Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/EafYfTtFPpmMx2CQhGdJdXf7gWg.roa
File: EafYfTtFPpmMx2CQhGdJdXf7gWg.roa (raw, json)
Hash identifier: RIoA9J/azsm+NQhHKSbq1fgjApKrp+v6pQ/5dCE3338=
Subject key identifier: 11:A7:D8:7D:3B:45:3E:99:8C:C7:60:90:84:67:49:75:77:FB:81:68
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 018CC8DF8D4817A37DE56CF7590012EB53DB
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/EafYfTtFPpmMx2CQhGdJdXf7gWg.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51514
IP address blocks: 37.221.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8d:48:17:a3:7d:e5:6c:f7:59:00:12:eb:53:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11a7d87d3b453e998cc760908467497577fb8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:25:e6:5a:51:95:8e:5c:3c:b6:b1:cb:3d:
50:26:07:27:03:e5:6f:ff:fe:dc:b9:21:14:10:f6:
73:de:86:fc:72:c0:b4:d0:d8:fa:36:49:47:1c:21:
3c:5c:ce:c6:ae:c1:e0:97:bd:61:d8:ba:67:cf:99:
05:fc:d9:b6:d4:0d:ba:e6:dc:f4:6a:c8:5f:36:27:
9c:b3:3a:a3:4c:61:a4:f1:a1:21:f7:56:83:54:57:
5c:45:66:83:b3:2b:25:1e:f1:9b:80:ba:6a:8d:21:
73:01:e2:82:34:e5:15:b8:32:de:14:90:33:b8:31:
38:b4:40:d9:b7:5f:9b:1b:b9:84:0d:8d:5f:2e:6a:
07:c2:4b:9b:ae:c4:94:9d:7f:78:bd:8c:2c:ec:1e:
e3:85:bf:c5:a3:ed:3f:be:a0:f5:58:59:bf:81:96:
0e:a7:0f:7e:7f:ad:33:ba:29:cf:9c:0e:ed:9a:4e:
e3:52:8e:20:44:54:74:be:76:88:75:d5:6a:f0:72:
0f:85:c9:be:4b:2c:f3:70:33:f3:c8:0b:b0:3a:02:
ed:36:2d:38:1e:7f:0b:ff:f0:53:b9:8e:78:fe:9c:
37:5e:19:d5:b0:a4:7b:c6:52:e7:15:31:37:a8:32:
42:2c:15:9d:74:98:74:ba:4a:63:d6:65:25:8d:1b:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:D8:7D:3B:45:3E:99:8C:C7:60:90:84:67:49:75:77:FB:81:68
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/EafYfTtFPpmMx2CQhGdJdXf7gWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:b5:6e:13:14:0a:c9:93:56:52:f6:cc:f8:4a:00:ca:d3:69:
30:39:8c:12:d0:50:e8:35:30:1a:6e:d9:31:ac:59:02:7e:d1:
12:ab:bf:72:81:6a:5c:37:63:62:03:4b:1b:85:7d:11:10:2a:
25:9e:22:8f:64:99:0a:74:91:f3:44:ac:6e:71:b6:02:9c:a9:
ec:1c:21:e8:8a:5f:ff:3e:ff:75:f7:70:80:db:20:f7:9e:a5:
9d:84:b8:4f:da:30:6a:46:be:61:d8:83:22:02:0e:39:1a:19:
e4:ee:7e:13:bc:da:00:26:c6:c8:71:a0:88:e9:89:f6:57:42:
c7:95:59:a5:01:7c:55:3f:95:88:c2:a2:58:61:0f:bf:08:1c:
32:3c:5d:97:5e:0f:03:9e:cc:ab:0e:b3:5b:a4:33:84:d6:5d:
e2:88:3f:54:97:68:4d:ee:2b:30:bb:63:54:1e:58:2b:10:49:
f0:98:be:85:fd:1d:31:d5:a5:f8:e9:3f:d3:a9:ad:87:89:5d:
46:13:90:93:78:c4:aa:76:ae:fa:1b:1a:88:16:22:f1:16:b9:
8a:b8:e6:e7:1e:9f:5f:bc:b3:b6:41:0e:47:d8:74:48:60:f5:
28:c5:19:b7:c5:97:7b:30:85:55:d9:69:eb:d5:3e:03:f7:21:
86:fa:fe:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI341IF6N95Wz3WQAS61PbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2
OTJhZTAwHhcNMjQwMTAyMDYzMjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE3ZDg3ZDNiNDUzZTk5OGNjNzYwOTA4NDY3NDk3NTc3ZmI4MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ8l5lpRlY5cPLaxyz1QJgcnA+Vv
//7cuSEUEPZz3ob8csC00Nj6NklHHCE8XM7GrsHgl71h2Lpnz5kF/Nm21A265tz0
ashfNiecszqjTGGk8aEh91aDVFdcRWaDsyslHvGbgLpqjSFzAeKCNOUVuDLeFJAz
uDE4tEDZt1+bG7mEDY1fLmoHwkubrsSUnX94vYws7B7jhb/Fo+0/vqD1WFm/gZYO
pw9+f60zuinPnA7tmk7jUo4gRFR0vnaIddVq8HIPhcm+SyzzcDPzyAuwOgLtNi04
Hn8L//BTuY54/pw3XhnVsKR7xlLnFTE3qDJCLBWddJh0ukpj1mUljRs9HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGn2H07RT6ZjMdgkIRnSXV3+4FoMB8GA1UdIwQY
MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt
MGU0N2VkZTMwNWIzLzEvRWFmWWZUdEZQcG1NeDJDUWhHZEpkWGY3Z1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz
LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJd3YMA0G
CSqGSIb3DQEBCwUAA4IBAQCOtW4TFArJk1ZS9sz4SgDK02kwOYwS0FDoNTAabtkx
rFkCftESq79ygWpcN2NiA0sbhX0REColniKPZJkKdJHzRKxucbYCnKnsHCHoil//
Pv9193CA2yD3nqWdhLhP2jBqRr5h2IMiAg45Ghnk7n4TvNoAJsbIcaCI6Yn2V0LH
lVmlAXxVP5WIwqJYYQ+/CBwyPF2XXg8DnsyrDrNbpDOE1l3iiD9Ul2hN7iswu2NU
HlgrEEnwmL6F/R0x1aX46T/Tqa2HiV1GE5CTeMSqdq76GxqIFiLxFrmKuObnHp9f
vLO2QQ5H2HRIYPUoxRm3xZd7MIVV2Wnr1T4D9yGG+v7f
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:41 2024 by rpki-client on console-ams.rpki-client.org