Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2woacMT6u6jW8uLI3AXiQDM4K64.roa
File: 2woacMT6u6jW8uLI3AXiQDM4K64.roa (raw, json)
Hash identifier: 3FQcG1I5GU0Drb29hLt7NgUUNAmExZ0vPflrrqg1fKw=
Subject key identifier: DB:0A:1A:70:C4:FA:BB:A8:D6:F2:E2:C8:DC:05:E2:40:33:38:2B:AE
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019423D711283EACDEDDBC140C3F33EB88D1
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2woacMT6u6jW8uLI3AXiQDM4K64.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205547
IP address blocks: 46.32.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:11:28:3e:ac:de:dd:bc:14:0c:3f:33:eb:88:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db0a1a70c4fabba8d6f2e2c8dc05e24033382bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:8c:55:97:bb:49:da:80:4f:7e:ab:10:7f:
fa:35:df:ed:5c:6f:a8:fa:93:95:3c:64:2e:30:c1:
6d:00:8c:8b:e8:f9:fd:86:bd:cc:36:3a:23:8c:49:
a4:1c:22:b9:46:99:81:ef:0c:bf:28:ea:90:86:ed:
ea:0b:5d:86:dd:f2:1c:97:8e:ac:2e:e5:de:16:51:
6b:2e:6f:bf:9c:04:64:5d:0e:b3:09:fc:61:34:78:
0d:9a:44:74:9a:ef:4a:df:3f:c7:29:3c:f6:97:60:
58:03:82:7f:92:7f:15:6c:fb:b8:08:3c:4d:d8:a3:
e2:48:6b:33:28:4c:ac:5d:f6:78:06:99:e2:7c:04:
d0:da:76:d1:3c:18:60:54:94:55:3c:8d:44:46:ea:
6f:ab:85:5f:d3:83:6f:64:a8:69:01:9f:c6:9a:84:
29:9c:1b:f6:2e:a2:f7:6c:6b:b5:15:9d:4d:81:97:
fb:a7:35:9d:a3:87:17:51:71:0f:86:f4:e2:44:47:
43:cb:b2:7d:54:23:3a:6b:ba:34:a5:a9:5b:8a:38:
8c:c8:74:e8:8c:a4:16:df:c5:af:cd:4b:5f:dd:45:
28:eb:c8:e7:3d:ff:f7:17:d2:38:a8:10:3d:e0:e3:
85:be:dd:18:80:e4:1f:dc:5f:09:eb:c3:3c:51:75:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0A:1A:70:C4:FA:BB:A8:D6:F2:E2:C8:DC:05:E2:40:33:38:2B:AE
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/2woacMT6u6jW8uLI3AXiQDM4K64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
25:dc:92:e0:6d:d5:57:79:ed:31:cf:f2:74:15:a8:3b:67:60:
47:2c:b7:c4:a5:78:d3:2e:9d:07:69:f4:62:a6:08:8d:f7:a2:
70:23:a2:13:f7:e6:8a:69:48:cc:a3:50:4c:9d:8f:2d:3d:16:
13:25:d2:26:ee:ce:f5:32:b6:59:a9:f5:69:72:69:98:ea:64:
b3:5e:53:4c:5d:38:fe:19:11:04:cb:f4:3e:79:cf:10:96:f1:
1c:dd:24:1d:cb:5f:53:b5:0e:37:c8:d0:9a:ca:7f:13:e8:32:
9d:81:0c:72:fc:f1:91:c4:90:58:a1:d7:79:f2:ab:21:64:3a:
a9:e9:53:37:5d:ef:35:11:b3:f7:13:1e:26:8f:ea:b0:cd:58:
19:c8:31:84:b7:6a:f8:8f:7b:b3:f2:4b:97:21:c9:cf:57:a2:
86:39:03:d5:bd:65:ee:77:13:9f:83:e7:39:a2:16:77:76:25:
1a:91:8e:ba:fd:10:28:7c:07:f2:ec:2b:d0:a1:12:2d:aa:18:
61:dd:cc:ff:d6:73:b1:92:72:09:f4:9c:c4:ef:83:62:b9:51:
dc:2f:54:36:e6:36:6c:ba:12:bb:ec:17:0c:95:63:96:94:3c:
71:29:69:35:86:75:18:c6:b1:9b:48:73:26:d6:d1:30:1e:19:
03:52:d2:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xEoPqze3bwUDD8z64jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjUwMTAxMjE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjBhMWE3MGM0ZmFiYmE4ZDZmMmUyYzhkYzA1ZTI0MDMzMzgyYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm6MVZe7SdqAT36rEH/6Nd/tXG+o
+pOVPGQuMMFtAIyL6Pn9hr3MNjojjEmkHCK5RpmB7wy/KOqQhu3qC12G3fIcl46s
LuXeFlFrLm+/nARkXQ6zCfxhNHgNmkR0mu9K3z/HKTz2l2BYA4J/kn8VbPu4CDxN
2KPiSGszKEysXfZ4BpnifATQ2nbRPBhgVJRVPI1ERupvq4Vf04NvZKhpAZ/GmoQp
nBv2LqL3bGu1FZ1NgZf7pzWdo4cXUXEPhvTiREdDy7J9VCM6a7o0palbijiMyHTo
jKQW38WvzUtf3UUo68jnPf/3F9I4qBA94OOFvt0YgOQf3F8J68M8UXVuHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsKGnDE+ruo1vLiyNwF4kAzOCuuMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvMndvYWNNVDZ1NmpXOHVMSTNBWGlRRE00SzY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCuMA0G
CSqGSIb3DQEBCwUAA4IBAQAl3JLgbdVXee0xz/J0Fag7Z2BHLLfEpXjTLp0HafRi
pgiN96JwI6IT9+aKaUjMo1BMnY8tPRYTJdIm7s71MrZZqfVpcmmY6mSzXlNMXTj+
GREEy/Q+ec8QlvEc3SQdy19TtQ43yNCayn8T6DKdgQxy/PGRxJBYodd58qshZDqp
6VM3Xe81EbP3Ex4mj+qwzVgZyDGEt2r4j3uz8kuXIcnPV6KGOQPVvWXudxOfg+c5
ohZ3diUakY66/RAofAfy7CvQoRItqhhh3cz/1nOxknIJ9JzE74NiuVHcL1Q25jZs
uhK77BcMlWOWlDxxKWk1hnUYxrGbSHMm1tEwHhkDUtKf
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:03 2025 by rpki-client