Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/2g1oUeqG1FDY75uhhrJdSslDTUY.roa
File: 2g1oUeqG1FDY75uhhrJdSslDTUY.roa (raw, json)
Hash identifier: ElDhO6Kn3Zi54oNpNBTjfTd2yOZHKbEWZ2YOZq1tXB0=
Subject key identifier: DA:0D:68:51:EA:86:D4:50:D8:EF:9B:A1:86:B2:5D:4A:C9:43:4D:46
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 018CC4934B067E456641E351D7EC12DBCADF
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/2g1oUeqG1FDY75uhhrJdSslDTUY.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 144.2.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4b:06:7e:45:66:41:e3:51:d7:ec:12:db:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da0d6851ea86d450d8ef9ba186b25d4ac9434d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:1a:26:56:e3:9b:cd:78:f2:fe:ae:79:4d:
52:fa:f0:78:59:a8:d0:d2:5a:fb:a5:a5:e9:0f:92:
e7:4a:54:5a:0a:21:c9:41:11:47:49:30:a9:70:99:
b6:1d:de:ee:6d:76:4b:a2:8f:a4:9d:14:1b:90:9d:
3f:87:7c:fa:31:d1:39:9e:55:bf:8c:a0:a3:f0:bf:
76:11:68:af:f1:6e:46:f8:c0:12:39:cc:be:6a:72:
b4:2b:0e:5b:12:89:ed:0b:a1:e3:76:ea:50:4a:23:
66:c4:af:c2:74:98:06:56:d6:53:28:2c:89:c9:b2:
e4:06:bb:31:e9:dd:a5:40:4e:24:c4:2d:24:65:d7:
21:ac:47:17:7d:3d:b9:2f:d5:d4:6a:df:1e:ef:89:
d8:81:4c:ac:be:ba:d4:1a:34:af:b8:fe:54:da:2f:
dd:bd:f2:60:c7:97:24:18:0b:3a:47:f6:98:3d:b1:
a5:6a:e9:43:84:b2:10:a1:38:74:cd:98:ba:59:d2:
36:5d:9a:70:e9:d1:20:e4:91:29:4f:de:c3:b3:30:
b2:4d:37:d1:d1:a4:53:64:3f:a0:66:c2:2d:e6:88:
a4:67:29:4d:ec:19:ae:3e:07:0f:bb:7a:06:8a:c7:
fe:94:32:25:69:d4:50:22:c9:7f:96:09:8a:8a:12:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:68:51:EA:86:D4:50:D8:EF:9B:A1:86:B2:5D:4A:C9:43:4D:46
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/2g1oUeqG1FDY75uhhrJdSslDTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.154.0/24
Signature Algorithm: sha256WithRSAEncryption
53:60:1d:db:2a:87:a4:a5:bb:3b:4e:30:7f:51:a9:5d:22:10:
e9:8f:3f:f1:c9:3e:b9:1a:f1:db:3e:cb:58:df:8b:1f:be:f9:
67:bd:2e:95:12:c4:de:48:2e:18:1f:2b:aa:03:8b:36:e6:c1:
fa:bd:71:7a:da:86:bb:cc:d2:12:7f:78:dd:20:78:bb:84:f4:
87:13:06:de:32:dc:f1:7e:2c:60:ad:05:d5:cf:46:db:c5:f4:
14:c1:25:fa:b8:16:67:29:7f:2b:89:86:ba:0b:33:d0:71:f9:
85:de:2a:75:c4:f6:4b:67:d0:15:05:1c:95:f4:19:5c:83:29:
7d:80:f7:52:7d:ed:19:7a:93:14:f3:8f:88:b5:38:8a:f7:26:
df:89:3e:f2:b0:11:81:fe:85:00:a3:16:c2:3c:28:c4:06:b6:
90:bd:14:84:98:85:f8:84:1f:76:ad:ab:2a:8a:b9:8e:bd:da:
6f:10:30:d0:75:73:74:6a:ee:71:c6:3f:d6:57:8b:33:62:1f:
e7:2b:83:8f:70:1b:e8:e0:78:d6:06:52:20:26:c6:4c:75:bf:
b0:70:cc:14:d7:04:8f:11:87:65:ac:f7:b1:ea:53:70:d0:6a:
e9:da:d9:ab:dc:7d:0a:d8:da:39:1e:7e:40:1d:b9:4c:1c:d6:
60:7c:c9:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk0sGfkVmQeNR1+wS28rfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4
MzIwYzUwHhcNMjQwMTAxMTAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTBkNjg1MWVhODZkNDUwZDhlZjliYTE4NmIyNWQ0YWM5NDM0ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWMaJlbjm8148v6ueU1S+vB4WajQ
0lr7paXpD5LnSlRaCiHJQRFHSTCpcJm2Hd7ubXZLoo+knRQbkJ0/h3z6MdE5nlW/
jKCj8L92EWiv8W5G+MASOcy+anK0Kw5bEontC6HjdupQSiNmxK/CdJgGVtZTKCyJ
ybLkBrsx6d2lQE4kxC0kZdchrEcXfT25L9XUat8e74nYgUysvrrUGjSvuP5U2i/d
vfJgx5ckGAs6R/aYPbGlaulDhLIQoTh0zZi6WdI2XZpw6dEg5JEpT97DszCyTTfR
0aRTZD+gZsIt5oikZylN7BmuPgcPu3oGisf+lDIladRQIsl/lgmKihJyuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNoNaFHqhtRQ2O+boYayXUrJQ01GMB8GA1UdIwQY
MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt
NTcyOGZiMjRiZjBlLzEvMmcxb1VlcUcxRkRZNzV1aGhySmRTc2xEVFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl
LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkAKaMA0G
CSqGSIb3DQEBCwUAA4IBAQBTYB3bKoekpbs7TjB/UaldIhDpjz/xyT65GvHbPstY
34sfvvlnvS6VEsTeSC4YHyuqA4s25sH6vXF62oa7zNISf3jdIHi7hPSHEwbeMtzx
fixgrQXVz0bbxfQUwSX6uBZnKX8riYa6CzPQcfmF3ip1xPZLZ9AVBRyV9Blcgyl9
gPdSfe0ZepMU84+ItTiK9ybfiT7ysBGB/oUAoxbCPCjEBraQvRSEmIX4hB92rasq
irmOvdpvEDDQdXN0au5xxj/WV4szYh/nK4OPcBvo4HjWBlIgJsZMdb+wcMwU1wSP
EYdlrPex6lNw0Grp2tmr3H0K2No5Hn5AHblMHNZgfMnL
-----END CERTIFICATE-----
Generated at Thu May 2 13:35:31 2024 by rpki-client on console-ams.rpki-client.org