Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa
File: YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa (raw, json)
Hash identifier: 8I0SGpAqHedSzWDkPjUCH1zMcRg8of85FMjYoHGNCe0=
Subject key identifier: 60:1D:CB:BF:5A:24:C4:3F:5D:3E:B0:5F:F3:07:FE:A9:2A:AE:E5:B7
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0194266BBFD69F55209DAE474A73D4872E64
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bf:d6:9f:55:20:9d:ae:47:4a:73:d4:87:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=601dcbbf5a24c43f5d3eb05ff307fea92aaee5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:7e:18:49:aa:fb:ff:c7:32:d8:75:d3:76:
28:a6:3a:f2:5b:c7:43:97:bb:16:21:1b:7d:dc:d3:
75:35:97:57:3b:16:b7:82:74:d3:33:35:58:9d:f9:
5f:07:94:3f:c4:c4:6a:a6:48:b5:84:74:42:54:b4:
a4:d3:45:0b:00:4e:79:33:fa:27:b9:7f:3f:3a:3b:
cc:0f:cb:a3:64:6e:ec:ed:70:52:a3:5e:75:9a:5d:
00:06:b1:5a:66:71:89:24:ed:96:43:de:79:0a:5c:
82:7f:bb:3d:80:a4:ab:90:ac:4c:ee:d5:86:21:bb:
79:13:2b:00:4f:f7:85:a2:69:c1:a1:78:ff:49:ef:
1f:1d:be:84:d2:f4:33:20:87:af:de:07:95:15:e9:
9d:1e:94:1b:cf:31:92:ed:ad:4d:5e:15:bf:b7:72:
ad:43:8d:81:d0:75:24:4c:64:99:ba:f9:a9:60:0a:
9e:90:7d:34:4f:a9:ee:7f:1b:76:8f:71:92:a4:9d:
29:09:e5:af:10:c3:25:51:f8:a0:d5:02:23:d4:34:
dd:53:b6:58:37:0e:aa:6a:39:54:54:9b:42:b5:f5:
d4:68:d3:97:f7:64:b1:29:14:f4:fb:03:f0:73:76:
6c:33:82:63:d6:fb:9d:8f:91:c3:4c:5a:bb:3d:5e:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1D:CB:BF:5A:24:C4:3F:5D:3E:B0:5F:F3:07:FE:A9:2A:AE:E5:B7
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/YB3Lv1okxD9dPrBf8wf-qSqu5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
63:32:3a:d5:93:f1:f5:4b:e3:4b:a1:52:5e:99:2a:8e:2a:81:
ba:3f:b8:ec:7d:5f:52:37:f5:fe:46:13:86:50:16:f9:d5:54:
a6:4b:7c:2c:b9:56:4a:cb:61:5d:21:72:3e:9b:0f:51:d4:e6:
37:b0:f3:ca:48:fa:f4:50:04:a7:c9:74:be:85:47:64:19:1e:
4f:58:bb:97:82:dc:0e:7c:4a:3c:f2:a5:fd:95:ec:72:0e:fd:
2c:de:d2:8e:b0:4c:b0:26:1b:d0:e3:50:98:44:6a:f0:a4:9f:
00:fb:16:b9:c7:43:f4:8d:e1:9d:55:47:2f:16:96:76:cb:89:
4f:c8:cc:4f:b7:f8:c5:e4:c8:84:0f:b3:f1:ad:7f:c6:ba:b1:
d1:b1:c7:b6:56:6b:ea:63:d8:c5:19:6c:4c:c6:b9:d8:b4:0a:
44:ff:09:31:56:86:57:08:53:f8:e7:15:aa:7a:39:39:d3:ab:
9e:b3:70:a9:0a:a5:2d:4a:36:fe:c0:00:e7:c4:5d:85:81:27:
30:31:00:48:d9:77:ea:8c:22:73:f9:08:b7:57:94:d7:aa:de:
84:20:10:12:15:b3:fa:25:74:ce:9b:22:54:0d:61:fb:97:15:
98:9b:d6:8b:a8:ac:28:4f:3f:b5:0a:cd:2c:40:50:c8:49:72:
27:90:17:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7/Wn1Ugna5HSnPUhy5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk
YjU0MTAwHhcNMjUwMTAyMDk0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDFkY2JiZjVhMjRjNDNmNWQzZWIwNWZmMzA3ZmVhOTJhYWVlNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbh+GEmq+//HMth103YopjryW8dD
l7sWIRt93NN1NZdXOxa3gnTTMzVYnflfB5Q/xMRqpki1hHRCVLSk00ULAE55M/on
uX8/OjvMD8ujZG7s7XBSo151ml0ABrFaZnGJJO2WQ955ClyCf7s9gKSrkKxM7tWG
Ibt5EysAT/eFomnBoXj/Se8fHb6E0vQzIIev3geVFemdHpQbzzGS7a1NXhW/t3Kt
Q42B0HUkTGSZuvmpYAqekH00T6nufxt2j3GSpJ0pCeWvEMMlUfig1QIj1DTdU7ZY
Nw6qajlUVJtCtfXUaNOX92SxKRT0+wPwc3ZsM4Jj1vudj5HDTFq7PV422QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGAdy79aJMQ/XT6wX/MH/qkqruW3MB8GA1UdIwQY
MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt
NDc3M2I2NjY5NzE2LzEvWUIzTHYxb2t4RDlkUHJCZjh3Zi1xU3F1NWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2
LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhL1MA0G
CSqGSIb3DQEBCwUAA4IBAQBjMjrVk/H1S+NLoVJemSqOKoG6P7jsfV9SN/X+RhOG
UBb51VSmS3wsuVZKy2FdIXI+mw9R1OY3sPPKSPr0UASnyXS+hUdkGR5PWLuXgtwO
fEo88qX9lexyDv0s3tKOsEywJhvQ41CYRGrwpJ8A+xa5x0P0jeGdVUcvFpZ2y4lP
yMxPt/jF5MiED7PxrX/GurHRsce2VmvqY9jFGWxMxrnYtApE/wkxVoZXCFP45xWq
ejk506ues3CpCqUtSjb+wADnxF2FgScwMQBI2XfqjCJz+Qi3V5TXqt6EIBASFbP6
JXTOmyJUDWH7lxWYm9aLqKwoTz+1Cs0sQFDISXInkBdz
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:02 2025 by rpki-client