Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/L5kKiReTR9nfnOHu32gyFYbLbuw.roa
File: L5kKiReTR9nfnOHu32gyFYbLbuw.roa (raw, json)
Hash identifier: OPx5YHeDvj0Tr044MT9RBSUrUObjRjjQbfpOmStoK3U=
Subject key identifier: 2F:99:0A:89:17:93:47:D9:DF:9C:E1:EE:DF:68:32:15:86:CB:6E:EC
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 01914554B494D52D22BC2C7F2BD1B3C174E1
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/L5kKiReTR9nfnOHu32gyFYbLbuw.roa
Signing time: Mon 12 Aug 2024 06:44:24 +0000
ROA not before: Mon 12 Aug 2024 06:44:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 45.153.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:54:b4:94:d5:2d:22:bc:2c:7f:2b:d1:b3:c1:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Aug 12 06:44:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f990a89179347d9df9ce1eedf68321586cb6eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:fa:8a:87:ec:c4:75:8c:df:a2:ac:c6:69:
64:06:93:6b:94:3d:f8:82:3e:fb:70:e5:a5:7d:e9:
bc:28:70:a2:9b:78:cc:8d:23:66:04:0f:c5:03:a6:
a7:75:ed:65:32:df:e1:9f:5f:e5:fa:23:39:c4:0a:
46:19:8e:8d:b3:58:1e:40:9d:f5:bf:11:d5:6b:a7:
c7:91:a6:18:6a:03:2b:f1:ae:39:03:b1:2c:ee:62:
fd:ef:49:a4:12:36:ab:c5:94:0d:67:a6:01:30:f5:
b7:83:09:86:ab:49:68:8e:f1:4a:07:72:c3:42:24:
b8:9f:e2:27:42:f4:55:59:34:3b:00:cc:0f:b1:c4:
8a:5f:5d:a2:d3:ed:d9:36:4d:c9:6d:49:10:ec:e1:
fe:5c:7c:9f:de:20:60:e9:15:11:72:99:82:b1:a0:
7f:0f:26:3c:0e:9f:f7:c8:ae:6c:45:eb:c3:82:d2:
a1:8c:c3:47:4e:ae:65:31:71:b8:b3:35:4e:d5:68:
d0:9f:e9:94:88:25:39:14:f0:0f:95:b6:80:9f:9d:
0a:26:4e:89:8c:53:b5:63:6b:e8:04:a7:26:6c:54:
4d:2b:9c:17:1c:78:e6:c0:fa:4d:f2:97:e6:56:58:
8b:38:a8:4a:75:ca:ec:0c:f7:a8:31:36:a7:db:5a:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:0A:89:17:93:47:D9:DF:9C:E1:EE:DF:68:32:15:86:CB:6E:EC
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/L5kKiReTR9nfnOHu32gyFYbLbuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.160.0/22
Signature Algorithm: sha256WithRSAEncryption
28:55:0b:a9:2d:bb:71:2a:f2:65:46:c2:54:9a:1d:67:fb:e1:
da:47:2e:85:8e:16:72:05:d4:34:80:01:3d:5d:6c:9c:59:ea:
e9:66:58:46:4b:38:fe:07:27:39:8c:78:ff:a0:18:df:2a:fb:
35:7b:d7:bb:8a:e9:45:c5:61:31:50:ce:28:22:34:db:13:89:
c4:c6:61:81:b1:28:9c:4c:c9:f6:4a:78:a7:8d:6d:e8:92:1e:
ac:41:ac:a0:4e:6c:8a:bc:95:7e:e3:1a:9a:ec:e8:e5:98:9e:
3d:a1:f8:22:3e:be:bd:b8:de:d8:e5:c2:e6:eb:88:40:49:14:
ce:fe:05:31:48:c1:4c:0f:23:1e:56:0a:2f:61:98:7a:ff:04:
af:3a:3d:f1:b5:9e:96:62:6c:7a:f8:81:eb:06:03:c3:1b:0f:
6f:b7:77:6d:a4:56:3b:f0:93:f2:05:13:9d:44:55:c6:fc:df:
a4:75:b5:39:71:e0:fa:30:bd:bc:e6:e0:2f:ce:a4:3c:86:b1:
39:2b:6a:5f:3a:16:5d:04:2b:60:36:e4:ab:81:67:e6:96:c8:
27:df:cd:25:f9:fe:cd:8a:f5:69:da:3a:e5:b1:58:6b:0f:79:
09:a5:cc:8d:93:46:97:71:5c:53:32:4b:8d:c5:14:28:3e:68:
52:c6:71:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFFVLSU1S0ivCx/K9GzwXThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjQwODEyMDY0NDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjk5MGE4OTE3OTM0N2Q5ZGY5Y2UxZWVkZjY4MzIxNTg2Y2I2ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNj6iofsxHWM36KsxmlkBpNrlD34
gj77cOWlfem8KHCim3jMjSNmBA/FA6ande1lMt/hn1/l+iM5xApGGY6Ns1geQJ31
vxHVa6fHkaYYagMr8a45A7Es7mL970mkEjarxZQNZ6YBMPW3gwmGq0lojvFKB3LD
QiS4n+InQvRVWTQ7AMwPscSKX12i0+3ZNk3JbUkQ7OH+XHyf3iBg6RURcpmCsaB/
DyY8Dp/3yK5sRevDgtKhjMNHTq5lMXG4szVO1WjQn+mUiCU5FPAPlbaAn50KJk6J
jFO1Y2voBKcmbFRNK5wXHHjmwPpN8pfmVliLOKhKdcrsDPeoMTan21oJjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+ZCokXk0fZ35zh7t9oMhWGy27sMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvTDVrS2lSZVRSOW5mbk9IdTMyZ3lGWWJMYnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZmgMA0G
CSqGSIb3DQEBCwUAA4IBAQAoVQupLbtxKvJlRsJUmh1n++HaRy6FjhZyBdQ0gAE9
XWycWerpZlhGSzj+Byc5jHj/oBjfKvs1e9e7iulFxWExUM4oIjTbE4nExmGBsSic
TMn2SninjW3okh6sQaygTmyKvJV+4xqa7OjlmJ49ofgiPr69uN7Y5cLm64hASRTO
/gUxSMFMDyMeVgovYZh6/wSvOj3xtZ6WYmx6+IHrBgPDGw9vt3dtpFY78JPyBROd
RFXG/N+kdbU5ceD6ML285uAvzqQ8hrE5K2pfOhZdBCtgNuSrgWfmlsgn380l+f7N
ivVp2jrlsVhrD3kJpcyNk0aXcVxTMkuNxRQoPmhSxnEq
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:43:47 2024 by rpki-client on console-ams.rpki-client.org