Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aq8RknCz8tuNl2oo9TNw9vjLLdI.roa
File: aq8RknCz8tuNl2oo9TNw9vjLLdI.roa (raw, json)
Hash identifier: 1N+6s+3nVTo93QDGxDtnKpkJXr3TdA8/bnHGi6yo3wE=
Subject key identifier: 6A:AF:11:92:70:B3:F2:DB:8D:97:6A:28:F5:33:70:F6:F8:CB:2D:D2
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018FAAE4A6479BD91B25954880BCE33FC9A7
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aq8RknCz8tuNl2oo9TNw9vjLLdI.roa
Signing time: Fri 24 May 2024 13:57:42 +0000
ROA not before: Fri 24 May 2024 13:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215421
IP address blocks: 46.36.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:e4:a6:47:9b:d9:1b:25:95:48:80:bc:e3:3f:c9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: May 24 13:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6aaf119270b3f2db8d976a28f53370f6f8cb2dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:9c:d3:f2:0a:7f:e8:43:3a:5d:70:c1:fd:
8e:4d:13:4a:f4:2c:7d:fe:6b:20:fd:e7:49:f6:37:
a5:e8:59:9f:c9:f3:65:49:10:e8:18:65:c9:00:69:
20:62:d0:0d:c7:30:ea:83:66:17:9f:5e:ad:f8:48:
89:f6:d7:1f:46:76:6d:bb:bc:59:a1:f6:7c:68:c8:
d8:b6:9e:11:2b:8b:88:cd:23:33:07:11:bf:ad:87:
a7:1e:74:77:a5:c2:67:70:7c:6c:25:0c:da:10:a3:
b5:1c:57:f8:9d:6f:64:e0:4c:d8:7d:36:01:2d:f3:
32:20:a7:9b:1e:25:71:76:90:a0:78:84:8f:e0:c0:
99:72:a3:bd:48:78:ea:da:68:77:9a:55:de:98:e9:
c6:4f:ac:de:60:14:57:de:40:3d:67:b4:2c:a0:d7:
52:66:53:90:36:95:11:d3:8f:ba:5a:b8:c6:ad:b7:
2a:c8:34:51:cd:82:b6:f1:ae:05:d6:b9:ce:52:de:
7a:42:99:46:5a:76:66:6c:6a:79:f4:62:9d:d2:6a:
26:c0:cf:78:d5:ae:70:d3:cb:97:a0:87:fb:c1:2c:
c2:70:72:5b:7d:ed:20:74:a9:0c:be:d3:5a:50:34:
62:fd:dd:bc:df:4b:27:09:69:ad:3f:0e:1b:01:dd:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:11:92:70:B3:F2:DB:8D:97:6A:28:F5:33:70:F6:F8:CB:2D:D2
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/aq8RknCz8tuNl2oo9TNw9vjLLdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:10:f9:bb:96:25:97:6b:40:bc:e2:ba:b2:0c:11:35:ce:af:
47:50:22:f6:e0:f3:8a:2b:14:eb:fa:f8:b7:3c:5b:76:65:49:
2c:1c:7d:fe:75:fc:46:ec:97:30:36:5c:bf:69:8e:f5:8f:24:
64:11:8c:f8:1c:60:77:02:a3:aa:71:04:0e:e6:ff:ea:e5:91:
d7:5b:4a:d2:41:1e:f5:6f:eb:c9:74:a9:d1:74:75:10:9e:36:
1b:9f:3f:dc:4e:e5:45:8a:c4:a6:e1:79:da:2e:3d:87:77:8e:
3c:6d:95:14:21:8b:68:d1:3f:ab:0b:8e:59:74:b5:f8:e3:3a:
a0:61:64:35:cc:55:aa:4f:9f:f6:75:ea:ae:76:82:02:d3:29:
c0:e1:b7:ac:0c:b3:4e:3e:0f:e4:32:27:5e:60:79:5e:bf:cc:
da:ab:d0:2d:73:be:16:fc:b3:31:fa:63:c9:4a:b0:e9:07:43:
57:4e:ad:0a:32:18:62:b5:5d:81:9d:17:a1:dd:84:b4:4e:8e:
16:8b:39:44:6b:38:44:f8:ff:06:ce:c7:4b:ae:49:fd:64:a0:
41:c5:a0:4f:5e:cc:ef:d9:75:cb:f6:56:12:7a:a4:2d:30:60:
e7:2f:84:74:3c:3a:1e:23:0a:e7:df:6f:8a:b6:a9:a3:03:0b:
4b:a1:e8:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+q5KZHm9kbJZVIgLzjP8mnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjQwNTI0MTM1NzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWFmMTE5MjcwYjNmMmRiOGQ5NzZhMjhmNTMzNzBmNmY4Y2IyZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPSc0/IKf+hDOl1wwf2OTRNK9Cx9
/msg/edJ9jel6FmfyfNlSRDoGGXJAGkgYtANxzDqg2YXn16t+EiJ9tcfRnZtu7xZ
ofZ8aMjYtp4RK4uIzSMzBxG/rYenHnR3pcJncHxsJQzaEKO1HFf4nW9k4EzYfTYB
LfMyIKebHiVxdpCgeISP4MCZcqO9SHjq2mh3mlXemOnGT6zeYBRX3kA9Z7QsoNdS
ZlOQNpUR04+6WrjGrbcqyDRRzYK28a4F1rnOUt56QplGWnZmbGp59GKd0momwM94
1a5w08uXoIf7wSzCcHJbfe0gdKkMvtNaUDRi/d2830snCWmtPw4bAd21DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqvEZJws/LbjZdqKPUzcPb4yy3SMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvYXE4UmtuQ3o4dHVObDJvbzlUTnc5dmpMTGRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiR6MA0G
CSqGSIb3DQEBCwUAA4IBAQAPEPm7liWXa0C84rqyDBE1zq9HUCL24POKKxTr+vi3
PFt2ZUksHH3+dfxG7JcwNly/aY71jyRkEYz4HGB3AqOqcQQO5v/q5ZHXW0rSQR71
b+vJdKnRdHUQnjYbnz/cTuVFisSm4XnaLj2Hd448bZUUIYto0T+rC45ZdLX44zqg
YWQ1zFWqT5/2dequdoIC0ynA4besDLNOPg/kMideYHlev8zaq9Atc74W/LMx+mPJ
SrDpB0NXTq0KMhhitV2BnReh3YS0To4WizlEazhE+P8GzsdLrkn9ZKBBxaBPXszv
2XXL9lYSeqQtMGDnL4R0PDoeIwrn32+KtqmjAwtLoei9
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:34 2024 by rpki-client on console-ams.rpki-client.org