Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9j6hInOmVn84j79m4EjScku39aI.roa
File: 9j6hInOmVn84j79m4EjScku39aI.roa (raw, json)
Hash identifier: akq0zLL2ApXS7jv+4OdwECbrLPzLt1lLVgDJR3jGuYo=
Subject key identifier: F6:3E:A1:22:73:A6:56:7F:38:8F:BF:66:E0:48:D2:72:4B:B7:F5:A2
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018CC64B1F368BDE40A33323165542CBBCB0
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9j6hInOmVn84j79m4EjScku39aI.roa
Signing time: Mon 01 Jan 2024 18:31:01 +0000
ROA not before: Mon 01 Jan 2024 18:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216259
IP address blocks: 46.32.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1f:36:8b:de:40:a3:33:23:16:55:42:cb:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 18:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63ea12273a6567f388fbf66e048d2724bb7f5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:4a:9a:13:8b:1e:01:88:a5:5f:32:6e:fb:
f2:96:55:64:68:ed:fd:b8:bf:f2:0e:bd:d0:3d:50:
b2:64:ba:26:17:74:82:52:3b:da:4b:45:31:bb:3e:
15:66:12:b8:ab:a4:bc:9d:d5:b9:e2:54:7b:35:d0:
c7:f2:71:4a:57:85:d0:e3:3c:c7:60:2d:42:35:47:
6e:52:8f:90:50:d3:54:09:9e:1f:2f:05:99:a6:e8:
70:c2:8e:17:d1:ed:38:9c:68:ae:e6:1e:5f:31:ef:
6f:2a:b7:d1:92:bb:76:82:20:8e:88:0c:8f:a8:a4:
f8:df:b5:6a:da:4c:60:1a:43:34:38:94:ff:67:6a:
27:48:bf:ca:66:73:ee:ad:ea:eb:84:7c:c3:25:34:
da:4e:26:db:3a:dc:90:5d:f0:e3:a3:48:83:00:dc:
72:19:8f:a4:dc:49:bd:6b:0e:eb:d0:b2:7e:fc:c0:
14:a8:2c:e2:0b:fc:8c:43:73:3d:b6:ee:2b:be:8b:
56:00:01:6e:6d:82:1b:0f:c7:0a:01:9b:bf:98:42:
85:f4:6c:be:bc:c9:a5:c4:8f:e7:79:be:2d:45:98:
41:d9:03:c9:0a:b3:c4:91:ac:1d:2a:bb:b0:8d:b0:
f4:6d:2e:bd:5f:9b:a9:99:5b:22:99:a0:73:ce:ed:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3E:A1:22:73:A6:56:7F:38:8F:BF:66:E0:48:D2:72:4B:B7:F5:A2
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9j6hInOmVn84j79m4EjScku39aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f6:f8:29:14:ed:2d:a1:72:1a:5b:d9:1f:df:41:42:b2:2a:
9e:30:60:d8:f7:95:75:80:20:51:60:64:77:85:c0:84:89:a9:
24:49:9f:b4:46:b1:1a:e5:c4:e0:31:dc:5d:8b:35:31:64:e8:
4d:ce:fa:47:e1:ba:0b:a6:45:53:ed:ef:30:07:0a:65:ac:e3:
0d:d1:a6:9d:50:a8:94:01:fc:af:ac:11:96:f2:71:44:61:dd:
51:73:28:23:bf:a6:a0:92:ca:44:8b:8e:b6:19:9c:a1:46:8c:
42:ed:80:99:a6:25:07:5b:83:a6:44:58:64:12:45:79:07:5d:
03:03:41:ab:5e:78:e1:4e:9b:f0:b3:d2:4a:71:ec:02:55:c0:
6c:f0:03:19:41:26:84:4d:34:9d:0c:bf:ea:c1:4f:11:ce:d9:
b1:ee:6d:41:a6:ea:d2:44:d0:7f:36:30:b7:8f:16:96:ed:35:
55:6d:a7:f5:7e:14:79:33:bf:94:6c:92:8a:a6:69:d4:7e:50:
95:49:a0:dd:56:20:73:e7:99:e6:cf:7a:a4:ad:eb:40:f8:e9:
6c:5a:cb:07:a0:b5:7d:54:44:0f:92:d4:a2:0a:a3:a9:71:74:
b4:37:e6:0f:7f:3b:91:45:88:d1:58:c6:18:99:50:e8:a0:86:
a2:cd:0c:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSx82i95AozMjFlVCy7ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjQwMTAxMTgzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNlYTEyMjczYTY1NjdmMzg4ZmJmNjZlMDQ4ZDI3MjRiYjdmNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwZKmhOLHgGIpV8ybvvyllVkaO39
uL/yDr3QPVCyZLomF3SCUjvaS0Uxuz4VZhK4q6S8ndW54lR7NdDH8nFKV4XQ4zzH
YC1CNUduUo+QUNNUCZ4fLwWZpuhwwo4X0e04nGiu5h5fMe9vKrfRkrt2giCOiAyP
qKT437Vq2kxgGkM0OJT/Z2onSL/KZnPurerrhHzDJTTaTibbOtyQXfDjo0iDANxy
GY+k3Em9aw7r0LJ+/MAUqCziC/yMQ3M9tu4rvotWAAFubYIbD8cKAZu/mEKF9Gy+
vMmlxI/neb4tRZhB2QPJCrPEkawdKruwjbD0bS69X5upmVsimaBzzu0E/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPY+oSJzplZ/OI+/ZuBI0nJLt/WiMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvOWo2aEluT21Wbjg0ajc5bTRFalNja3UzOWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCvMA0G
CSqGSIb3DQEBCwUAA4IBAQAO9vgpFO0toXIaW9kf30FCsiqeMGDY95V1gCBRYGR3
hcCEiakkSZ+0RrEa5cTgMdxdizUxZOhNzvpH4boLpkVT7e8wBwplrOMN0aadUKiU
AfyvrBGW8nFEYd1Rcygjv6agkspEi462GZyhRoxC7YCZpiUHW4OmRFhkEkV5B10D
A0GrXnjhTpvws9JKcewCVcBs8AMZQSaETTSdDL/qwU8Rztmx7m1BpurSRNB/NjC3
jxaW7TVVbaf1fhR5M7+UbJKKpmnUflCVSaDdViBz55nmz3qkretA+OlsWssHoLV9
VEQPktSiCqOpcXS0N+YPfzuRRYjRWMYYmVDooIaizQxE
-----END CERTIFICATE-----
Generated at Fri May 24 07:02:10 2024 by rpki-client on console-ams.rpki-client.org