Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/e2r8ocbvZ5b3m5xalntmDyUpc4I.roa
File: e2r8ocbvZ5b3m5xalntmDyUpc4I.roa (raw, json)
Hash identifier: 50QP2PRf625FwRFAmwamUMZVorgFwCgxbn6nsBfLHdg=
Subject key identifier: 7B:6A:FC:A1:C6:EF:67:96:F7:9B:9C:5A:96:7B:66:0F:25:29:73:82
Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial: 018CC348D76E1A6CE962F23700544899D762
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/e2r8ocbvZ5b3m5xalntmDyUpc4I.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 158.110.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d7:6e:1a:6c:e9:62:f2:37:00:54:48:99:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6afca1c6ef6796f79b9c5a967b660f25297382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:62:eb:8e:7a:30:23:34:20:6a:9a:d2:bf:
df:52:42:4b:c1:e9:b1:ec:23:a1:d8:3e:f9:c8:8e:
dc:73:68:a8:77:b5:17:aa:f7:7a:de:97:ef:9a:44:
d1:cb:f5:a1:3c:a9:1b:67:d7:35:f5:67:29:b8:20:
18:34:42:91:fa:80:f2:f7:97:a2:97:de:20:f7:f2:
f1:8f:96:d5:1e:26:27:41:c5:06:4e:74:ac:55:4d:
3e:79:97:cd:69:ff:06:c8:f7:33:62:2a:48:7f:3b:
55:04:c3:c8:a4:f8:1f:1e:12:84:b8:b8:2a:95:44:
d9:07:0e:2c:35:33:bb:09:5a:36:bc:e3:aa:a8:20:
f4:37:c9:16:84:5d:0e:46:be:89:c2:1e:bf:b5:2d:
a3:77:30:b7:5a:71:ac:d3:a7:e8:fd:1b:44:94:4b:
d8:78:dd:90:e3:23:2c:7f:86:fb:7c:d7:e2:c0:8e:
08:e7:45:04:1a:bb:cb:49:bd:34:3a:2e:9f:6c:52:
ab:ff:92:cf:75:bd:ee:f3:ad:df:3b:70:34:44:e9:
e9:08:ca:63:02:6e:1e:4a:5d:ee:11:ce:39:83:41:
df:a5:c8:1c:77:61:61:a2:e6:04:19:c4:0b:ce:72:
0b:cf:98:ce:6c:bb:a2:67:79:4e:a8:6a:b9:94:c0:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6A:FC:A1:C6:EF:67:96:F7:9B:9C:5A:96:7B:66:0F:25:29:73:82
X509v3 Authority Key Identifier:
keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/e2r8ocbvZ5b3m5xalntmDyUpc4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:84:45:7f:3a:55:52:26:2f:26:ef:ac:de:e6:46:92:2c:27:
e4:66:54:95:b3:a3:96:e1:3c:e0:83:b5:02:db:a5:53:fd:d6:
13:1e:7f:a5:c1:68:ee:05:6f:f0:2f:44:ac:2e:4c:ad:e2:1e:
01:4b:03:a4:a0:49:ab:75:70:1f:77:89:a7:81:ba:da:9b:d6:
67:30:a2:c9:95:7f:08:73:c0:79:12:62:59:29:4d:db:50:7f:
c1:8b:3b:cd:08:3a:b0:ae:3a:cb:7d:c7:6a:8d:65:4e:11:9f:
14:f0:36:18:bb:d5:6b:6e:19:29:7c:d9:58:c5:21:fb:99:d8:
44:f8:87:3d:a1:26:f1:06:ca:00:e5:51:92:7e:32:cd:c5:7f:
b9:5e:31:fe:21:28:9b:31:b7:68:82:69:92:ab:90:12:5c:1a:
a4:92:6d:77:80:3c:c7:95:a7:54:ed:bf:ae:08:68:c3:a6:5d:
69:e1:84:57:9a:e6:aa:b2:30:a1:6b:67:c4:25:c6:1b:65:19:
79:48:5b:51:c5:cf:9e:ef:70:74:5a:fd:5e:3e:ad:26:1b:04:
a7:bf:79:71:ef:05:8a:63:5d:3b:3a:62:d9:ed:ef:a6:2f:ca:
97:8c:a4:16:82:ab:d4:74:72:7b:01:1f:b4:a7:f3:51:cc:63:
f2:84:a8:50
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzDSNduGmzpYvI3AFRImddiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1
NWVkODMwHhcNMjQwMTAxMDQyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjZhZmNhMWM2ZWY2Nzk2Zjc5YjljNWE5NjdiNjYwZjI1Mjk3MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Ji6456MCM0IGqa0r/fUkJLwemx
7COh2D75yI7cc2iod7UXqvd63pfvmkTRy/WhPKkbZ9c19WcpuCAYNEKR+oDy95ei
l94g9/Lxj5bVHiYnQcUGTnSsVU0+eZfNaf8GyPczYipIfztVBMPIpPgfHhKEuLgq
lUTZBw4sNTO7CVo2vOOqqCD0N8kWhF0ORr6Jwh6/tS2jdzC3WnGs06fo/RtElEvY
eN2Q4yMsf4b7fNfiwI4I50UEGrvLSb00Oi6fbFKr/5LPdb3u863fO3A0ROnpCMpj
Am4eSl3uEc45g0Hfpcgcd2FhouYEGcQLznILz5jObLuiZ3lOqGq5lMC+yQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHtq/KHG72eW95ucWpZ7Zg8lKXOCMB8GA1UdIwQY
MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt
ZWZhOTM5MWY3ZDllLzEvZTJyOG9jYnZaNWIzbTV4YWxudG1EeVVwYzRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll
LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnm4wDQYJ
KoZIhvcNAQELBQADggEBAIGERX86VVImLybvrN7mRpIsJ+RmVJWzo5bhPOCDtQLb
pVP91hMef6XBaO4Fb/AvRKwuTK3iHgFLA6SgSat1cB93iaeButqb1mcwosmVfwhz
wHkSYlkpTdtQf8GLO80IOrCuOst9x2qNZU4RnxTwNhi71WtuGSl82VjFIfuZ2ET4
hz2hJvEGygDlUZJ+Ms3Ff7leMf4hKJsxt2iCaZKrkBJcGqSSbXeAPMeVp1Ttv64I
aMOmXWnhhFea5qqyMKFrZ8QlxhtlGXlIW1HFz57vcHRa/V4+rSYbBKe/eXHvBYpj
XTs6Ytnt76YvypeMpBaCq9R0cnsBH7Sn81HMY/KEqFA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:33:00 2024 by rpki-client on console-fra.rpki-client.org