Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/7i6uTH2HJE21A2t9UH7KLSb9bC4.roa
File: 7i6uTH2HJE21A2t9UH7KLSb9bC4.roa (raw, json)
Hash identifier: bqy21T+7OHkhoMphmtaz4gv4bH/tymQQw5dib5altq8=
Subject key identifier: EE:2E:AE:4C:7D:87:24:4D:B5:03:6B:7D:50:7E:CA:2D:26:FD:6C:2E
Certificate issuer: /CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Certificate serial: 018CC8DEB28470A3F06995E414865CBBE674
Authority key identifier: 48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/7i6uTH2HJE21A2t9UH7KLSb9bC4.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201619
IP address blocks: 78.31.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b2:84:70:a3:f0:69:95:e4:14:86:5c:bb:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48680bde56bd3bf561578a0fe108cbc1c6a759db
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee2eae4c7d87244db5036b7d507eca2d26fd6c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:86:52:4d:99:3c:33:81:2c:34:b2:a8:00:
f8:27:31:4b:04:15:d3:1c:79:d3:7b:e1:87:7f:e7:
72:9b:01:c0:82:34:2e:3e:6b:1f:fb:9d:0e:d9:d9:
4e:1b:e6:4a:3c:7a:d3:fc:55:75:8c:9c:3b:12:9d:
35:e9:3d:f2:3c:20:3f:57:35:13:b3:4f:4f:27:7e:
36:f5:ea:b8:93:dd:44:09:60:3a:fe:28:72:b8:3b:
e7:15:b0:f4:7e:2b:17:f4:a3:2e:59:58:ba:09:a5:
b4:cf:fb:c1:7f:13:c6:b2:0d:8f:5d:2b:73:62:61:
c2:18:bc:d5:ea:fb:a9:dd:68:cf:16:5c:0d:8f:82:
1e:7c:71:00:64:cc:80:fb:a1:08:bc:82:c1:7e:b8:
34:bd:ca:01:fc:f8:38:9c:1d:97:b0:62:6e:f2:55:
b4:7d:18:7e:49:bd:dc:99:72:30:d8:a0:a7:bb:c6:
0a:e6:96:3e:b4:47:d9:21:61:f5:2a:44:e2:89:9a:
3f:0a:39:a4:f1:fb:2b:65:29:89:48:79:cb:c7:ea:
4a:ab:e2:23:bc:ca:7c:69:d6:6e:fc:08:9d:0d:58:
77:ec:dc:a9:39:38:81:08:45:1e:dc:86:e0:95:49:
0f:b5:02:b8:b7:b7:9b:bd:6c:c9:35:83:d7:5f:e1:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2E:AE:4C:7D:87:24:4D:B5:03:6B:7D:50:7E:CA:2D:26:FD:6C:2E
X509v3 Authority Key Identifier:
keyid:48:68:0B:DE:56:BD:3B:F5:61:57:8A:0F:E1:08:CB:C1:C6:A7:59:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGgL3la9O_VhV4oP4QjLwcanWds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/7i6uTH2HJE21A2t9UH7KLSb9bC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a2b88-fc11-4824-95dd-9a6b6eaaed38/1/SGgL3la9O_VhV4oP4QjLwcanWds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8b:41:9d:0a:0a:b1:df:81:cd:dc:7c:e8:55:ab:c8:ed:77:
c9:34:86:36:0c:d9:07:f2:44:1b:10:cc:12:cc:b0:59:c5:6e:
24:3b:92:e6:78:9e:da:1c:3a:f9:ba:00:47:5f:dc:23:4d:ed:
5c:2b:2e:35:26:9b:da:d7:30:7b:ef:2b:52:a1:38:65:0d:a8:
35:81:2b:56:8e:4c:5c:85:97:c7:a2:3d:52:1e:4f:2b:22:34:
d2:1c:60:d6:d6:68:d1:db:73:7b:33:27:e2:25:9f:d9:1e:a9:
37:5f:79:25:b1:ef:87:00:41:43:35:04:0b:23:84:39:3e:93:
43:40:df:8d:26:2b:73:51:cb:70:36:a1:bb:cc:ef:33:2a:04:
7e:13:a0:15:0d:03:58:94:90:be:0b:e0:f3:8d:3b:a2:d7:6a:
2e:92:d9:86:0d:e8:95:70:b3:5a:3f:5b:e8:c4:42:19:8e:9a:
73:fc:f6:54:26:f7:ff:65:9a:fa:24:5a:d7:5c:ce:6b:5d:4f:
97:33:34:c5:ad:32:22:66:7b:0e:8b:ac:25:36:ee:a7:f3:48:
2d:a2:99:59:e8:54:32:57:5a:fe:c9:d3:7d:c8:05:ce:5a:f8:
d5:e5:76:6e:b6:92:93:86:df:bc:84:8b:bd:56:37:b9:af:22:
0b:3c:f3:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3rKEcKPwaZXkFIZcu+Z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjgwYmRlNTZiZDNiZjU2MTU3OGEwZmUxMDhjYmMxYzZh
NzU5ZGIwHhcNMjQwMTAyMDYzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTJlYWU0YzdkODcyNDRkYjUwMzZiN2Q1MDdlY2EyZDI2ZmQ2YzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3+GUk2ZPDOBLDSyqAD4JzFLBBXT
HHnTe+GHf+dymwHAgjQuPmsf+50O2dlOG+ZKPHrT/FV1jJw7Ep016T3yPCA/VzUT
s09PJ3429eq4k91ECWA6/ihyuDvnFbD0fisX9KMuWVi6CaW0z/vBfxPGsg2PXStz
YmHCGLzV6vup3WjPFlwNj4IefHEAZMyA+6EIvILBfrg0vcoB/Pg4nB2XsGJu8lW0
fRh+Sb3cmXIw2KCnu8YK5pY+tEfZIWH1KkTiiZo/Cjmk8fsrZSmJSHnLx+pKq+Ij
vMp8adZu/AidDVh37NypOTiBCEUe3IbglUkPtQK4t7ebvWzJNYPXX+EZPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4urkx9hyRNtQNrfVB+yi0m/WwuMB8GA1UdIwQY
MBaAFEhoC95WvTv1YVeKD+EIy8HGp1nbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQt
OWE2YjZlYWFlZDM4LzEvN2k2dVRIMkhKRTIxQTJ0OVVIN0tMU2I5YkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yYTJiODgtZmMxMS00ODI0LTk1ZGQtOWE2YjZlYWFlZDM4
LzEvU0dnTDNsYTlPX1ZoVjRvUDRRakx3Y2FuV2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATh+lMA0G
CSqGSIb3DQEBCwUAA4IBAQBNi0GdCgqx34HN3HzoVavI7XfJNIY2DNkH8kQbEMwS
zLBZxW4kO5LmeJ7aHDr5ugBHX9wjTe1cKy41Jpva1zB77ytSoThlDag1gStWjkxc
hZfHoj1SHk8rIjTSHGDW1mjR23N7MyfiJZ/ZHqk3X3klse+HAEFDNQQLI4Q5PpND
QN+NJitzUctwNqG7zO8zKgR+E6AVDQNYlJC+C+DzjTui12ouktmGDeiVcLNaP1vo
xEIZjppz/PZUJvf/ZZr6JFrXXM5rXU+XMzTFrTIiZnsOi6wlNu6n80gtoplZ6FQy
V1r+ydN9yAXOWvjV5XZutpKTht+8hIu9Vje5ryILPPM7
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:37:38 2024 by rpki-client on console-ams.rpki-client.org