Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/pSQoWWPdZSTIp6Z6AFeCoIkQKps.roa
File: pSQoWWPdZSTIp6Z6AFeCoIkQKps.roa (raw, json)
Hash identifier: rQK/crddGXti56i3LCMkjQOwsfPXecW6ctigDmxjkKw=
Subject key identifier: A5:24:28:59:63:DD:65:24:C8:A7:A6:7A:00:57:82:A0:89:10:2A:9B
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 018CC6B931F6F931D4E926660526ED1B040D
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/pSQoWWPdZSTIp6Z6AFeCoIkQKps.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209216
IP address blocks: 2.56.76.0/22 maxlen: 22
2a09:d0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:31:f6:f9:31:d4:e9:26:66:05:26:ed:1b:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a524285963dd6524c8a7a67a005782a089102a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:17:c0:10:d4:7f:03:7c:6c:43:f1:2a:18:
36:20:91:f8:79:5a:86:e7:b3:d6:a9:99:94:6b:45:
bd:47:75:13:42:51:34:f9:e8:56:0e:c7:09:81:0d:
4a:07:54:a5:f7:77:0e:60:fe:a7:3f:fa:9b:7a:49:
3f:dd:eb:8e:df:8c:12:34:1d:10:07:fd:38:8b:1e:
02:ae:33:22:32:26:42:3b:64:ba:a8:ba:69:16:f0:
ff:9a:ef:b9:69:c9:1b:8b:9b:83:d9:f2:49:29:62:
9e:97:0e:16:c9:5a:52:bc:dc:04:b5:5b:a3:96:63:
59:50:6a:c2:1c:3e:4f:a6:0e:68:62:f6:37:6b:08:
da:e4:bf:37:ba:d2:15:99:d5:5a:4b:0a:a3:02:8d:
e2:19:cb:9b:fa:65:cf:a2:2b:4a:1a:e3:fd:ea:b7:
76:98:5a:fe:1b:ec:26:14:84:89:43:35:a4:c6:f9:
60:7e:60:28:6c:0b:77:f6:bc:9e:df:bf:a9:62:cf:
ac:96:2a:ae:bf:f9:22:de:fe:50:1c:99:c3:08:97:
19:ac:37:d4:a4:0c:fb:6e:34:36:71:21:0e:03:d4:
67:12:1c:19:64:e4:a0:f1:dd:1a:69:eb:da:c7:25:
d3:7f:06:d0:26:bf:ac:21:c6:9c:67:e6:01:70:21:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:24:28:59:63:DD:65:24:C8:A7:A6:7A:00:57:82:A0:89:10:2A:9B
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/pSQoWWPdZSTIp6Z6AFeCoIkQKps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.76.0/22
IPv6:
2a09:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:4f:95:4f:3f:bb:7a:3d:e0:54:1e:c6:1a:9b:46:47:70:2e:
e4:32:a6:04:e6:69:27:0c:9d:e9:9d:19:ae:a6:c1:b8:17:93:
e3:74:1c:4b:1c:3f:e5:e7:ac:0b:e5:37:31:7f:d3:d7:97:92:
c5:a7:cf:51:6f:c5:5b:27:d9:35:ce:ae:f6:a5:a0:c6:9d:d5:
02:26:86:e0:14:cb:22:9b:00:3f:74:ff:07:5d:c4:6a:83:4e:
8c:fc:86:99:85:88:f6:cd:35:1b:8f:74:96:d5:18:53:5c:fc:
0b:21:d3:47:36:95:24:a2:4e:03:7f:a9:4e:b4:6d:aa:68:44:
d1:09:41:83:96:bc:53:f5:9c:7e:1e:d0:b8:28:72:39:2d:73:
71:f7:a8:d4:ec:89:0e:3f:ab:11:f5:83:da:83:a8:76:ea:bd:
b7:e1:3d:76:30:7c:11:cd:0e:09:b0:82:1a:b3:8e:a4:ff:c1:
c7:93:ef:c2:66:94:a2:b4:53:03:d9:43:07:0e:be:10:c6:a7:
d7:5f:04:0e:38:13:01:9e:10:ac:bf:30:49:b2:8e:83:00:4e:
a6:e6:9a:25:90:9c:64:b9:7f:77:83:e2:eb:bb:aa:70:1f:dc:
9b:41:2b:c3:35:c0:c1:03:da:a9:4b:44:79:4c:70:10:80:5d:
07:d2:ed:53
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGuTH2+THU6SZmBSbtGwQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWU1YTRjOWYzMDQ5ODY4MGU0ZDdiNTlkZGIwOGY4MmJj
NmY0YzcwHhcNMjQwMTAxMjAzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTI0Mjg1OTYzZGQ2NTI0YzhhN2E2N2EwMDU3ODJhMDg5MTAyYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowsXwBDUfwN8bEPxKhg2IJH4eVqG
57PWqZmUa0W9R3UTQlE0+ehWDscJgQ1KB1Sl93cOYP6nP/qbekk/3euO34wSNB0Q
B/04ix4CrjMiMiZCO2S6qLppFvD/mu+5ackbi5uD2fJJKWKelw4WyVpSvNwEtVuj
lmNZUGrCHD5Ppg5oYvY3awja5L83utIVmdVaSwqjAo3iGcub+mXPoitKGuP96rd2
mFr+G+wmFISJQzWkxvlgfmAobAt39rye37+pYs+sliquv/ki3v5QHJnDCJcZrDfU
pAz7bjQ2cSEOA9RnEhwZZOSg8d0aaevaxyXTfwbQJr+sIcacZ+YBcCEiUQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKUkKFlj3WUkyKemegBXgqCJECqbMB8GA1UdIwQY
MBaAFNnuWkyfMEmGgOTXtZ3bCPgrxvTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMt
N2RiOWRmYmM0YWU5LzEvcFNRb1dXUGRaU1RJcDZaNkFGZUNvSWtRS3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80N2E1NGEtNjM3Yy00NDg2LWIxMmMtN2RiOWRmYmM0YWU5
LzEvMmU1YVRKOHdTWWFBNU5lMW5kc0ktQ3ZHOU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCAjhMMA0E
AgACMAcDBQMqCdDAMA0GCSqGSIb3DQEBCwUAA4IBAQCeT5VPP7t6PeBUHsYam0ZH
cC7kMqYE5mknDJ3pnRmupsG4F5PjdBxLHD/l56wL5Tcxf9PXl5LFp89Rb8VbJ9k1
zq72paDGndUCJobgFMsimwA/dP8HXcRqg06M/IaZhYj2zTUbj3SW1RhTXPwLIdNH
NpUkok4Df6lOtG2qaETRCUGDlrxT9Zx+HtC4KHI5LXNx96jU7IkOP6sR9YPag6h2
6r234T12MHwRzQ4JsIIas46k/8HHk+/CZpSitFMD2UMHDr4QxqfXXwQOOBMBnhCs
vzBJso6DAE6m5polkJxkuX93g+Lru6pwH9ybQSvDNcDBA9qpS0R5THAQgF0H0u1T
-----END CERTIFICATE-----
Generated at Wed May 15 17:02:56 2024 by rpki-client on console-ams.rpki-client.org