Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/t2FvNXzhbkOnVoo-9PdHMm0N3R4.roa
File: t2FvNXzhbkOnVoo-9PdHMm0N3R4.roa (raw, json)
Hash identifier: R/1uRXgqNRBQ1HeE46IYc0M5+2iZ5Toi5jc8+RIoQ3w=
Subject key identifier: B7:61:6F:35:7C:E1:6E:43:A7:56:8A:3E:F4:F7:47:32:6D:0D:DD:1E
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 018CC9BC28557D1075386F4305FBA765695C
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/t2FvNXzhbkOnVoo-9PdHMm0N3R4.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 46.233.43.0/24 maxlen: 24
46.233.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:28:55:7d:10:75:38:6f:43:05:fb:a7:65:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7616f357ce16e43a7568a3ef4f747326d0ddd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:69:5a:27:6f:64:97:15:8d:64:33:ce:ec:
52:25:cf:02:65:50:16:16:55:0e:43:fd:94:5d:22:
44:5a:1f:84:01:43:e7:50:8f:e7:56:e3:6c:7f:3d:
02:c9:9b:85:89:33:c3:c7:5c:a1:5d:ea:64:33:b1:
85:a0:3c:21:3a:a7:0b:73:97:3e:cb:74:02:08:30:
f9:4c:e8:41:a3:15:9f:8f:ee:13:6b:eb:cf:d1:1c:
51:30:3d:17:3f:5e:e8:5f:4e:65:b0:c4:90:15:f4:
b2:3d:6d:7f:a5:20:6a:a7:5b:cd:36:c6:50:a9:f1:
20:00:ff:96:d6:33:2b:17:a7:3f:9e:e1:af:60:6c:
35:76:52:9a:01:c3:36:a8:7e:88:13:02:f5:f7:6f:
6c:12:70:b8:f4:03:74:6d:92:cf:44:8f:8f:da:71:
3d:29:68:5d:b6:0c:09:97:92:b0:c7:17:5f:1a:f8:
69:bb:14:f9:89:3c:a9:00:29:23:3d:4a:e4:72:0d:
b2:e1:84:15:3f:21:1e:4b:6d:66:f0:9c:4b:41:ee:
a9:ec:0c:71:c8:0d:7a:47:da:59:4f:e3:87:cb:d8:
e9:26:92:49:0c:f9:98:45:bd:39:54:38:17:32:e2:
f1:51:6a:e9:68:09:3e:00:d7:ff:bc:33:4e:cc:f7:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:6F:35:7C:E1:6E:43:A7:56:8A:3E:F4:F7:47:32:6D:0D:DD:1E
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/t2FvNXzhbkOnVoo-9PdHMm0N3R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:17:12:ce:1a:9f:39:4a:22:97:62:ef:8c:d8:9d:40:76:37:
ad:3d:33:ad:f4:4b:0c:6b:11:99:86:29:69:0d:24:bc:07:9a:
d6:d8:4d:d3:b2:2d:49:3d:6a:01:fc:6d:13:da:ad:ad:b0:37:
f1:00:9d:85:0d:08:23:05:58:73:e1:f2:76:3b:b1:eb:72:21:
98:53:61:9e:76:c6:b9:64:61:6a:8b:1e:f3:08:71:3d:13:c5:
75:10:25:9e:41:de:3d:45:b0:e3:dc:f3:32:04:8b:cf:60:57:
29:27:5c:87:4a:2a:39:d2:05:f9:e2:59:d5:3b:62:54:ce:fc:
39:9c:5f:1f:c3:96:73:16:5b:43:b6:5f:e1:09:14:fa:c9:0e:
9d:84:fb:58:45:52:23:5c:01:ce:6d:7d:0e:9c:ee:d3:b8:b1:
06:88:84:39:c2:8b:3b:19:bc:91:d9:6c:5d:5f:9f:89:9d:78:
cd:28:94:30:14:86:08:26:73:e4:1d:91:51:b6:00:7b:cf:52:
c7:2d:c1:18:da:6d:16:3b:fd:1b:59:78:de:56:a3:4a:dc:76:
b7:2d:79:ec:c9:09:11:8f:b5:3d:e3:3d:05:b6:c9:56:1a:7b:
a5:f3:70:6e:b4:4a:2b:9b:32:7a:f9:c8:fc:18:1d:be:e9:b6:
ca:a2:b1:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvChVfRB1OG9DBfunZWlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjQwMTAyMTAzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzYxNmYzNTdjZTE2ZTQzYTc1NjhhM2VmNGY3NDczMjZkMGRkZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/5pWidvZJcVjWQzzuxSJc8CZVAW
FlUOQ/2UXSJEWh+EAUPnUI/nVuNsfz0CyZuFiTPDx1yhXepkM7GFoDwhOqcLc5c+
y3QCCDD5TOhBoxWfj+4Ta+vP0RxRMD0XP17oX05lsMSQFfSyPW1/pSBqp1vNNsZQ
qfEgAP+W1jMrF6c/nuGvYGw1dlKaAcM2qH6IEwL1929sEnC49AN0bZLPRI+P2nE9
KWhdtgwJl5KwxxdfGvhpuxT5iTypACkjPUrkcg2y4YQVPyEeS21m8JxLQe6p7Axx
yA16R9pZT+OHy9jpJpJJDPmYRb05VDgXMuLxUWrpaAk+ANf/vDNOzPfqawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdhbzV84W5Dp1aKPvT3RzJtDd0eMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvdDJGdk5Yemhia09uVm9vLTlQZEhNbTBOM1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLukqMA0G
CSqGSIb3DQEBCwUAA4IBAQBsFxLOGp85SiKXYu+M2J1AdjetPTOt9EsMaxGZhilp
DSS8B5rW2E3Tsi1JPWoB/G0T2q2tsDfxAJ2FDQgjBVhz4fJ2O7HrciGYU2Gedsa5
ZGFqix7zCHE9E8V1ECWeQd49RbDj3PMyBIvPYFcpJ1yHSio50gX54lnVO2JUzvw5
nF8fw5ZzFltDtl/hCRT6yQ6dhPtYRVIjXAHObX0OnO7TuLEGiIQ5wos7GbyR2Wxd
X5+JnXjNKJQwFIYIJnPkHZFRtgB7z1LHLcEY2m0WO/0bWXjeVqNK3Ha3LXnsyQkR
j7U94z0FtslWGnul83ButEormzJ6+cj8GB2+6bbKorGz
-----END CERTIFICATE-----
Generated at Wed May 8 21:43:03 2024 by rpki-client on console-ams.rpki-client.org