Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Ar-KVGiYVtpz0Y8DDHbWY1o0gTA.roa
File: Ar-KVGiYVtpz0Y8DDHbWY1o0gTA.roa (raw, json)
Hash identifier: OgZ/0uDYXQVcpGfGmBp//mpVXVvMDTXYFme3AtLVQlA=
Subject key identifier: 02:BF:8A:54:68:98:56:DA:73:D1:8F:03:0C:76:D6:63:5A:34:81:30
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018F0BC3BE6F4A51843AA348A6F56142A6AE
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Ar-KVGiYVtpz0Y8DDHbWY1o0gTA.roa
Signing time: Tue 23 Apr 2024 16:22:08 +0000
ROA not before: Tue 23 Apr 2024 16:22:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 62.112.4.0/22 maxlen: 24
194.88.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:c3:be:6f:4a:51:84:3a:a3:48:a6:f5:61:42:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 23 16:22:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02bf8a54689856da73d18f030c76d6635a348130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:49:4e:24:dc:1f:48:de:88:e2:ad:5e:11:
d3:15:0e:92:38:56:09:f9:b9:14:87:6b:0f:75:71:
3b:7d:bb:ce:de:c6:75:d9:24:96:a5:02:13:86:02:
1e:03:5b:f9:46:57:fe:ed:06:fc:6a:77:4c:57:d9:
4e:c9:1b:d3:88:34:a2:f0:a6:50:84:94:36:85:f1:
3c:db:42:b9:08:d6:c5:63:22:fd:b9:bb:e6:8d:57:
94:1c:f8:e0:2b:45:be:fe:29:1e:b8:1f:a2:4a:71:
cc:ad:a4:2a:ed:98:fc:8e:0e:9c:9a:94:91:74:b2:
15:c4:d9:30:b3:d0:2c:0a:e8:84:4e:67:4c:a3:25:
8a:b9:0f:3e:4e:c0:10:5d:72:29:81:bb:d9:e9:fd:
fb:9c:60:91:99:40:e2:ff:af:25:68:81:7b:99:ee:
20:ec:2b:6e:05:ff:d7:5f:d5:67:bc:6b:02:38:83:
f3:8a:d2:37:e6:de:53:12:61:3b:1f:84:57:9a:9c:
62:1e:5b:41:d4:3e:38:c9:4f:12:9d:d6:47:27:49:
1d:f6:58:03:94:0e:b7:a3:1a:fe:1e:c6:03:a0:ac:
6c:be:fa:50:21:87:42:8f:61:f9:5d:1a:f6:da:56:
fb:7a:23:3a:d5:aa:d1:9a:a8:a2:0d:b8:28:6c:4e:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:8A:54:68:98:56:DA:73:D1:8F:03:0C:76:D6:63:5A:34:81:30
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Ar-KVGiYVtpz0Y8DDHbWY1o0gTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.4.0/22
194.88.120.0/21
Signature Algorithm: sha256WithRSAEncryption
82:4b:6c:28:0e:a9:97:e9:60:3c:59:bb:e8:9d:ca:4c:34:bd:
d6:8b:1e:f7:e5:09:7e:9d:8d:6b:9d:6e:71:a4:57:b0:2d:49:
3b:5e:f9:20:0e:20:dc:72:52:b4:0f:af:9e:75:03:a8:a9:d5:
24:76:0f:bf:18:77:94:d1:4c:74:a9:8a:c1:bb:cf:1f:64:c7:
0d:4a:bb:40:b7:e2:48:7f:a5:a7:ef:e8:c6:39:57:d6:9d:07:
7b:be:c1:61:e2:32:e1:84:f7:5e:b9:f7:ab:d0:93:8c:a0:7f:
56:96:36:99:8a:a8:e1:e9:a3:a9:c4:22:0c:6f:0c:e6:3e:dc:
3f:86:38:00:03:db:62:38:d1:6f:ad:5f:0c:df:20:8a:9e:a6:
61:26:5d:19:e9:3a:f0:a1:f9:73:c5:30:16:49:10:1e:78:c9:
6d:63:93:73:7b:5b:72:b5:be:6e:f3:28:7d:75:f7:67:cc:af:
c1:a6:29:32:58:ac:cc:83:a7:c1:3e:05:97:01:a2:b5:be:e8:
f1:8d:1f:b5:9f:4e:49:f1:86:f8:25:c3:76:74:82:f9:40:8c:
d7:8d:9a:42:15:fc:30:48:2b:65:7e:d7:8d:f3:35:db:7f:b4:
36:d3:a1:1b:61:bb:ff:09:8f:a6:59:e7:6a:51:30:85:93:2e:
81:4c:b1:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8Lw75vSlGEOqNIpvVhQqauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjQwNDIzMTYyMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmJmOGE1NDY4OTg1NmRhNzNkMThmMDMwYzc2ZDY2MzVhMzQ4MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwFJTiTcH0jeiOKtXhHTFQ6SOFYJ
+bkUh2sPdXE7fbvO3sZ12SSWpQIThgIeA1v5Rlf+7Qb8andMV9lOyRvTiDSi8KZQ
hJQ2hfE820K5CNbFYyL9ubvmjVeUHPjgK0W+/ikeuB+iSnHMraQq7Zj8jg6cmpSR
dLIVxNkws9AsCuiETmdMoyWKuQ8+TsAQXXIpgbvZ6f37nGCRmUDi/68laIF7me4g
7CtuBf/XX9VnvGsCOIPzitI35t5TEmE7H4RXmpxiHltB1D44yU8SndZHJ0kd9lgD
lA63oxr+HsYDoKxsvvpQIYdCj2H5XRr22lb7eiM61arRmqiiDbgobE6mHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAK/ilRomFbac9GPAwx21mNaNIEwMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvQXItS1ZHaVlWdHB6MFk4RERIYldZMW8wZ1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPnAEAwQD
wlh4MA0GCSqGSIb3DQEBCwUAA4IBAQCCS2woDqmX6WA8WbvoncpMNL3Wix735Ql+
nY1rnW5xpFewLUk7XvkgDiDcclK0D6+edQOoqdUkdg+/GHeU0Ux0qYrBu88fZMcN
SrtAt+JIf6Wn7+jGOVfWnQd7vsFh4jLhhPdeufer0JOMoH9WljaZiqjh6aOpxCIM
bwzmPtw/hjgAA9tiONFvrV8M3yCKnqZhJl0Z6TrwoflzxTAWSRAeeMltY5Nze1ty
tb5u8yh9dfdnzK/BpikyWKzMg6fBPgWXAaK1vujxjR+1n05J8Yb4JcN2dIL5QIzX
jZpCFfwwSCtlfteN8zXbf7Q206EbYbv/CY+mWedqUTCFky6BTLFl
-----END CERTIFICATE-----
Generated at Tue May 21 22:00:01 2024 by rpki-client on console-ams.rpki-client.org