Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/W0odQOAtf480M02akoyyOScXws8.roa
File: W0odQOAtf480M02akoyyOScXws8.roa (raw, json)
Hash identifier: 3QtVfQ1LHw8Ch/IJcN71/y3546Uo70qwR8eFnf8YPhI=
Subject key identifier: 5B:4A:1D:40:E0:2D:7F:8F:34:33:4D:9A:92:8C:B2:39:27:17:C2:CF
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 018CC6B8ED65DCD72197C78B1AC1B4ED243F
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/W0odQOAtf480M02akoyyOScXws8.roa
Signing time: Mon 01 Jan 2024 20:30:57 +0000
ROA not before: Mon 01 Jan 2024 20:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209829
IP address blocks: 37.218.244.0/24 maxlen: 24
37.218.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ed:65:dc:d7:21:97:c7:8b:1a:c1:b4:ed:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jan 1 20:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b4a1d40e02d7f8f34334d9a928cb2392717c2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:8a:51:ed:c3:3d:c1:7d:7f:89:10:b1:ff:
a5:46:f3:be:7e:d6:97:b0:63:c5:0d:25:22:22:50:
5e:85:ee:6e:30:b0:41:33:11:3b:a6:bb:45:42:76:
c9:ad:c7:c2:be:ae:25:50:a1:25:91:c4:05:8d:83:
b6:90:09:e6:51:11:c9:9c:3c:57:b1:99:d4:5b:1f:
47:f6:79:ec:7b:52:18:34:b2:72:d3:18:c3:07:66:
b5:78:f2:b9:b4:10:19:0a:e9:76:01:d3:a3:70:dc:
fa:1e:de:2b:11:4c:59:2d:92:34:b8:27:08:52:02:
43:7d:b5:d1:ce:e0:fb:7e:ec:dc:17:30:42:85:c9:
9a:1b:b2:d3:6e:7e:32:f8:ff:a7:7f:bc:21:63:6c:
32:d6:af:ae:dc:dc:68:38:13:66:16:52:7e:ee:aa:
71:8e:d9:b4:bc:38:01:f7:b9:8e:5a:28:29:ed:97:
64:34:05:e7:05:2a:cc:ba:62:7b:89:33:31:e0:80:
37:b7:e8:f8:15:7d:47:cc:aa:a0:17:48:88:79:5f:
4f:48:87:ab:3b:ab:21:18:e9:05:ad:37:61:51:0f:
ed:d5:78:91:08:2c:7b:0c:66:34:d2:79:52:68:0f:
31:5c:80:4c:71:6b:09:08:ad:b7:17:22:00:57:cf:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:1D:40:E0:2D:7F:8F:34:33:4D:9A:92:8C:B2:39:27:17:C2:CF
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/W0odQOAtf480M02akoyyOScXws8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.241.0/24
37.218.244.0/24
Signature Algorithm: sha256WithRSAEncryption
70:df:a1:9f:a4:53:21:7d:ed:2c:6e:c3:75:ef:68:7d:07:e3:
d8:c7:48:bf:83:21:b6:55:2e:48:d4:91:ef:ac:ed:14:97:88:
8f:36:db:21:93:74:5d:70:92:cb:7b:44:b4:c5:6c:95:b2:8e:
64:3e:53:56:17:9e:40:02:70:8e:87:8a:a7:a8:8c:49:15:29:
f0:d6:bf:20:e3:63:f8:80:52:62:40:ed:cc:29:4f:ec:fb:93:
56:86:60:97:d1:a0:27:20:74:dc:98:1c:5d:13:62:ba:60:1e:
81:52:a4:27:e9:4d:1d:99:49:23:e1:09:59:13:83:31:73:d2:
6c:79:d5:ed:b4:1b:ad:83:1d:1e:31:92:99:fd:96:2f:64:f1:
28:58:06:d6:3d:ec:14:b9:91:8f:b8:f8:98:0f:89:f9:67:42:
db:4d:db:7b:d0:e5:b9:29:a3:56:e9:cd:b8:51:3f:57:97:e8:
5e:9e:b0:81:a7:17:3f:23:e3:00:ee:48:4f:03:88:c5:4d:47:
ae:8b:ca:d5:60:77:9b:33:07:d2:c2:e8:bf:c7:a1:0e:c9:be:
6d:7d:09:20:b0:9b:7b:cf:ff:9e:52:cd:00:44:1b:db:14:ce:
1e:55:a6:c8:b4:90:78:16:e1:ea:9e:fe:fa:3e:a5:ec:77:4b:
da:e4:b6:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGuO1l3Nchl8eLGsG07SQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2
ZTk2NDEwHhcNMjQwMTAxMjAzMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjRhMWQ0MGUwMmQ3ZjhmMzQzMzRkOWE5MjhjYjIzOTI3MTdjMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoyKUe3DPcF9f4kQsf+lRvO+ftaX
sGPFDSUiIlBehe5uMLBBMxE7prtFQnbJrcfCvq4lUKElkcQFjYO2kAnmURHJnDxX
sZnUWx9H9nnse1IYNLJy0xjDB2a1ePK5tBAZCul2AdOjcNz6Ht4rEUxZLZI0uCcI
UgJDfbXRzuD7fuzcFzBChcmaG7LTbn4y+P+nf7whY2wy1q+u3NxoOBNmFlJ+7qpx
jtm0vDgB97mOWigp7ZdkNAXnBSrMumJ7iTMx4IA3t+j4FX1HzKqgF0iIeV9PSIer
O6shGOkFrTdhUQ/t1XiRCCx7DGY00nlSaA8xXIBMcWsJCK23FyIAV8/vRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFtKHUDgLX+PNDNNmpKMsjknF8LPMB8GA1UdIwQY
MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt
NTNlZGM2MjZiMjg3LzEvVzBvZFFPQXRmNDgwTTAyYWtveXlPU2NYd3M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3
LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJdrxAwQA
Jdr0MA0GCSqGSIb3DQEBCwUAA4IBAQBw36GfpFMhfe0sbsN172h9B+PYx0i/gyG2
VS5I1JHvrO0Ul4iPNtshk3RdcJLLe0S0xWyVso5kPlNWF55AAnCOh4qnqIxJFSnw
1r8g42P4gFJiQO3MKU/s+5NWhmCX0aAnIHTcmBxdE2K6YB6BUqQn6U0dmUkj4QlZ
E4Mxc9JsedXttButgx0eMZKZ/ZYvZPEoWAbWPewUuZGPuPiYD4n5Z0LbTdt70OW5
KaNW6c24UT9Xl+henrCBpxc/I+MA7khPA4jFTUeui8rVYHebMwfSwui/x6EOyb5t
fQkgsJt7z/+eUs0ARBvbFM4eVabItJB4FuHqnv76PqXsd0va5LYr
-----END CERTIFICATE-----
Generated at Sun May 12 04:26:56 2024 by rpki-client on console-ams.rpki-client.org