Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/AOLtO6IKfLJc3DusEyf9Azet46k.roa
File: AOLtO6IKfLJc3DusEyf9Azet46k.roa (raw, json)
Hash identifier: cTCPGSaLaxHl3jXvg9vlImQU7JgOWsxuDq68D6k7ajA=
Subject key identifier: 00:E2:ED:3B:A2:0A:7C:B2:5C:DC:3B:AC:13:27:FD:03:37:AD:E3:A9
Certificate issuer: /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial: 018CC870BADF750A5B3A49C0D67F5B787AC6
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/AOLtO6IKfLJc3DusEyf9Azet46k.roa
Signing time: Tue 02 Jan 2024 04:31:20 +0000
ROA not before: Tue 02 Jan 2024 04:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 176.110.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:ba:df:75:0a:5b:3a:49:c0:d6:7f:5b:78:7a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Validity
Not Before: Jan 2 04:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00e2ed3ba20a7cb25cdc3bac1327fd0337ade3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:fb:31:46:78:b1:64:dc:fb:46:29:80:d4:
4c:39:1b:eb:39:40:ac:ed:3b:b2:d8:cd:87:a4:62:
0d:7f:91:74:d8:d4:a8:d2:57:99:da:b1:8d:e1:8d:
a2:c1:f8:57:5f:68:b5:28:bb:07:88:26:d1:8c:48:
cf:ca:c2:86:b9:80:40:8d:e7:92:d7:b0:79:76:bc:
d9:b6:a0:c6:68:6e:f4:8a:da:a5:ad:fb:14:46:cc:
55:a5:f0:0a:9f:e0:1a:fa:2a:5b:2f:7a:7a:87:ae:
42:de:1d:fc:43:60:17:a9:0a:83:6e:b7:9a:ea:53:
bc:67:f6:00:37:eb:c3:91:ed:f9:36:0a:72:5a:67:
18:91:47:23:28:d5:28:a0:db:74:63:21:7f:6e:fc:
2f:12:e3:e6:f7:95:14:14:0a:1b:ef:67:9c:4c:d9:
b0:f6:c0:74:8e:55:b6:ac:ed:d4:2b:ee:06:59:30:
05:df:fc:a6:77:d5:d8:b8:43:c5:5c:d8:f6:bf:42:
43:b7:2b:89:a6:76:67:59:ba:ac:7a:af:5e:03:e7:
df:29:95:71:fb:63:c7:47:1e:68:bc:98:1d:7d:49:
cb:2f:e8:cd:91:44:a1:c5:f8:27:74:db:a7:8a:e3:
ce:f3:a9:20:1f:74:2f:6a:ff:ed:97:da:77:eb:fb:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:ED:3B:A2:0A:7C:B2:5C:DC:3B:AC:13:27:FD:03:37:AD:E3:A9
X509v3 Authority Key Identifier:
keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/AOLtO6IKfLJc3DusEyf9Azet46k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ab:85:3c:66:f2:e8:43:c0:fc:6b:4a:03:24:77:00:2b:f7:
8e:2d:d7:25:13:00:27:d2:01:57:c0:39:6d:c4:31:3f:30:71:
3d:e1:fc:07:1b:42:b9:fe:23:21:2f:a6:3a:0e:6d:63:86:74:
90:4c:da:11:de:53:d4:ad:b3:e5:76:96:54:ec:5d:c0:80:79:
e8:ad:fb:52:11:b8:62:49:b0:95:49:56:ef:a7:fb:ef:6d:1c:
30:a6:9c:28:b6:6c:2f:0e:6a:28:7f:26:b6:2b:b5:95:5f:b4:
c9:ff:ab:19:05:d2:b4:06:9b:eb:4d:90:4d:a7:c1:c4:ef:6d:
bb:a5:9c:43:00:9b:f9:ea:4a:4f:c2:9d:a7:61:39:db:62:24:
d9:03:82:3e:fb:c2:5c:7a:03:38:95:49:05:22:47:ce:b4:ac:
c9:41:79:aa:8f:0b:47:a4:d1:85:5e:eb:9a:42:af:08:a7:49:
01:09:ce:80:e4:76:06:b5:85:dc:07:8b:f9:dd:9d:b0:87:7e:
81:17:c3:f6:9d:94:f5:2c:99:28:24:36:7b:bc:a1:9f:f0:e8:
1a:fe:af:ef:d1:98:b0:05:31:93:f7:dc:fc:1d:8e:75:67:96:
94:da:3a:92:19:2e:39:d3:89:a2:10:b6:05:82:2e:b4:dd:4b:
0a:84:83:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcLrfdQpbOknA1n9beHrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTRjMmZiZGYxMGY4MjMxZjNkZjUzMWNlNWEzYTJlM2Iy
M2NlZmMwHhcNMjQwMTAyMDQzMTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGUyZWQzYmEyMGE3Y2IyNWNkYzNiYWMxMzI3ZmQwMzM3YWRlM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnv7MUZ4sWTc+0YpgNRMORvrOUCs
7Tuy2M2HpGINf5F02NSo0leZ2rGN4Y2iwfhXX2i1KLsHiCbRjEjPysKGuYBAjeeS
17B5drzZtqDGaG70itqlrfsURsxVpfAKn+Aa+ipbL3p6h65C3h38Q2AXqQqDbrea
6lO8Z/YAN+vDke35NgpyWmcYkUcjKNUooNt0YyF/bvwvEuPm95UUFAob72ecTNmw
9sB0jlW2rO3UK+4GWTAF3/ymd9XYuEPFXNj2v0JDtyuJpnZnWbqseq9eA+ffKZVx
+2PHRx5ovJgdfUnLL+jNkUShxfgndNuniuPO86kgH3Qvav/tl9p36/tsMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADi7TuiCnyyXNw7rBMn/QM3reOpMB8GA1UdIwQY
MBaAFD2kwvvfEPgjHz31Mc5aOi47I878MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAt
ZDJjOTdkNjVlZmE4LzEvQU9MdE82SUtmTEpjM0R1c0V5ZjlBemV0NDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zNDljNTgtZmJiMC00ZGRkLWEwODAtZDJjOTdkNjVlZmE4
LzEvUGFUQy05OFEtQ01mUGZVeHpsbzZManNqenZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsG5oMA0G
CSqGSIb3DQEBCwUAA4IBAQAhq4U8ZvLoQ8D8a0oDJHcAK/eOLdclEwAn0gFXwDlt
xDE/MHE94fwHG0K5/iMhL6Y6Dm1jhnSQTNoR3lPUrbPldpZU7F3AgHnorftSEbhi
SbCVSVbvp/vvbRwwppwotmwvDmoofya2K7WVX7TJ/6sZBdK0BpvrTZBNp8HE7227
pZxDAJv56kpPwp2nYTnbYiTZA4I++8JcegM4lUkFIkfOtKzJQXmqjwtHpNGFXuua
Qq8Ip0kBCc6A5HYGtYXcB4v53Z2wh36BF8P2nZT1LJkoJDZ7vKGf8Oga/q/v0Ziw
BTGT99z8HY51Z5aU2jqSGS4504miELYFgi603UsKhINu
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:16 2024 by rpki-client on console-ams.rpki-client.org