Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N6XnemTgdfaxbrkNkkzlgZrkY7g.roa
File: N6XnemTgdfaxbrkNkkzlgZrkY7g.roa (raw, json)
Hash identifier: TxDUSc6TfahCBJJLoE3CKn1cCwKENqlu19tsfexKbDc=
Subject key identifier: 37:A5:E7:7A:64:E0:75:F6:B1:6E:B9:0D:92:4C:E5:81:9A:E4:63:B8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC2579C5555790D1DC150EC5A1813A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N6XnemTgdfaxbrkNkkzlgZrkY7g.roa
Signing time: Tue 02 Jan 2024 10:33:19 +0000
ROA not before: Tue 02 Jan 2024 10:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58955
IP address blocks: 45.128.25.0/24 maxlen: 24
45.128.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:25:79:c5:55:57:90:d1:dc:15:0e:c5:a1:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a5e77a64e075f6b16eb90d924ce5819ae463b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:00:9a:72:7d:78:b9:87:06:56:b9:ca:56:
5e:46:54:f2:a7:89:aa:ae:5a:68:11:57:32:6c:fc:
8b:ba:00:d9:30:fe:3f:bb:90:6a:89:41:44:24:0b:
cb:df:d2:de:6d:03:9a:31:fd:2e:87:d7:d0:f6:56:
56:1e:a3:cd:c7:53:10:16:f1:03:8b:e2:c0:f9:b1:
12:1b:a8:41:23:85:6b:7c:43:26:9a:c3:05:28:90:
12:61:e4:7f:b7:6c:1f:fa:50:2f:b3:e2:df:99:37:
02:05:00:bd:5a:31:fd:30:6a:5d:e9:ff:22:72:91:
19:fb:c4:6a:dc:61:77:bb:c6:a4:d3:01:15:df:59:
6e:b1:b2:ac:a0:79:2d:1b:3e:d5:5a:a8:3a:f2:c8:
8e:24:5f:3c:29:3b:e5:fb:94:b5:c0:9a:84:70:81:
22:34:8c:dd:51:4a:63:d1:c8:04:c4:b2:41:98:8e:
ce:68:58:ca:0f:f7:94:5c:05:35:6d:9a:9a:f0:b3:
99:66:19:9d:46:d3:c0:45:b1:8c:04:18:f7:2e:79:
1e:6f:3d:e9:7e:83:d9:fe:39:5d:4a:02:72:e1:fd:
2d:9f:48:b4:25:81:d0:5c:8c:d7:cf:be:15:e3:57:
43:1f:ee:1c:fe:7c:23:b1:54:02:35:23:f2:5e:34:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:E7:7A:64:E0:75:F6:B1:6E:B9:0D:92:4C:E5:81:9A:E4:63:B8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N6XnemTgdfaxbrkNkkzlgZrkY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.25.0-45.128.26.255
Signature Algorithm: sha256WithRSAEncryption
74:8f:6c:f0:05:db:4c:0f:39:0f:1c:27:d5:15:bc:9f:56:9a:
90:62:d8:6c:7e:2b:bf:41:5f:38:18:b0:eb:fe:72:53:d5:d5:
ad:1d:80:45:ca:d5:de:73:bb:7c:fa:3d:a4:2f:75:a2:c8:06:
66:4b:ee:34:8c:94:18:07:84:0b:dc:a7:a7:38:05:a1:13:de:
18:31:64:d3:ff:b8:06:f0:a7:08:b4:3f:e8:df:48:05:99:09:
56:a0:4d:50:84:0f:30:09:39:66:24:5f:a7:1e:4d:3b:b0:cb:
dd:ec:f2:f5:2b:92:b0:b1:d4:49:ca:c8:02:d2:1a:f4:c2:32:
90:bc:95:63:98:51:a7:e9:fb:b5:8a:ab:11:8a:32:d2:77:c6:
3a:19:3a:58:bc:0c:84:cf:5b:00:e4:ab:45:0e:00:5f:8e:e0:
1f:71:dc:0f:17:f9:50:33:4f:a5:c4:12:3c:c3:be:dd:c4:b4:
5a:de:7a:d8:04:da:ba:e7:db:43:df:02:db:4e:19:76:4b:bd:
d6:24:2d:dc:d2:bd:b9:f8:b6:e2:18:2e:0b:bb:60:a4:48:88:
92:6e:50:49:b3:77:4f:6d:ba:9b:b7:76:aa:29:50:3c:5e:c1:
99:cd:10:fb:9e:43:05:54:97:e9:a4:2d:26:e3:1f:a8:a8:26:
96:44:f9:84
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzJvCV5xVVXkNHcFQ7FoYE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTAyMTAzMzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2E1ZTc3YTY0ZTA3NWY2YjE2ZWI5MGQ5MjRjZTU4MTlhZTQ2M2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPYAmnJ9eLmHBla5ylZeRlTyp4mq
rlpoEVcybPyLugDZMP4/u5BqiUFEJAvL39LebQOaMf0uh9fQ9lZWHqPNx1MQFvED
i+LA+bESG6hBI4VrfEMmmsMFKJASYeR/t2wf+lAvs+LfmTcCBQC9WjH9MGpd6f8i
cpEZ+8Rq3GF3u8ak0wEV31lusbKsoHktGz7VWqg68siOJF88KTvl+5S1wJqEcIEi
NIzdUUpj0cgExLJBmI7OaFjKD/eUXAU1bZqa8LOZZhmdRtPARbGMBBj3Lnkebz3p
foPZ/jldSgJy4f0tn0i0JYHQXIzXz74V41dDH+4c/nwjsVQCNSPyXjR77QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDel53pk4HX2sW65DZJM5YGa5GO4MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTjZYbmVtVGdkZmF4YnJrTmtremxnWnJrWTdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtgBkD
BAAtgBowDQYJKoZIhvcNAQELBQADggEBAHSPbPAF20wPOQ8cJ9UVvJ9WmpBi2Gx+
K79BXzgYsOv+clPV1a0dgEXK1d5zu3z6PaQvdaLIBmZL7jSMlBgHhAvcp6c4BaET
3hgxZNP/uAbwpwi0P+jfSAWZCVagTVCEDzAJOWYkX6ceTTuwy93s8vUrkrCx1EnK
yALSGvTCMpC8lWOYUafp+7WKqxGKMtJ3xjoZOli8DITPWwDkq0UOAF+O4B9x3A8X
+VAzT6XEEjzDvt3EtFreetgE2rrn20PfAttOGXZLvdYkLdzSvbn4tuIYLgu7YKRI
iJJuUEmzd09tupu3dqopUDxewZnNEPueQwVUl+mkLSbjH6ioJpZE+YQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:36:40 2024 by rpki-client on console-ams.rpki-client.org