Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/baq7zKwcXp8s874JROmVYZeLQ-E.roa
File: baq7zKwcXp8s874JROmVYZeLQ-E.roa (raw, json)
Hash identifier: A1gG5VZZT/cuKs7w9cUTt1U7zHW2vTQT6FJE9sy5exk=
Subject key identifier: 6D:AA:BB:CC:AC:1C:5E:9F:2C:F3:BE:09:44:E9:95:61:97:8B:43:E1
Certificate issuer: /CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Certificate serial: 018CC3B6AEDE45B7DD7658E7301E941588E4
Authority key identifier: 3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/baq7zKwcXp8s874JROmVYZeLQ-E.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39337
IP address blocks: 194.126.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ae:de:45:b7:dd:76:58:e7:30:1e:94:15:88:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2616b6cf7bb31efbfc153768625a4d504b24df
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6daabbccac1c5e9f2cf3be0944e99561978b43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:b0:99:76:f0:bf:c6:8c:ad:d1:a8:13:f7:
3a:4e:a0:56:ba:b2:90:3a:d4:3f:1d:22:39:fd:27:
f6:7b:ff:43:6f:6c:e3:39:a1:4e:ff:bb:ca:37:53:
38:dc:66:a9:59:b7:ba:59:f9:4a:af:26:4e:e3:eb:
9a:d8:7a:52:61:80:9e:7f:10:bb:0c:68:0a:34:de:
b5:b9:1a:be:a5:04:5d:22:bd:2f:d7:10:40:4e:bd:
fd:02:30:76:70:a6:bc:89:73:9c:54:18:db:07:67:
02:8d:e9:dc:4e:05:24:0d:b2:6b:d7:a6:53:0d:c7:
f9:b0:3f:82:74:f1:9f:dd:49:de:0c:25:c9:ee:1e:
0c:16:38:48:2e:81:b6:7b:3c:05:1f:63:2a:b0:80:
43:8f:e3:ab:c6:3c:76:81:b6:d1:15:ee:c7:37:fc:
79:0b:d0:ac:02:e6:b5:d9:12:17:07:c8:cc:ca:4f:
be:14:ad:ff:be:f1:a2:22:73:17:d5:ea:c3:d3:35:
21:7b:27:76:80:ce:1d:52:d9:20:eb:79:25:71:a5:
95:78:c9:94:f1:f5:6a:af:3a:b8:05:d2:ef:db:cc:
16:59:51:46:23:c9:85:5f:40:36:2a:d8:f0:4e:c1:
31:28:5f:3f:98:8c:b2:09:52:b4:ff:36:cb:0a:bc:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:BB:CC:AC:1C:5E:9F:2C:F3:BE:09:44:E9:95:61:97:8B:43:E1
X509v3 Authority Key Identifier:
keyid:3B:26:16:B6:CF:7B:B3:1E:FB:FC:15:37:68:62:5A:4D:50:4B:24:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyYWts97sx77_BU3aGJaTVBLJN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/baq7zKwcXp8s874JROmVYZeLQ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/OyYWts97sx77_BU3aGJaTVBLJN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.160.0/22
Signature Algorithm: sha256WithRSAEncryption
52:4e:1d:ba:38:ef:e3:e8:00:21:c4:12:73:74:a5:c7:39:f2:
99:39:1e:16:4d:36:44:af:e2:71:c8:78:0b:c1:b0:7f:12:68:
73:e5:23:99:2b:89:d8:53:21:08:da:ea:41:66:ea:df:48:d3:
67:70:1f:d2:1f:3f:24:72:90:c4:81:8e:b9:63:73:39:bb:ae:
0e:3a:e7:24:3d:c1:ec:82:45:b5:e2:56:19:0f:b6:2b:49:aa:
52:07:d0:36:83:bf:9f:bc:10:9e:03:07:4a:48:3b:c4:af:4c:
ab:f3:ea:f3:68:a9:93:6a:22:a3:78:4a:08:92:f2:fa:81:34:
47:0e:8f:9b:44:0a:79:72:6e:d8:42:e4:c0:d3:a5:40:63:4a:
7a:7a:3f:bd:af:19:2d:9f:00:1b:09:8c:69:2c:00:11:18:d6:
08:f6:6f:d3:51:26:db:b2:9a:51:2f:8b:59:8d:6e:97:e2:d7:
4e:88:89:2e:ee:76:db:f8:3e:27:7e:00:72:bf:d5:97:da:02:
1b:2c:57:68:11:b7:0d:cd:8a:28:2d:d5:29:7e:21:3f:d6:7d:
4e:e4:0a:98:b4:c1:6d:82:14:a2:ba:62:ed:3b:70:10:0b:d9:
14:54:87:c5:be:12:7d:6c:60:d2:90:6f:38:db:b3:dc:01:be:
13:b9:ae:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtq7eRbfddljnMB6UFYjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjYxNmI2Y2Y3YmIzMWVmYmZjMTUzNzY4NjI1YTRkNTA0
YjI0ZGYwHhcNMjQwMTAxMDYyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGFhYmJjY2FjMWM1ZTlmMmNmM2JlMDk0NGU5OTU2MTk3OGI0M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoiwmXbwv8aMrdGoE/c6TqBWurKQ
OtQ/HSI5/Sf2e/9Db2zjOaFO/7vKN1M43GapWbe6WflKryZO4+ua2HpSYYCefxC7
DGgKNN61uRq+pQRdIr0v1xBATr39AjB2cKa8iXOcVBjbB2cCjencTgUkDbJr16ZT
Dcf5sD+CdPGf3UneDCXJ7h4MFjhILoG2ezwFH2MqsIBDj+Orxjx2gbbRFe7HN/x5
C9CsAua12RIXB8jMyk++FK3/vvGiInMX1erD0zUheyd2gM4dUtkg63klcaWVeMmU
8fVqrzq4BdLv28wWWVFGI8mFX0A2KtjwTsExKF8/mIyyCVK0/zbLCrz0TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG2qu8ysHF6fLPO+CUTplWGXi0PhMB8GA1UdIwQY
MBaAFDsmFrbPe7Me+/wVN2hiWk1QSyTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct
NWE1Mzc2MjlhNDM5LzEvYmFxN3pLd2NYcDhzODc0SlJPbVZZWmVMUS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5
LzEvT3lZV3RzOTdzeDc3X0JVM2FHSmFUVkJMSk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn6gMA0G
CSqGSIb3DQEBCwUAA4IBAQBSTh26OO/j6AAhxBJzdKXHOfKZOR4WTTZEr+JxyHgL
wbB/Emhz5SOZK4nYUyEI2upBZurfSNNncB/SHz8kcpDEgY65Y3M5u64OOuckPcHs
gkW14lYZD7YrSapSB9A2g7+fvBCeAwdKSDvEr0yr8+rzaKmTaiKjeEoIkvL6gTRH
Do+bRAp5cm7YQuTA06VAY0p6ej+9rxktnwAbCYxpLAARGNYI9m/TUSbbsppRL4tZ
jW6X4tdOiIku7nbb+D4nfgByv9WX2gIbLFdoEbcNzYooLdUpfiE/1n1O5AqYtMFt
ghSiumLtO3AQC9kUVIfFvhJ9bGDSkG8427PcAb4Tua6j
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:57 2024 by rpki-client on console-ams.rpki-client.org