Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/wF6Dq-zYX7GcJjSZl0aDLp-g24Q.roa
File: wF6Dq-zYX7GcJjSZl0aDLp-g24Q.roa (raw, json)
Hash identifier: 12o8jgRhmAADwmtSR+CKm1prUStR2luZJAJFONmi00M=
Subject key identifier: C0:5E:83:AB:EC:D8:5F:B1:9C:26:34:99:97:46:83:2E:9F:A0:DB:84
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 018CC86EF3884A035322A3F2871284425865
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/wF6Dq-zYX7GcJjSZl0aDLp-g24Q.roa
Signing time: Tue 02 Jan 2024 04:29:23 +0000
ROA not before: Tue 02 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216332
IP address blocks: 94.142.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f3:88:4a:03:53:22:a3:f2:87:12:84:42:58:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Jan 2 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c05e83abecd85fb19c2634999746832e9fa0db84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:7f:32:a1:2e:4f:76:62:2b:e4:84:bc:dc:
a8:e1:fc:d9:f4:14:7c:7f:ed:9d:fd:ac:81:13:c5:
f6:a3:38:25:02:ad:cd:69:84:b6:99:0f:64:ff:ab:
be:9a:38:ad:cb:c1:5f:8c:ce:84:78:31:a0:ae:c2:
29:db:f7:ec:63:33:5e:2f:bc:8a:1e:c3:96:7a:13:
86:cb:db:e7:b7:c1:e4:fa:34:09:00:d8:d5:f0:0f:
18:98:22:b0:46:bd:e8:74:8e:ff:b3:38:5c:b9:d0:
75:b1:d9:b4:d0:03:bd:ec:2b:e0:e4:e5:f8:cd:80:
3c:cd:f4:fb:bc:db:36:fa:7d:c6:f0:46:ca:39:04:
a6:87:01:62:7b:55:98:79:bf:d6:b2:e5:83:39:15:
49:ac:70:53:f5:a7:49:30:dd:03:c1:ce:b2:f5:3c:
11:a6:98:09:59:70:e7:a3:1c:c2:ca:ae:b1:77:ba:
ff:17:de:94:9c:77:92:e7:56:3b:b2:4c:40:69:8b:
73:f6:08:f9:54:e1:c6:e1:99:5b:4e:63:02:85:05:
68:29:63:e3:9e:cb:e7:36:d9:0c:bc:c1:09:8f:cf:
57:48:e6:b1:ec:7d:24:47:43:f4:48:7b:64:fc:e9:
83:a9:f7:7a:b2:eb:ff:82:17:5e:ef:8d:0c:8b:d1:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:83:AB:EC:D8:5F:B1:9C:26:34:99:97:46:83:2E:9F:A0:DB:84
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/wF6Dq-zYX7GcJjSZl0aDLp-g24Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.250.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cb:93:53:c7:05:b5:c3:fd:93:06:d0:61:33:6c:a0:37:57:
56:34:2e:87:90:89:4e:1a:b4:34:4d:e1:11:9d:ea:40:49:18:
32:b2:43:b1:25:4c:c2:7d:7e:b1:60:a1:00:ba:28:21:22:2e:
6e:1d:24:b5:a7:ed:52:44:6d:19:15:f7:a2:f2:7d:83:1a:89:
5c:e7:ab:12:60:df:cd:f7:25:70:fb:fc:95:3d:a4:51:61:af:
46:b2:0b:3c:cb:fe:01:ab:08:b1:9e:62:e2:f5:fe:3a:e6:f6:
80:d5:2b:fc:57:45:c2:ef:0b:b0:b8:ce:95:fc:78:de:7e:0e:
04:fb:3a:4c:0d:6e:82:63:85:57:37:ce:94:84:9b:12:69:2e:
4b:8a:95:ec:56:df:75:8f:9c:ce:7d:1d:8b:2f:63:ca:b3:ab:
a6:37:1d:c9:26:c8:03:d8:3b:89:e8:a1:37:c0:cf:81:87:3b:
cb:27:ab:38:c6:d2:ae:ac:76:5a:cb:d7:6a:94:9d:23:ee:bf:
67:53:fb:f4:64:eb:44:eb:8e:52:2a:9b:2f:85:f0:2f:c0:e3:
b9:21:ca:83:37:e2:e8:1b:b5:38:41:8b:0d:6b:cd:1d:c2:bd:
d5:35:7a:34:e1:28:c7:66:05:c1:a8:b5:9d:38:04:3b:4b:04:
24:4c:0b:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbvOISgNTIqPyhxKEQlhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OWYyYjY5ZjRhOTVhNTIxZTE4ZmIzM2U2NzkzZjQ2N2Uw
MzFiYzEwHhcNMjQwMTAyMDQyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDVlODNhYmVjZDg1ZmIxOWMyNjM0OTk5NzQ2ODMyZTlmYTBkYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Z/MqEuT3ZiK+SEvNyo4fzZ9BR8
f+2d/ayBE8X2ozglAq3NaYS2mQ9k/6u+mjity8FfjM6EeDGgrsIp2/fsYzNeL7yK
HsOWehOGy9vnt8Hk+jQJANjV8A8YmCKwRr3odI7/szhcudB1sdm00AO97Cvg5OX4
zYA8zfT7vNs2+n3G8EbKOQSmhwFie1WYeb/WsuWDORVJrHBT9adJMN0Dwc6y9TwR
ppgJWXDnoxzCyq6xd7r/F96UnHeS51Y7skxAaYtz9gj5VOHG4ZlbTmMChQVoKWPj
nsvnNtkMvMEJj89XSOax7H0kR0P0SHtk/OmDqfd6suv/ghde740Mi9EU6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBeg6vs2F+xnCY0mZdGgy6foNuEMB8GA1UdIwQY
MBaAFOafK2n0qVpSHhj7M+Z5P0Z+AxvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXA4cmFmU3BXbEllR1BzejVua19SbjRERzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zN2VhYjAtN2Y1My00YjYyLWI1ZDQt
NzgwMDZlMDc4MTcxLzEvd0Y2RHEtellYN0djSmpTWmwwYURMcC1nMjRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zN2VhYjAtN2Y1My00YjYyLWI1ZDQtNzgwMDZlMDc4MTcx
LzEvNXA4cmFmU3BXbEllR1BzejVua19SbjRERzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo76MA0G
CSqGSIb3DQEBCwUAA4IBAQBQy5NTxwW1w/2TBtBhM2ygN1dWNC6HkIlOGrQ0TeER
nepASRgyskOxJUzCfX6xYKEAuighIi5uHSS1p+1SRG0ZFfei8n2DGolc56sSYN/N
9yVw+/yVPaRRYa9Gsgs8y/4BqwixnmLi9f465vaA1Sv8V0XC7wuwuM6V/Hjefg4E
+zpMDW6CY4VXN86UhJsSaS5LipXsVt91j5zOfR2LL2PKs6umNx3JJsgD2DuJ6KE3
wM+BhzvLJ6s4xtKurHZay9dqlJ0j7r9nU/v0ZOtE645SKpsvhfAvwOO5IcqDN+Lo
G7U4QYsNa80dwr3VNXo04SjHZgXBqLWdOAQ7SwQkTAt2
-----END CERTIFICATE-----
Generated at Sat May 25 14:17:28 2024 by rpki-client on console-ams.rpki-client.org