Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/qWjADEHU1UpAcWpZ5oyf_H24YOQ.roa
File: qWjADEHU1UpAcWpZ5oyf_H24YOQ.roa (raw, json)
Hash identifier: 6JzvX74I9Z2c3zqoXUXsOoWqUZZFCbli1eX2lTIfCKk=
Subject key identifier: A9:68:C0:0C:41:D4:D5:4A:40:71:6A:59:E6:8C:9F:FC:7D:B8:60:E4
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 018CC9BC341E062C92B0054D4035777C4986
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/qWjADEHU1UpAcWpZ5oyf_H24YOQ.roa
Signing time: Tue 02 Jan 2024 10:33:23 +0000
ROA not before: Tue 02 Jan 2024 10:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38963
IP address blocks: 46.236.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:34:1e:06:2c:92:b0:05:4d:40:35:77:7c:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Jan 2 10:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a968c00c41d4d54a40716a59e68c9ffc7db860e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:c3:0f:bb:79:8c:c1:8f:58:68:b3:f5:ff:
50:a2:70:86:d8:40:35:f7:12:33:ad:0d:4d:7a:76:
e1:0e:2a:e9:39:a7:06:b6:7e:c1:ec:2c:a0:b4:d5:
d4:29:cf:35:b5:1e:e8:e9:46:c3:a4:22:7b:84:01:
c7:38:8a:e4:53:41:54:06:88:bb:3f:01:58:43:13:
df:49:15:a9:16:2c:14:c9:20:7b:c3:32:00:58:db:
4a:26:1f:6c:4b:0b:a2:87:69:8f:3e:60:5d:8d:b5:
c1:9a:af:1e:5e:14:91:06:6a:41:06:80:ff:25:91:
97:32:62:32:bd:53:70:3f:39:d5:d5:55:e3:12:c1:
62:09:02:c1:c2:28:44:38:47:de:22:5c:ce:c2:c9:
8e:2b:6d:0f:7d:9b:1d:b5:dc:7c:42:d1:c9:4e:ba:
76:dd:89:ce:d3:04:c6:02:40:02:73:75:d9:33:61:
2a:93:f6:d7:43:b3:a8:af:13:a0:38:0c:d3:19:1a:
98:a8:fe:26:2a:dd:43:88:09:82:70:14:d9:83:18:
c8:eb:f8:cf:ec:75:b1:96:77:6f:8a:0e:03:5b:15:
27:7e:59:f8:c5:c8:7a:e1:73:a4:eb:27:47:c7:f0:
92:5c:ed:55:cd:46:17:91:bd:54:33:f3:c8:bc:29:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:68:C0:0C:41:D4:D5:4A:40:71:6A:59:E6:8C:9F:FC:7D:B8:60:E4
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/qWjADEHU1UpAcWpZ5oyf_H24YOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.63.0/24
Signature Algorithm: sha256WithRSAEncryption
16:21:36:d9:82:db:1c:4a:3e:28:01:1d:2b:fc:4c:23:9b:fb:
59:da:39:90:f3:2b:7d:7f:84:3b:93:ad:18:13:7f:42:a4:52:
92:a7:e0:9f:eb:94:33:14:c8:2d:0b:ad:e0:35:4f:be:f1:5d:
4a:ac:0c:66:13:ec:b3:15:fa:4e:f0:4c:3c:42:d3:3e:4f:64:
89:7d:39:31:48:6c:2c:f8:0b:b9:f5:1f:aa:c4:c4:80:67:41:
14:39:c7:ca:3c:a3:ce:3f:5b:b6:ca:83:16:f8:67:c7:31:94:
5f:71:9c:60:57:7f:48:1b:65:b9:bc:68:c0:cf:4f:2c:31:39:
89:9c:cd:a5:66:3f:d9:5f:01:31:80:56:31:63:51:5f:ad:19:
83:c6:43:a6:2e:25:fc:5e:ce:91:c5:5e:31:7e:93:c6:cd:79:
93:ce:ef:37:5d:2b:fe:54:91:5e:84:f4:fb:a7:b2:4b:3e:74:
68:ac:19:d3:1a:65:24:f7:41:5e:7e:2f:a5:82:f5:86:f2:38:
4c:42:e1:c1:e9:e9:68:74:ee:c3:65:9c:61:10:14:8e:22:98:
8b:52:61:5c:fd:9a:c7:6c:9d:aa:04:ac:07:cf:58:35:61:92:
58:8e:27:94:d4:c1:b8:c8:fd:60:82:9e:b2:14:52:5b:2c:d2:
ae:73:48:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvDQeBiySsAVNQDV3fEmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjQwMTAyMTAzMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTY4YzAwYzQxZDRkNTRhNDA3MTZhNTllNjhjOWZmYzdkYjg2MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZDDD7t5jMGPWGiz9f9QonCG2EA1
9xIzrQ1NenbhDirpOacGtn7B7CygtNXUKc81tR7o6UbDpCJ7hAHHOIrkU0FUBoi7
PwFYQxPfSRWpFiwUySB7wzIAWNtKJh9sSwuih2mPPmBdjbXBmq8eXhSRBmpBBoD/
JZGXMmIyvVNwPznV1VXjEsFiCQLBwihEOEfeIlzOwsmOK20PfZsdtdx8QtHJTrp2
3YnO0wTGAkACc3XZM2Eqk/bXQ7OorxOgOAzTGRqYqP4mKt1DiAmCcBTZgxjI6/jP
7HWxlndvig4DWxUnfln4xch64XOk6ydHx/CSXO1VzUYXkb1UM/PIvCm0OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKlowAxB1NVKQHFqWeaMn/x9uGDkMB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvcVdqQURFSFUxVXBBY1dwWjVveWZfSDI0WU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuw/MA0G
CSqGSIb3DQEBCwUAA4IBAQAWITbZgtscSj4oAR0r/Ewjm/tZ2jmQ8yt9f4Q7k60Y
E39CpFKSp+Cf65QzFMgtC63gNU++8V1KrAxmE+yzFfpO8Ew8QtM+T2SJfTkxSGws
+Au59R+qxMSAZ0EUOcfKPKPOP1u2yoMW+GfHMZRfcZxgV39IG2W5vGjAz08sMTmJ
nM2lZj/ZXwExgFYxY1FfrRmDxkOmLiX8Xs6RxV4xfpPGzXmTzu83XSv+VJFehPT7
p7JLPnRorBnTGmUk90Fefi+lgvWG8jhMQuHB6elodO7DZZxhEBSOIpiLUmFc/ZrH
bJ2qBKwHz1g1YZJYjieU1MG4yP1ggp6yFFJbLNKuc0hm
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:15 2024 by rpki-client on console-fra.rpki-client.org