Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OnSzQzHYH3rKBbQZRmh10lN7Tn8.roa
File: OnSzQzHYH3rKBbQZRmh10lN7Tn8.roa (raw, json)
Hash identifier: xaFDPRJs6LQhs7k7DhbVrRBqZ1AjepqeB8qSCngxHG8=
Subject key identifier: 3A:74:B3:43:31:D8:1F:7A:CA:05:B4:19:46:68:75:D2:53:7B:4E:7F
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018EA40FD6311C1A12DF8ADB6B70D0627768
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OnSzQzHYH3rKBbQZRmh10lN7Tn8.roa
Signing time: Wed 03 Apr 2024 13:04:45 +0000
ROA not before: Wed 03 Apr 2024 13:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 128.65.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a4:0f:d6:31:1c:1a:12:df:8a:db:6b:70:d0:62:77:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Apr 3 13:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a74b34331d81f7aca05b419466875d2537b4e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:0b:f6:4c:54:a8:9d:a4:85:40:55:b0:59:
07:44:41:d4:70:27:fc:24:52:a6:6d:a6:8c:e3:62:
88:29:a4:27:3f:79:cb:21:2c:24:26:a2:b9:a0:0d:
a8:64:c3:61:f0:de:78:1b:5f:c0:d4:01:71:34:1e:
50:a7:55:49:48:17:e5:ee:7f:1b:22:e5:b7:4b:a8:
19:67:34:8e:78:d8:54:c6:a4:fa:33:9c:dd:c6:e7:
2f:11:99:d0:e0:cf:76:dc:6d:38:26:70:6a:c0:e2:
27:42:38:d7:df:af:df:97:71:9f:21:e7:61:18:b7:
61:d8:84:e8:7e:39:25:bb:e9:49:23:35:a9:3c:e7:
3c:29:8e:1b:db:34:a7:e4:75:21:1b:41:f7:c6:dc:
50:f9:87:0a:3c:a2:f1:6b:23:7b:83:6c:cb:b0:a2:
6f:f8:50:19:d3:0f:15:f6:09:e6:a0:dc:26:04:d5:
2e:5b:fe:aa:62:51:ce:f2:ce:9d:65:e3:c2:e6:89:
04:df:ea:9d:c9:79:b2:5a:7a:b9:a8:85:db:89:49:
fb:22:73:d1:b1:ba:8d:4e:11:69:2b:78:03:88:2c:
9e:b0:01:c3:60:2b:eb:cd:ee:24:89:17:9b:d2:c9:
54:63:5e:48:b5:14:4f:42:09:f3:f8:0b:19:92:70:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:B3:43:31:D8:1F:7A:CA:05:B4:19:46:68:75:D2:53:7B:4E:7F
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/OnSzQzHYH3rKBbQZRmh10lN7Tn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:1b:9f:f4:1e:1f:c7:ba:a5:ea:48:6f:4c:6c:fb:e2:87:8f:
7d:c2:0d:01:89:ed:55:95:af:0a:58:73:3c:9f:29:85:0d:3b:
40:b1:9d:00:c5:ec:02:92:92:13:b5:e9:cf:85:8f:ff:41:45:
79:36:e2:9b:3a:0c:34:0a:f9:a6:3b:a8:21:3f:ac:2d:cd:14:
c7:69:c8:83:aa:11:79:4b:2e:13:39:0a:ae:b1:17:8a:89:bc:
7d:79:2c:e8:9f:f3:58:b0:fb:46:1b:19:bc:73:89:89:db:3e:
21:c6:34:a8:58:3d:89:04:e2:10:00:00:0a:9b:73:49:3a:5c:
20:de:86:a7:78:36:dc:ff:95:3b:26:af:0b:8a:d7:27:00:b0:
0a:08:e7:0f:0d:e3:3f:c6:23:8a:29:d2:ef:3c:68:ce:ba:65:
2c:19:07:53:33:45:50:c5:42:05:87:8c:ca:9c:60:1b:04:aa:
54:14:40:29:2b:00:12:85:f4:6e:10:0b:64:76:51:0b:81:07:
6b:eb:59:ea:3c:ad:99:84:7a:25:17:af:ae:98:ae:31:3e:e9:
af:dd:27:34:84:86:0d:91:9e:93:b2:92:c5:dd:8b:92:c5:dc:
0b:b4:ef:2c:55:cf:46:cc:39:35:dc:dc:72:43:25:71:9b:cb:
51:db:e7:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6kD9YxHBoS34rba3DQYndoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwNDAzMTMwNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTc0YjM0MzMxZDgxZjdhY2EwNWI0MTk0NjY4NzVkMjUzN2I0ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAL9kxUqJ2khUBVsFkHREHUcCf8
JFKmbaaM42KIKaQnP3nLISwkJqK5oA2oZMNh8N54G1/A1AFxNB5Qp1VJSBfl7n8b
IuW3S6gZZzSOeNhUxqT6M5zdxucvEZnQ4M923G04JnBqwOInQjjX36/fl3GfIedh
GLdh2ITofjklu+lJIzWpPOc8KY4b2zSn5HUhG0H3xtxQ+YcKPKLxayN7g2zLsKJv
+FAZ0w8V9gnmoNwmBNUuW/6qYlHO8s6dZePC5okE3+qdyXmyWnq5qIXbiUn7InPR
sbqNThFpK3gDiCyesAHDYCvrze4kiReb0slUY15ItRRPQgnz+AsZknBKWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDp0s0Mx2B96ygW0GUZoddJTe05/MB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvT25TelF6SFlIM3JLQmJRWlJtaDEwbE43VG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgEGkMA0G
CSqGSIb3DQEBCwUAA4IBAQCPG5/0Hh/HuqXqSG9MbPvih499wg0Bie1Vla8KWHM8
nymFDTtAsZ0AxewCkpITtenPhY//QUV5NuKbOgw0CvmmO6ghP6wtzRTHaciDqhF5
Sy4TOQqusReKibx9eSzon/NYsPtGGxm8c4mJ2z4hxjSoWD2JBOIQAAAKm3NJOlwg
3oaneDbc/5U7Jq8LitcnALAKCOcPDeM/xiOKKdLvPGjOumUsGQdTM0VQxUIFh4zK
nGAbBKpUFEApKwAShfRuEAtkdlELgQdr61nqPK2ZhHolF6+umK4xPumv3Sc0hIYN
kZ6TspLF3YuSxdwLtO8sVc9GzDk13NxyQyVxm8tR2+ft
-----END CERTIFICATE-----
Generated at Sun May 12 22:51:58 2024 by rpki-client on console-ams.rpki-client.org