxUGImZK28xWII
7ifb6cyxZ005ZUd2qgQFvHI0E+X5u33WY3zkOaOOnNyTLj1asnlVbukeM1YzIKAT
vaYPfD+7zu+JKmK8RzmrthyarKMxT80iK8oAhyETtq2UJ1uRbhNjiB0ZeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+0yNn7ZDV7lCCDsrvhOYs8OITQMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvMzdUSTJmdGtOWHVVSUlPeXUtRTVpenc0aE5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAOfo4MA0G
CSqGSIb3DQEBCwUAA4IBAQCyLpPdYFZuEw35SitjWLVKcsfvnQHfeU6swTU386Z+
XbLtvZiMTFrMo9UvEiE6gWlnl3JNYzAqvju5M0nqBCS2hnd0dvbe/dS5jLze6HX5
y2oJ3L2BFXwbKpNaIozKu9NbA/iL6GNO8yuThz79IkZkqU2RIsGSTKVqt83PjKH5
+nOnOBigBdSlir3mCWETbMVtS7cYSwduwx8XViXPtRL+oE1XXmrbbydKb5zIn8xp
OTmaMoRsvNUZicaT1KfMJ2nug/RgTwIF04z+BJUN5rDmCQgA+zD0z8UnBO/vaO8P
P3H4faReCA6xkdoPVQWtd1wLza4JBScqyVyHq5gYZ3q5
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:55:15 2024 by rpki-client on console-ams.rpki-client.org