Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa
File: A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa (raw, json)
Hash identifier: O1sqUiozPZ90OSxOhoNFn5pm9S5qD1p2YYN0PAWc3yM=
Subject key identifier: 03:B4:D7:81:BE:30:BA:14:1A:01:24:1A:46:38:FE:07:E0:A0:B3:6C
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 018CC9B2A9025F7157A7625BE0AE65A5A2B0
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa
Signing time: Tue 02 Jan 2024 10:22:58 +0000
ROA not before: Tue 02 Jan 2024 10:22:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215966
IP address blocks: 212.7.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b2:a9:02:5f:71:57:a7:62:5b:e0:ae:65:a5:a2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jan 2 10:22:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03b4d781be30ba141a01241a4638fe07e0a0b36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:8d:df:3d:c4:7f:e1:7a:5f:56:af:d6:62:
b5:71:2a:97:a3:15:4f:3a:0d:a4:90:ba:af:95:61:
24:51:87:a2:50:5f:4e:2b:96:96:de:2d:c1:9b:ac:
5a:6e:f3:a0:f6:50:37:3a:46:a5:9d:d8:b9:31:4d:
03:f8:c4:f2:1f:ab:50:d2:70:e3:5e:1f:f9:dd:87:
ad:36:71:01:3b:25:a2:90:5a:8b:f5:f1:0e:cc:16:
77:ba:25:b0:86:e4:cb:22:8e:e7:b4:92:37:ab:d4:
01:4c:81:ce:a0:45:6b:a0:c1:33:d1:99:fc:e4:a1:
0c:61:cc:b2:a4:18:f5:d3:8f:76:a2:5e:e9:56:7f:
43:c0:0f:d7:9d:31:81:ad:68:c1:13:ab:19:77:da:
cf:36:5b:31:d2:ca:f8:12:30:d5:03:3b:06:e7:7b:
3a:41:a1:aa:c9:c5:78:0b:5f:b9:c1:81:07:53:af:
c2:6f:13:91:cb:4b:98:63:90:71:0c:7b:03:da:2d:
5b:d1:15:6d:04:20:35:55:72:74:bb:ee:6a:a6:db:
af:db:a4:a0:d2:81:94:f5:e5:cd:d5:65:62:56:3a:
17:aa:2f:99:bd:1f:11:79:6b:b3:20:0d:1e:30:c7:
01:f3:05:80:26:ae:20:31:f4:44:e0:36:4e:31:9c:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:D7:81:BE:30:BA:14:1A:01:24:1A:46:38:FE:07:E0:A0:B3:6C
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/A7TXgb4wuhQaASQaRjj-B-Cgs2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.223.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d2:39:52:60:0d:5c:84:c7:4a:d1:90:be:3b:db:1a:89:8b:
47:54:39:2c:53:31:85:0a:65:da:e7:b3:27:93:1c:18:21:4d:
8a:45:1c:09:e2:58:4c:b9:19:9a:fa:43:87:46:75:0e:44:b2:
72:66:2a:4a:5d:21:03:c5:11:13:30:c1:1d:29:88:41:db:a7:
3e:c4:0d:28:ed:a0:77:97:97:a5:1f:4d:e5:68:4e:20:0b:ac:
b8:9f:c5:54:a1:5a:1e:7b:a9:5f:1c:24:91:ed:cc:81:34:6b:
67:14:a2:24:fe:6b:e4:5a:71:ab:45:0a:8b:68:4b:3b:89:03:
e9:18:2b:86:5e:0f:4d:46:5f:55:77:6b:94:7a:85:bc:21:dc:
46:f1:79:c3:9f:93:78:33:a6:3d:b7:2b:98:51:f4:f9:20:6e:
a0:16:79:77:63:06:f8:c7:13:a4:fe:2a:f8:84:76:82:50:46:
d7:c2:a9:bc:da:5a:3a:80:5f:ae:a5:d3:bc:dd:33:fe:cf:63:
61:ea:6a:ec:aa:e0:67:03:24:3b:32:c1:34:1b:66:d4:fc:39:
53:a9:fa:ce:10:78:24:a3:4c:01:3f:ec:45:f5:8f:3c:e5:cd:
96:42:dd:09:68:83:58:a4:f8:77:d7:96:b9:bf:3c:93:cc:75:
6d:a9:e6:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJsqkCX3FXp2Jb4K5lpaKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmUzYTkxMjYzZTJlODMxOWMyYTY3OGU2Mjk4NTFkMDll
NzdmMGQwHhcNMjQwMTAyMTAyMjU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2I0ZDc4MWJlMzBiYTE0MWEwMTI0MWE0NjM4ZmUwN2UwYTBiMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskSN3z3Ef+F6X1av1mK1cSqXoxVP
Og2kkLqvlWEkUYeiUF9OK5aW3i3Bm6xabvOg9lA3Okalndi5MU0D+MTyH6tQ0nDj
Xh/53YetNnEBOyWikFqL9fEOzBZ3uiWwhuTLIo7ntJI3q9QBTIHOoEVroMEz0Zn8
5KEMYcyypBj10492ol7pVn9DwA/XnTGBrWjBE6sZd9rPNlsx0sr4EjDVAzsG53s6
QaGqycV4C1+5wYEHU6/CbxORy0uYY5BxDHsD2i1b0RVtBCA1VXJ0u+5qptuv26Sg
0oGU9eXN1WViVjoXqi+ZvR8ReWuzIA0eMMcB8wWAJq4gMfRE4DZOMZyALwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAO014G+MLoUGgEkGkY4/gfgoLNsMB8GA1UdIwQY
MBaAFDb+OpEmPi6DGcKmeOYphR0J538NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYt
ZmEzZTA5MDFmMjQwLzEvQTdUWGdiNHd1aFFhQVNRYVJqai1CLUNnczJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lOTZlZjQtNGY0NS00N2MwLWJlYmYtZmEzZTA5MDFmMjQw
LzEvTnY0NmtTWS1Mb01ad3FaNDVpbUZIUW5uZncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AffMA0G
CSqGSIb3DQEBCwUAA4IBAQB00jlSYA1chMdK0ZC+O9saiYtHVDksUzGFCmXa57Mn
kxwYIU2KRRwJ4lhMuRma+kOHRnUORLJyZipKXSEDxRETMMEdKYhB26c+xA0o7aB3
l5elH03laE4gC6y4n8VUoVoee6lfHCSR7cyBNGtnFKIk/mvkWnGrRQqLaEs7iQPp
GCuGXg9NRl9Vd2uUeoW8IdxG8XnDn5N4M6Y9tyuYUfT5IG6gFnl3Ywb4xxOk/ir4
hHaCUEbXwqm82lo6gF+updO83TP+z2Nh6mrsquBnAyQ7MsE0G2bU/DlTqfrOEHgk
o0wBP+xF9Y885c2WQt0JaINYpPh315a5vzyTzHVtqeY5
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:52:35 2024 by rpki-client on console-fra.rpki-client.org