Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/xwS23OWw0Syi5oyRsSRkmnPLboc.roa
File: xwS23OWw0Syi5oyRsSRkmnPLboc.roa (raw, json)
Hash identifier: Z0+uEhYjsoGL9nikZmmq/pujI8Xn6AbpcAKHfKXESt8=
Subject key identifier: C7:04:B6:DC:E5:B0:D1:2C:A2:E6:8C:91:B1:24:64:9A:73:CB:6E:87
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 018CC348D28DEB69A27F7D4F3E660B3EC402
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/xwS23OWw0Syi5oyRsSRkmnPLboc.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206786
IP address blocks: 45.86.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d2:8d:eb:69:a2:7f:7d:4f:3e:66:0b:3e:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c704b6dce5b0d12ca2e68c91b124649a73cb6e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:1c:61:1d:a9:10:22:e7:e1:f3:5d:9b:9c:
ca:2c:0e:7a:10:26:4f:fd:e4:38:25:af:38:7a:09:
9c:53:c6:ff:3c:69:c0:e4:2d:d8:c6:da:b0:9a:a2:
e1:1c:7e:30:eb:8e:0e:a5:a4:44:57:df:f3:7e:c3:
16:fb:6e:6f:a0:a4:e5:c6:c2:12:ed:27:10:2c:fa:
45:b6:36:93:50:e4:30:f2:d5:3d:29:7b:b7:43:be:
07:c7:3a:fe:26:72:1c:cd:00:98:df:a8:30:71:44:
b1:a8:db:14:00:35:85:a4:46:0b:88:5c:df:db:0b:
d1:a7:7b:da:7b:57:15:ab:69:63:95:23:95:30:8c:
5e:cd:b9:72:77:51:cd:b5:33:2e:e3:a9:bf:f1:f7:
b0:c6:28:72:d3:38:f9:3c:60:52:a4:05:c6:5e:4c:
4e:ae:15:ab:48:4d:98:e3:73:d7:47:b3:6a:37:8e:
ca:60:9b:b4:f1:fa:b8:9b:ba:bc:1f:73:8c:38:03:
db:97:6c:a3:49:cc:99:cd:95:62:14:93:31:2e:1a:
3d:95:b3:5e:c9:bd:b3:61:61:de:83:23:1f:60:f9:
ce:08:c5:00:a4:b7:9a:65:30:e7:66:ac:9c:41:d0:
48:25:3b:55:d4:6f:40:bb:e3:62:77:79:d8:d4:7e:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:B6:DC:E5:B0:D1:2C:A2:E6:8C:91:B1:24:64:9A:73:CB:6E:87
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/xwS23OWw0Syi5oyRsSRkmnPLboc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.34.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b6:12:7a:f8:98:46:e4:53:20:95:76:24:8e:d1:53:86:94:
ec:b5:28:48:0e:43:40:e8:8f:38:26:88:59:8a:c8:a5:29:ba:
e7:59:50:5a:0b:20:fe:c3:c9:b7:72:94:28:25:5c:18:a6:f5:
e5:6c:11:a1:7c:63:08:dc:1e:ac:f6:86:a4:e6:eb:84:c2:48:
ea:ea:a9:67:99:09:60:e4:cf:20:7a:a8:3a:11:4b:f1:6b:0e:
d6:46:06:75:95:33:16:f8:3d:7a:28:f4:65:f5:ba:18:3e:49:
96:01:13:f9:26:a7:31:52:80:11:a0:e0:1d:4a:fa:dd:80:7f:
3c:1a:57:fd:8a:43:23:d9:46:67:a0:b1:70:97:a2:a8:28:14:
af:8d:1f:c7:52:86:d6:8f:22:5e:0f:f1:62:b7:32:6c:94:f4:
1c:5a:00:45:87:1c:c6:0f:ef:a7:96:4f:ce:2a:a4:8b:07:0f:
bc:88:64:ec:5c:44:0a:02:99:d1:aa:fe:a1:f9:4a:a0:6d:8c:
ff:24:c8:41:3b:a2:fa:23:b8:aa:8e:0f:fc:6c:00:4a:7c:ff:
97:aa:6d:72:b9:f8:d3:35:73:9b:cf:a8:44:68:5b:08:01:7a:
ff:b3:12:5a:67:e9:75:46:aa:a7:44:c6:15:27:c2:d1:03:63:
c2:b4:e5:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSNKN62mif31PPmYLPsQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk
NjNhYjgwHhcNMjQwMTAxMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzA0YjZkY2U1YjBkMTJjYTJlNjhjOTFiMTI0NjQ5YTczY2I2ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwMcYR2pECLn4fNdm5zKLA56ECZP
/eQ4Ja84egmcU8b/PGnA5C3YxtqwmqLhHH4w644OpaREV9/zfsMW+25voKTlxsIS
7ScQLPpFtjaTUOQw8tU9KXu3Q74Hxzr+JnIczQCY36gwcUSxqNsUADWFpEYLiFzf
2wvRp3vae1cVq2ljlSOVMIxezblyd1HNtTMu46m/8fewxihy0zj5PGBSpAXGXkxO
rhWrSE2Y43PXR7NqN47KYJu08fq4m7q8H3OMOAPbl2yjScyZzZViFJMxLho9lbNe
yb2zYWHegyMfYPnOCMUApLeaZTDnZqycQdBIJTtV1G9Au+Nid3nY1H7cvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMcEttzlsNEsouaMkbEkZJpzy26HMB8GA1UdIwQY
MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt
YzRhY2I4OTY5YzQ5LzEveHdTMjNPV3cwU3lpNW95UnNTUmttblBMYm9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5
LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVYiMA0G
CSqGSIb3DQEBCwUAA4IBAQCvthJ6+JhG5FMglXYkjtFThpTstShIDkNA6I84JohZ
isilKbrnWVBaCyD+w8m3cpQoJVwYpvXlbBGhfGMI3B6s9oak5uuEwkjq6qlnmQlg
5M8geqg6EUvxaw7WRgZ1lTMW+D16KPRl9boYPkmWARP5JqcxUoARoOAdSvrdgH88
Glf9ikMj2UZnoLFwl6KoKBSvjR/HUobWjyJeD/FitzJslPQcWgBFhxzGD++nlk/O
KqSLBw+8iGTsXEQKApnRqv6h+UqgbYz/JMhBO6L6I7iqjg/8bABKfP+Xqm1yufjT
NXObz6hEaFsIAXr/sxJaZ+l1RqqnRMYVJ8LRA2PCtOVL
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:56 2024 by rpki-client on console-ams.rpki-client.org