Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/4qfPi2PCm4eW33gtiqhKUKqbsZg.roa
File: 4qfPi2PCm4eW33gtiqhKUKqbsZg.roa (raw, json)
Hash identifier: yTaMTuMLWncLRO9993SlcHAL+VWMgHcyPVBl62qjjQY=
Subject key identifier: E2:A7:CF:8B:63:C2:9B:87:96:DF:78:2D:8A:A8:4A:50:AA:9B:B1:98
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 018CC871586C861F09D995C9B338078DC47F
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/4qfPi2PCm4eW33gtiqhKUKqbsZg.roa
Signing time: Tue 02 Jan 2024 04:32:00 +0000
ROA not before: Tue 02 Jan 2024 04:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51112
IP address blocks: 178.217.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:58:6c:86:1f:09:d9:95:c9:b3:38:07:8d:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Jan 2 04:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2a7cf8b63c29b8796df782d8aa84a50aa9bb198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:54:c6:87:92:57:ed:6d:f3:af:c1:92:f7:
52:8c:4a:79:01:74:4f:3c:6f:0e:eb:1b:31:2a:5d:
86:50:31:67:48:5f:a1:b2:b3:28:50:ee:df:bd:2a:
6a:cf:f3:6c:d4:99:8d:17:2c:e4:fe:6a:a6:7f:98:
1b:89:a2:03:84:e7:a6:52:a4:a9:fb:5e:04:1b:7a:
9f:93:e8:2a:2c:9b:54:b9:04:72:0c:73:89:97:f1:
3e:79:6d:f5:07:fc:cb:6f:16:67:34:65:ee:76:c6:
ee:48:fa:e4:2f:40:53:b3:9a:fb:58:fd:fe:80:6f:
41:85:0c:ff:f2:34:9f:e0:1a:e7:0a:f2:0f:7c:52:
1a:85:15:4d:70:30:da:9d:72:e8:83:82:7f:54:40:
89:5c:cb:9b:a7:6f:04:66:43:b2:d0:84:14:f1:78:
5a:7f:10:de:28:77:40:4d:cb:12:bb:ea:85:c0:cd:
1e:7d:40:9c:4b:36:01:e8:c8:c7:18:17:7c:ea:3e:
9c:df:e2:b5:e0:5c:51:9d:af:8d:70:42:76:07:94:
e8:ca:87:29:9d:44:12:d7:e4:e9:81:7a:47:6d:15:
7b:1b:84:36:34:fe:22:7d:37:81:72:4f:5b:70:bd:
77:08:80:7d:4a:32:2c:7d:be:83:e6:0c:87:8f:54:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:CF:8B:63:C2:9B:87:96:DF:78:2D:8A:A8:4A:50:AA:9B:B1:98
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/4qfPi2PCm4eW33gtiqhKUKqbsZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:ea:60:4c:7a:bf:31:8c:20:48:57:90:47:a8:73:4a:30:4c:
44:1a:b4:ab:09:71:80:56:e2:96:2d:1a:2a:35:8d:2d:93:e4:
a1:3f:7c:87:da:32:e0:02:57:9e:50:51:8c:d5:6f:a7:b6:51:
cc:0a:e4:32:f4:fa:49:65:87:b4:0a:17:81:fa:68:5a:79:37:
f2:fe:20:8b:bc:10:10:49:c8:72:50:b3:4e:54:4e:b7:2a:f5:
9c:5f:62:df:9a:5d:7c:ac:e6:c1:d1:d7:72:24:75:7f:d9:bb:
c7:90:c6:c8:e1:ff:3f:73:4a:ec:2f:ef:91:f4:98:76:51:0c:
ac:ab:c9:37:4b:c7:c4:f7:1d:ff:9d:38:d9:9e:52:dd:a8:e3:
44:a0:0c:bc:d4:23:ad:04:77:c0:07:da:42:5c:15:63:eb:2c:
10:9e:c7:e6:ec:4e:40:1a:b6:b0:c0:73:7e:a0:93:db:c9:c3:
b6:e9:d2:c9:0d:75:c9:80:b9:12:51:cc:82:d5:38:04:37:00:
cb:36:7f:eb:31:09:23:c6:dc:03:20:a4:5a:65:5d:08:91:ff:
5a:55:99:1e:d3:b5:0a:09:b1:ed:44:82:36:65:be:f7:2d:06:
db:62:91:39:6c:4f:f8:2d:88:0c:e5:7d:b4:ea:2c:d0:b7:8d:
70:cd:85:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcVhshh8J2ZXJszgHjcR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi
ODViZjMwHhcNMjQwMTAyMDQzMjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmE3Y2Y4YjYzYzI5Yjg3OTZkZjc4MmQ4YWE4NGE1MGFhOWJiMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnhUxoeSV+1t86/BkvdSjEp5AXRP
PG8O6xsxKl2GUDFnSF+hsrMoUO7fvSpqz/Ns1JmNFyzk/mqmf5gbiaIDhOemUqSp
+14EG3qfk+gqLJtUuQRyDHOJl/E+eW31B/zLbxZnNGXudsbuSPrkL0BTs5r7WP3+
gG9BhQz/8jSf4BrnCvIPfFIahRVNcDDanXLog4J/VECJXMubp28EZkOy0IQU8Xha
fxDeKHdATcsSu+qFwM0efUCcSzYB6MjHGBd86j6c3+K14FxRna+NcEJ2B5Toyocp
nUQS1+TpgXpHbRV7G4Q2NP4ifTeBck9bcL13CIB9SjIsfb6D5gyHj1Q8YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKnz4tjwpuHlt94LYqoSlCqm7GYMB8GA1UdIwQY
MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt
ODk4OThiMmVkMTVlLzEvNHFmUGkyUENtNGVXMzNndGlxaEtVS3Fic1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl
LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstlIMA0G
CSqGSIb3DQEBCwUAA4IBAQCP6mBMer8xjCBIV5BHqHNKMExEGrSrCXGAVuKWLRoq
NY0tk+ShP3yH2jLgAleeUFGM1W+ntlHMCuQy9PpJZYe0CheB+mhaeTfy/iCLvBAQ
SchyULNOVE63KvWcX2Lfml18rObB0ddyJHV/2bvHkMbI4f8/c0rsL++R9Jh2UQys
q8k3S8fE9x3/nTjZnlLdqONEoAy81COtBHfAB9pCXBVj6ywQnsfm7E5AGrawwHN+
oJPbycO26dLJDXXJgLkSUcyC1TgENwDLNn/rMQkjxtwDIKRaZV0Ikf9aVZke07UK
CbHtRII2Zb73LQbbYpE5bE/4LYgM5X206izQt41wzYV3
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:39:05 2024 by rpki-client on console-ams.rpki-client.org