Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_49C6TA6x0LOvw1qizYAp7ZGHLU.roa
File: _49C6TA6x0LOvw1qizYAp7ZGHLU.roa (raw, json)
Hash identifier: 6/S0qWN4lveLNFDQBJtpnvIRZHA3M1UT48bPO4F15bM=
Subject key identifier: FF:8F:42:E9:30:3A:C7:42:CE:BF:0D:6A:8B:36:00:A7:B6:46:1C:B5
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0192E69696E6F7F52F6CAB9BC565A84D393D
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_49C6TA6x0LOvw1qizYAp7ZGHLU.roa
Signing time: Fri 01 Nov 2024 07:18:01 +0000
ROA not before: Fri 01 Nov 2024 07:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 46.233.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:96:96:e6:f7:f5:2f:6c:ab:9b:c5:65:a8:4d:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Nov 1 07:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff8f42e9303ac742cebf0d6a8b3600a7b6461cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ff:fa:a8:d5:e8:78:a5:b0:9a:b6:c4:93:c0:
c4:ed:6f:0d:72:0e:c3:e6:14:71:a7:ce:0a:d4:f8:
33:07:46:6c:f6:75:7f:32:18:28:c7:de:68:2a:e0:
21:4e:8f:6f:04:a7:4a:0d:6f:d7:fd:a8:a5:b0:11:
95:f6:0b:5a:b7:33:ab:63:75:3e:fe:c2:6f:cf:27:
3d:0d:ec:4a:da:86:85:ad:72:82:e1:ca:ba:19:ca:
98:98:5b:74:ac:0f:9a:51:fa:9d:ee:61:f4:a7:bc:
9b:9d:cb:db:81:b7:54:52:10:45:c4:35:61:3f:5d:
25:cb:e3:bd:94:cb:f2:ad:f7:c2:2c:2a:90:4c:7d:
22:27:30:8c:2e:c9:94:43:7e:ff:03:35:88:d2:7f:
c4:06:f3:c6:f3:b7:de:33:2b:c2:cf:ca:ae:2d:db:
b3:87:54:60:8e:28:5c:e2:79:33:0d:8c:99:54:8f:
00:20:87:0c:16:8a:82:01:6d:53:af:26:27:49:42:
56:95:9a:10:be:9a:fa:e3:aa:15:c3:af:9f:85:9b:
4f:be:bd:da:01:09:3c:cf:d6:b8:bd:9e:cf:49:5c:
f4:7c:5e:86:36:1e:a1:24:ca:e4:b0:e9:f2:74:64:
10:59:cc:8f:47:0a:b2:63:46:46:63:8c:1d:c7:b8:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:42:E9:30:3A:C7:42:CE:BF:0D:6A:8B:36:00:A7:B6:46:1C:B5
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/_49C6TA6x0LOvw1qizYAp7ZGHLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
29:d7:c9:41:0a:e6:be:1c:8f:e6:17:3e:77:1a:8e:be:22:43:
4b:60:25:7e:cb:d4:98:1c:ac:ca:a6:9f:48:99:80:7b:d0:7c:
35:be:1d:67:67:ff:b6:36:7e:29:bb:a5:cc:d8:5d:ed:5f:79:
17:dd:05:fa:54:a0:46:46:df:b4:2b:57:ef:6b:11:40:be:0c:
38:df:5a:df:78:66:ad:f0:1f:fd:34:7a:6e:f9:d4:ba:a8:38:
9f:28:9c:d7:e1:de:af:e9:1f:72:3c:60:11:fb:8e:62:c4:3a:
6e:41:3d:53:b7:bf:23:1c:8c:cf:24:1b:7f:19:b7:57:ce:4c:
f6:54:b7:e7:84:7b:2a:1b:1c:75:3e:20:26:ce:bc:b1:eb:ea:
05:59:55:42:63:23:1f:61:74:8a:31:54:5b:4c:88:ea:d0:bf:
c5:5e:e5:a9:70:dc:75:05:76:77:3d:c2:cb:1f:e9:51:11:43:
6d:19:4c:89:ab:10:5e:af:bd:fc:51:48:a9:ff:95:35:81:81:
2a:10:1a:76:90:35:1a:d9:07:3b:32:d6:e6:25:56:34:c3:1e:
ff:aa:11:35:7b:1b:be:99:38:69:7d:01:09:ec:4e:dd:e6:3f:
7e:9e:b9:f1:f3:59:d5:4a:37:d9:09:b7:7e:ee:49:57:2c:26:
f0:8e:08:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLmlpbm9/UvbKubxWWoTTk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjQxMTAxMDcxODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjhmNDJlOTMwM2FjNzQyY2ViZjBkNmE4YjM2MDBhN2I2NDYxY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+f/6qNXoeKWwmrbEk8DE7W8Ncg7D
5hRxp84K1PgzB0Zs9nV/Mhgox95oKuAhTo9vBKdKDW/X/ailsBGV9gtatzOrY3U+
/sJvzyc9DexK2oaFrXKC4cq6GcqYmFt0rA+aUfqd7mH0p7ybncvbgbdUUhBFxDVh
P10ly+O9lMvyrffCLCqQTH0iJzCMLsmUQ37/AzWI0n/EBvPG87feMyvCz8quLduz
h1Rgjihc4nkzDYyZVI8AIIcMFoqCAW1TryYnSUJWlZoQvpr646oVw6+fhZtPvr3a
AQk8z9a4vZ7PSVz0fF6GNh6hJMrksOnydGQQWcyPRwqyY0ZGY4wdx7g4lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+PQukwOsdCzr8Naos2AKe2Rhy1MB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvXzQ5QzZUQTZ4MExPdncxcWl6WUFwN1pHSExVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLukgMA0G
CSqGSIb3DQEBCwUAA4IBAQAp18lBCua+HI/mFz53Go6+IkNLYCV+y9SYHKzKpp9I
mYB70Hw1vh1nZ/+2Nn4pu6XM2F3tX3kX3QX6VKBGRt+0K1fvaxFAvgw431rfeGat
8B/9NHpu+dS6qDifKJzX4d6v6R9yPGAR+45ixDpuQT1Tt78jHIzPJBt/GbdXzkz2
VLfnhHsqGxx1PiAmzryx6+oFWVVCYyMfYXSKMVRbTIjq0L/FXuWpcNx1BXZ3PcLL
H+lREUNtGUyJqxBer738UUip/5U1gYEqEBp2kDUa2Qc7MtbmJVY0wx7/qhE1exu+
mThpfQEJ7E7d5j9+nrnx81nVSjfZCbd+7klXLCbwjgi7
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:29 2024 by rpki-client on console-ams.rpki-client.org