Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/e7a1iOVtg9fTviHXygkb6HooCdQ.roa
File: e7a1iOVtg9fTviHXygkb6HooCdQ.roa (raw, json)
Hash identifier: n9Ig+1ewhbeFasYqHaSdSIHMPDWbAlsmkQrZ+ZE0IvQ=
Subject key identifier: 7B:B6:B5:88:E5:6D:83:D7:D3:BE:21:D7:CA:09:1B:E8:7A:28:09:D4
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 018CCA2B9FCAD7550479658434F8444502EE
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/e7a1iOVtg9fTviHXygkb6HooCdQ.roa
Signing time: Tue 02 Jan 2024 12:35:05 +0000
ROA not before: Tue 02 Jan 2024 12:35:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 45.82.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9f:ca:d7:55:04:79:65:84:34:f8:44:45:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 2 12:35:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bb6b588e56d83d7d3be21d7ca091be87a2809d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:26:fc:e7:be:df:c9:be:f9:25:84:fd:c9:
ed:12:da:bb:f4:e0:1d:41:08:12:f8:ba:b2:9d:64:
f1:08:1a:de:03:24:17:6b:7c:6e:13:6c:88:5e:e0:
d8:c6:42:92:05:14:ef:82:9c:89:d1:60:60:9b:75:
a6:17:b9:54:5a:3b:07:81:02:77:c8:38:66:83:3b:
47:32:b1:8b:51:53:0c:c8:b5:77:f0:c7:83:45:68:
41:21:ec:56:8d:0a:1d:8c:e9:2d:b6:68:4d:5a:ce:
3a:fc:8b:59:75:f3:2e:76:bb:9e:5b:05:7c:48:98:
b4:4f:66:3f:68:1b:40:01:4c:0b:3c:3e:4c:e6:34:
39:42:16:af:c9:5f:a1:53:2b:58:39:cc:6f:6f:45:
8c:3d:a6:c5:8b:c6:92:5a:1e:33:81:d5:c7:9f:eb:
15:ae:b9:3f:d1:79:b8:51:4b:28:a1:1e:ac:cf:89:
82:b5:b6:4b:da:10:62:83:90:cd:d6:9e:d3:8b:25:
75:ae:b5:4b:92:7e:9e:65:34:c8:72:5f:41:66:95:
28:83:67:c2:8d:b6:52:ce:50:5a:7a:c6:d7:5c:a7:
80:7d:18:24:da:00:76:5c:b2:f4:3d:79:06:73:e0:
56:db:55:34:4e:a1:ad:63:54:3b:34:8f:4a:ea:d5:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B6:B5:88:E5:6D:83:D7:D3:BE:21:D7:CA:09:1B:E8:7A:28:09:D4
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/e7a1iOVtg9fTviHXygkb6HooCdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:fb:e9:6c:70:6c:b0:24:c5:9d:e6:f7:2d:a0:94:d6:22:
2a:77:9a:86:10:c2:8f:24:0f:6d:41:b4:f0:04:99:13:7a:cd:
c9:24:1c:34:ae:72:76:22:fd:03:bc:67:4c:40:5b:e7:48:55:
e6:2e:bd:0f:f9:35:76:9b:e4:94:15:40:a4:6a:cf:93:42:ad:
2b:44:a6:92:f5:18:2d:65:ca:49:aa:06:e5:91:32:a8:12:c8:
7f:1d:f1:ed:61:a6:bd:a1:18:c3:eb:e5:c8:bb:5a:b7:3b:89:
ad:65:1d:05:03:ad:5c:0c:35:af:27:86:60:13:23:f3:ed:ad:
28:47:d1:02:10:67:45:fd:4a:4a:54:14:af:29:1e:04:2f:79:
27:57:c1:72:0b:00:07:9d:0f:22:3b:4a:84:79:3a:24:45:85:
b6:c9:a8:fa:ad:51:93:e8:2c:cb:c4:a2:9d:52:e9:8a:b9:8a:
f4:ea:ab:f9:96:1f:25:01:a5:6d:be:20:10:65:02:f8:64:c6:
1c:6e:e4:64:2e:e4:70:9b:a1:a3:aa:ae:29:f9:21:1c:75:54:
f8:78:1e:71:32:eb:22:a7:99:ff:46:a8:96:8c:a2:e2:72:27:
97:f1:cd:e0:c0:18:94:30:c3:fd:4b:56:61:b1:ca:30:8f:59:
3e:2b:2c:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK5/K11UEeWWENPhERQLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjQwMTAyMTIzNTA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI2YjU4OGU1NmQ4M2Q3ZDNiZTIxZDdjYTA5MWJlODdhMjgwOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J8m/Oe+38m++SWE/cntEtq79OAd
QQgS+LqynWTxCBreAyQXa3xuE2yIXuDYxkKSBRTvgpyJ0WBgm3WmF7lUWjsHgQJ3
yDhmgztHMrGLUVMMyLV38MeDRWhBIexWjQodjOkttmhNWs46/ItZdfMudrueWwV8
SJi0T2Y/aBtAAUwLPD5M5jQ5QhavyV+hUytYOcxvb0WMPabFi8aSWh4zgdXHn+sV
rrk/0Xm4UUsooR6sz4mCtbZL2hBig5DN1p7TiyV1rrVLkn6eZTTIcl9BZpUog2fC
jbZSzlBaesbXXKeAfRgk2gB2XLL0PXkGc+BW21U0TqGtY1Q7NI9K6tUseQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHu2tYjlbYPX074h18oJG+h6KAnUMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvZTdhMWlPVnRnOWZUdmlIWHlna2I2SG9vQ2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVJTMA0G
CSqGSIb3DQEBCwUAA4IBAQCi+fvpbHBssCTFneb3LaCU1iIqd5qGEMKPJA9tQbTw
BJkTes3JJBw0rnJ2Iv0DvGdMQFvnSFXmLr0P+TV2m+SUFUCkas+TQq0rRKaS9Rgt
ZcpJqgblkTKoEsh/HfHtYaa9oRjD6+XIu1q3O4mtZR0FA61cDDWvJ4ZgEyPz7a0o
R9ECEGdF/UpKVBSvKR4EL3knV8FyCwAHnQ8iO0qEeTokRYW2yaj6rVGT6CzLxKKd
UumKuYr06qv5lh8lAaVtviAQZQL4ZMYcbuRkLuRwm6Gjqq4p+SEcdVT4eB5xMusi
p5n/RqiWjKLicieX8c3gwBiUMMP9S1Zhscowj1k+KywI
-----END CERTIFICATE-----
Generated at Tue Jun 25 20:20:51 2024 by rpki-client on console-fra.rpki-client.org