Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/q2Neho45HORoOi6QW-k787NP36E.roa
File: q2Neho45HORoOi6QW-k787NP36E.roa (raw, json)
Hash identifier: 91i6T2VILUxuOObGBtvQbF5tLAc1GG3V1sWdiw7WE6w=
Subject key identifier: AB:63:5E:86:8E:39:1C:E4:68:3A:2E:90:5B:E9:3B:F3:B3:4F:DF:A1
Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial: 01926BE2180B9BF641A9402A814DA80D12A5
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/q2Neho45HORoOi6QW-k787NP36E.roa
Signing time: Tue 08 Oct 2024 11:27:12 +0000
ROA not before: Tue 08 Oct 2024 11:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210727
IP address blocks: 46.253.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:e2:18:0b:9b:f6:41:a9:40:2a:81:4d:a8:0d:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Validity
Not Before: Oct 8 11:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab635e868e391ce4683a2e905be93bf3b34fdfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:b0:3f:31:20:c6:a1:cf:df:a6:b6:20:02:
a6:1f:94:7c:55:f0:36:25:c5:2e:40:aa:9a:3c:bf:
20:db:4d:72:a4:88:54:7a:11:6a:d0:83:e4:4e:c5:
1b:c8:7c:87:eb:b8:47:51:7c:db:fc:10:fc:92:67:
39:50:ed:09:f7:78:07:37:4a:40:7d:3b:8b:01:34:
46:4e:0f:65:18:b8:f0:aa:e0:a7:70:bd:ac:3e:21:
ca:e4:27:c6:01:77:1f:88:f6:e3:41:34:90:c9:91:
3f:63:82:ca:23:a2:67:83:32:e3:b3:e3:34:6c:98:
61:9b:bb:13:93:46:08:e3:d1:4f:08:14:7e:bc:c9:
cd:3b:8d:cb:12:88:84:97:46:19:ce:60:ab:64:63:
83:40:8d:57:35:89:95:08:e8:2c:e0:32:b4:44:9f:
96:92:bf:cf:d7:83:b2:66:30:fc:db:f5:fa:60:1d:
87:f5:c9:8f:bf:0d:8c:ea:67:67:d0:c1:86:c4:81:
e3:8d:a2:4d:f5:a1:f8:be:1c:31:39:07:d1:8f:c0:
46:44:48:6c:9b:15:90:de:78:66:97:ed:70:78:3b:
c9:84:39:4d:fe:b2:22:10:24:e7:69:a9:92:f4:0d:
b1:b5:f9:93:e6:4c:b5:98:db:ba:2a:87:b4:9c:fc:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:5E:86:8E:39:1C:E4:68:3A:2E:90:5B:E9:3B:F3:B3:4F:DF:A1
X509v3 Authority Key Identifier:
keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/q2Neho45HORoOi6QW-k787NP36E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5b:a0:25:75:9c:56:6a:1f:b8:b8:a4:45:fa:d9:4d:6e:30:
e6:82:5f:d0:d2:d7:43:c6:20:88:08:96:2e:ec:2c:9c:3b:ad:
f0:a4:7f:cd:c3:ff:c2:33:37:7b:57:35:e8:ce:e8:66:e1:7f:
a1:00:17:38:2f:6f:c6:df:bd:71:74:17:26:d2:f6:3b:98:63:
c2:76:2a:ea:65:f0:3d:d8:ae:7f:67:5b:5d:aa:92:39:c7:dc:
b3:96:df:91:b6:2f:b5:85:33:0c:9f:7b:bb:1a:6c:be:9c:b0:
2c:64:25:e7:7a:e0:72:18:16:06:d4:7b:74:d5:4d:ed:4f:a7:
00:e8:46:ce:41:cf:eb:b9:ec:b9:47:a3:f7:e6:6e:8e:eb:74:
52:e7:78:32:4c:69:45:4e:f3:ad:9b:e2:8f:6d:f8:89:e8:38:
6a:3f:21:e4:a9:e3:06:6a:89:88:e0:bd:6e:51:ef:c4:bb:98:
87:4b:ec:a5:e1:be:75:ee:50:60:d7:41:a1:7e:b0:c1:c3:bf:
4b:df:3f:5a:07:38:99:f6:c9:40:d0:bf:f0:01:23:a5:d1:83:
0e:c9:bd:62:b6:5f:ff:46:74:24:7b:b0:cc:e9:f3:46:dc:10:
be:95:d8:b6:f5:bf:47:6f:f1:77:9e:cd:a6:4e:dd:64:ed:64:
f1:10:81:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJr4hgLm/ZBqUAqgU2oDRKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5
YjhmNjEwHhcNMjQxMDA4MTEyNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjYzNWU4NjhlMzkxY2U0NjgzYTJlOTA1YmU5M2JmM2IzNGZkZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YuwPzEgxqHP36a2IAKmH5R8VfA2
JcUuQKqaPL8g201ypIhUehFq0IPkTsUbyHyH67hHUXzb/BD8kmc5UO0J93gHN0pA
fTuLATRGTg9lGLjwquCncL2sPiHK5CfGAXcfiPbjQTSQyZE/Y4LKI6JngzLjs+M0
bJhhm7sTk0YI49FPCBR+vMnNO43LEoiEl0YZzmCrZGODQI1XNYmVCOgs4DK0RJ+W
kr/P14OyZjD82/X6YB2H9cmPvw2M6mdn0MGGxIHjjaJN9aH4vhwxOQfRj8BGREhs
mxWQ3nhml+1weDvJhDlN/rIiECTnaamS9A2xtfmT5ky1mNu6Koe0nPwmvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKtjXoaOORzkaDoukFvpO/OzT9+hMB8GA1UdIwQY
MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt
OWIyNTdmNGZlYThkLzEvcTJOZWhvNDVIT1JvT2k2UVctazc4N05QMzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk
LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2BMA0G
CSqGSIb3DQEBCwUAA4IBAQBgW6AldZxWah+4uKRF+tlNbjDmgl/Q0tdDxiCICJYu
7CycO63wpH/Nw//CMzd7VzXozuhm4X+hABc4L2/G371xdBcm0vY7mGPCdirqZfA9
2K5/Z1tdqpI5x9yzlt+Rti+1hTMMn3u7Gmy+nLAsZCXneuByGBYG1Ht01U3tT6cA
6EbOQc/ruey5R6P35m6O63RS53gyTGlFTvOtm+KPbfiJ6DhqPyHkqeMGaomI4L1u
Ue/Eu5iHS+yl4b517lBg10GhfrDBw79L3z9aBziZ9slA0L/wASOl0YMOyb1itl//
RnQke7DM6fNG3BC+ldi29b9Hb/F3ns2mTt1k7WTxEIF4
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:57 2024 by rpki-client on console-ams.rpki-client.org