Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/b51F7KerLPNWUtXKRySd6xvKunE.roa
File: b51F7KerLPNWUtXKRySd6xvKunE.roa (raw, json)
Hash identifier: lFC0KGtm2fIPPd11KOgVeig5CboZTzQ82Pff8pq/vyo=
Subject key identifier: 6F:9D:45:EC:A7:AB:2C:F3:56:52:D5:CA:47:24:9D:EB:1B:CA:BA:71
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E33520AAA129D54DFEF75161AC0A38DE1
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/b51F7KerLPNWUtXKRySd6xvKunE.roa
Signing time: Tue 12 Mar 2024 15:39:58 +0000
ROA not before: Tue 12 Mar 2024 15:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64492
IP address blocks: 178.212.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:52:0a:aa:12:9d:54:df:ef:75:16:1a:c0:a3:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 12 15:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9d45eca7ab2cf35652d5ca47249deb1bcaba71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:88:ad:ac:87:cb:11:b7:6a:d8:f0:cf:8d:
e8:48:43:95:8e:af:de:10:72:ad:b7:e3:12:79:fa:
2f:0e:f3:f4:3b:e4:03:dc:1b:75:d0:49:81:6a:c4:
1c:b1:f0:a0:86:7f:d1:68:15:c1:dd:3b:96:c9:43:
58:db:22:ac:8c:9d:9d:e2:7e:4f:b4:f8:ec:5f:b0:
97:7b:d7:8a:6a:92:67:1f:94:14:59:4b:8f:de:df:
33:72:b7:d5:1a:7f:3e:e8:7e:08:18:7d:3f:fc:c0:
39:5f:0e:c0:62:73:59:b4:b2:97:40:8b:cd:ba:a8:
68:21:73:5c:f8:6e:a5:9d:3f:19:58:1b:d9:d0:5f:
a9:4a:fb:c2:63:df:d9:48:c5:fb:6a:cc:e1:36:43:
7a:78:66:12:23:86:d6:6a:d1:06:65:0f:18:26:70:
0a:18:40:90:19:77:94:a6:0e:0f:9e:92:14:60:b9:
f6:5c:f8:99:13:69:31:9f:eb:6d:ca:95:5c:48:de:
1f:b1:97:ef:10:27:34:27:ac:ed:56:55:8e:1c:09:
fb:a3:76:6a:bf:ab:0a:2f:15:30:41:65:63:9c:f2:
a2:da:6c:3d:7f:f0:9a:08:a0:55:8e:29:4b:77:c4:
93:4c:d3:40:a2:90:e8:cd:de:8a:5a:af:c6:ec:b0:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:45:EC:A7:AB:2C:F3:56:52:D5:CA:47:24:9D:EB:1B:CA:BA:71
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/b51F7KerLPNWUtXKRySd6xvKunE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
61:60:78:6f:e3:91:0e:85:24:37:8b:f9:60:72:f6:d6:df:1c:
65:1d:e3:23:85:53:4f:ed:99:32:e4:5d:ea:f8:3a:86:20:c1:
3a:59:9c:9b:15:04:b1:75:08:e0:19:55:ce:41:fb:b1:e3:15:
bb:00:0a:03:92:90:01:d8:5f:bf:fa:a7:f2:88:4a:04:5a:e9:
88:5d:93:e2:20:ad:fb:87:6e:1e:de:0d:f6:d1:d8:96:2f:c3:
db:f3:f7:a7:83:cd:21:38:63:4c:64:61:53:eb:99:63:e4:d7:
1c:34:f8:0d:d7:69:b2:8f:c8:83:4e:78:49:8a:9c:cf:63:a4:
0d:31:84:8f:03:bb:fa:27:d9:06:6c:3d:1c:81:b5:3b:85:b0:
bf:bb:b7:58:70:cf:a4:97:6c:83:21:37:8d:e5:7e:4a:1a:3b:
22:47:ef:fd:2d:22:fe:8a:54:41:6a:ba:87:7d:e9:2b:ae:2f:
77:ad:7f:dd:41:2b:07:f1:00:14:31:48:8e:e2:91:8f:1b:e5:
80:44:60:6b:5e:68:a1:e6:f9:33:a0:81:62:d8:f6:7a:6d:fe:
b2:2d:bc:aa:d0:7d:c1:9d:cc:81:f8:e7:e9:4b:bb:cf:3c:85:
44:81:85:36:53:eb:cf:30:63:0b:d0:c7:94:bb:09:97:59:32:
49:e6:64:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4zUgqqEp1U3+91FhrAo43hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMzEyMTUzOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjlkNDVlY2E3YWIyY2YzNTY1MmQ1Y2E0NzI0OWRlYjFiY2FiYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkWIrayHyxG3atjwz43oSEOVjq/e
EHKtt+MSefovDvP0O+QD3Bt10EmBasQcsfCghn/RaBXB3TuWyUNY2yKsjJ2d4n5P
tPjsX7CXe9eKapJnH5QUWUuP3t8zcrfVGn8+6H4IGH0//MA5Xw7AYnNZtLKXQIvN
uqhoIXNc+G6lnT8ZWBvZ0F+pSvvCY9/ZSMX7aszhNkN6eGYSI4bWatEGZQ8YJnAK
GECQGXeUpg4PnpIUYLn2XPiZE2kxn+ttypVcSN4fsZfvECc0J6ztVlWOHAn7o3Zq
v6sKLxUwQWVjnPKi2mw9f/CaCKBVjilLd8STTNNAopDozd6KWq/G7LCkbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+dReynqyzzVlLVykcknesbyrpxMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvYjUxRjdLZXJMUE5XVXRYS1J5U2Q2eHZLdW5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstSPMA0G
CSqGSIb3DQEBCwUAA4IBAQBhYHhv45EOhSQ3i/lgcvbW3xxlHeMjhVNP7Zky5F3q
+DqGIME6WZybFQSxdQjgGVXOQfux4xW7AAoDkpAB2F+/+qfyiEoEWumIXZPiIK37
h24e3g320diWL8Pb8/eng80hOGNMZGFT65lj5NccNPgN12myj8iDTnhJipzPY6QN
MYSPA7v6J9kGbD0cgbU7hbC/u7dYcM+kl2yDITeN5X5KGjsiR+/9LSL+ilRBarqH
fekrri93rX/dQSsH8QAUMUiO4pGPG+WARGBrXmih5vkzoIFi2PZ6bf6yLbyq0H3B
ncyB+OfpS7vPPIVEgYU2U+vPMGML0MeUuwmXWTJJ5mTh
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:42:51 2024 by rpki-client on console-ams.rpki-client.org