Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWUlWQosR53BZEJnpvVCzRr0glI.roa
File: NWUlWQosR53BZEJnpvVCzRr0glI.roa (raw, json)
Hash identifier: 0cpMdgtB8qODpaShenXS5NM0Lw8pC+TjqhDSu/LCqAw=
Subject key identifier: 35:65:25:59:0A:2C:47:9D:C1:64:42:67:A6:F5:42:CD:1A:F4:82:52
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936C727575EA244E692AFEE2A31478
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWUlWQosR53BZEJnpvVCzRr0glI.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 45.133.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6c:72:75:75:ea:24:4e:69:2a:fe:e2:a3:14:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356525590a2c479dc1644267a6f542cd1af48252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:9a:19:ba:10:68:81:06:d2:04:96:e4:cf:
35:e1:30:01:83:2c:8b:06:4d:36:84:a0:99:f1:9c:
20:83:2b:56:6b:f3:53:eb:4f:b3:fb:bb:fa:e8:94:
1c:ab:1b:b6:57:84:b4:31:d7:92:37:48:cc:87:b8:
99:48:ba:3d:19:2a:6d:31:90:04:6b:a4:48:a3:ad:
d1:7a:0d:44:e7:01:4b:26:82:31:6e:18:6d:03:bf:
40:00:98:3c:80:33:9d:be:92:b8:8a:77:e0:2e:f8:
ff:2b:60:89:2d:16:3c:c5:c3:81:92:75:93:a0:60:
d5:64:36:1c:c0:0c:2d:79:ba:1a:5a:f2:e8:ea:e1:
f4:9b:70:e6:9e:ef:6c:18:62:70:32:37:ed:79:e0:
d2:c6:22:a2:5b:74:9e:f5:52:43:33:cf:81:f9:b5:
d6:70:73:d1:e2:7a:2a:45:4c:5d:69:53:58:ff:f1:
30:73:a8:90:fa:31:7c:f5:77:a8:24:89:f5:2a:87:
e2:de:4a:72:db:06:58:56:61:f3:9b:88:fe:59:5f:
d3:46:1d:ea:7c:5b:7f:72:53:58:29:fb:44:8c:6d:
7b:51:1c:10:66:62:9e:fe:27:3e:36:2d:0b:1d:a4:
1b:4f:e1:d7:dd:5d:22:d4:09:39:5c:6a:3f:68:ec:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:25:59:0A:2C:47:9D:C1:64:42:67:A6:F5:42:CD:1A:F4:82:52
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/NWUlWQosR53BZEJnpvVCzRr0glI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
05:cc:de:87:43:df:38:54:21:85:8a:7d:76:93:88:17:91:12:
78:e7:db:91:0a:d0:30:56:ab:7b:21:cc:bb:b6:b7:ca:50:d8:
87:8f:6e:39:dc:d4:fd:af:14:38:9a:a1:e1:5e:f1:1c:ec:1e:
b4:06:73:14:34:e1:61:52:f2:e8:95:8d:e2:d1:15:be:55:4c:
cb:10:a1:7f:89:cd:2f:bd:27:db:75:9e:11:6e:af:d4:20:08:
78:94:ff:69:51:bb:8e:94:60:43:b8:a5:fe:48:bb:26:a2:38:
e5:6f:9a:66:c3:d3:d9:62:7f:a5:52:72:be:33:76:30:8f:d7:
d1:a8:72:3f:c4:f8:d2:9b:0e:94:28:54:eb:38:ce:25:8e:c5:
e8:94:5a:f9:07:7e:af:fd:79:9f:97:02:da:60:41:d2:fc:3c:
24:5c:11:e3:d8:cf:7d:8d:9b:27:fb:51:83:8f:fc:97:da:3e:
be:0e:43:42:6d:ae:50:5c:67:fa:ae:bf:bd:7f:f8:b0:a4:72:
ed:2e:43:3e:c5:dc:63:7b:38:c7:cc:4d:b4:12:19:82:30:6d:
29:3c:d2:92:69:e8:6a:ab:c2:e0:2b:5b:cb:6f:6c:b2:6a:30:
7b:d4:9c:83:bc:58:e4:7b:c5:9e:ec:02:a8:39:b9:b3:f4:35:
c5:a7:3e:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk2xydXXqJE5pKv7ioxR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTY1MjU1OTBhMmM0NzlkYzE2NDQyNjdhNmY1NDJjZDFhZjQ4MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiGaGboQaIEG0gSW5M814TABgyyL
Bk02hKCZ8ZwggytWa/NT60+z+7v66JQcqxu2V4S0MdeSN0jMh7iZSLo9GSptMZAE
a6RIo63Reg1E5wFLJoIxbhhtA79AAJg8gDOdvpK4infgLvj/K2CJLRY8xcOBknWT
oGDVZDYcwAwteboaWvLo6uH0m3Dmnu9sGGJwMjfteeDSxiKiW3Se9VJDM8+B+bXW
cHPR4noqRUxdaVNY//Ewc6iQ+jF89XeoJIn1Kofi3kpy2wZYVmHzm4j+WV/TRh3q
fFt/clNYKftEjG17URwQZmKe/ic+Ni0LHaQbT+HX3V0i1Ak5XGo/aOy4CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVlJVkKLEedwWRCZ6b1Qs0a9IJSMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvTldVbFdRb3NSNTNCWkVKbnB2VkN6UnIwZ2xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYWcMA0G
CSqGSIb3DQEBCwUAA4IBAQAFzN6HQ984VCGFin12k4gXkRJ459uRCtAwVqt7Icy7
trfKUNiHj2453NT9rxQ4mqHhXvEc7B60BnMUNOFhUvLolY3i0RW+VUzLEKF/ic0v
vSfbdZ4Rbq/UIAh4lP9pUbuOlGBDuKX+SLsmojjlb5pmw9PZYn+lUnK+M3Ywj9fR
qHI/xPjSmw6UKFTrOM4ljsXolFr5B36v/XmflwLaYEHS/DwkXBHj2M99jZsn+1GD
j/yX2j6+DkNCba5QXGf6rr+9f/iwpHLtLkM+xdxjezjHzE20EhmCMG0pPNKSaehq
q8LgK1vLb2yyajB71JyDvFjke8We7AKoObmz9DXFpz78
-----END CERTIFICATE-----
Generated at Wed Jun 26 06:53:50 2024 by rpki-client on console-fra.rpki-client.org