Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Xf7Re6rSwX_Rq1tXcJY-dzjs_xY.roa
File: Xf7Re6rSwX_Rq1tXcJY-dzjs_xY.roa (raw, json)
Hash identifier: wg2iUBdR9hG3MKWgZz/DO+N769LGgOWssjACqXYgdeg=
Subject key identifier: 5D:FE:D1:7B:AA:D2:C1:7F:D1:AB:5B:57:70:96:3E:77:38:EC:FF:16
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018FB88EE139A839E7EE3E956F4369E90779
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Xf7Re6rSwX_Rq1tXcJY-dzjs_xY.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 45.144.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e1:39:a8:39:e7:ee:3e:95:6f:43:69:e9:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dfed17baad2c17fd1ab5b5770963e7738ecff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:69:1d:07:61:ae:b1:e0:6f:d1:50:e8:64:
2c:50:dc:bc:1c:5e:72:73:21:ab:72:78:69:f3:37:
e9:f9:0c:41:d8:35:1f:7d:fb:41:3e:5d:60:d6:0e:
77:da:63:44:2c:a8:e5:55:44:88:cf:e8:91:ad:85:
3e:de:9c:dc:e2:73:8f:c9:51:f0:df:94:5e:ef:8c:
b5:86:f6:12:20:3e:50:f8:53:4c:5b:fd:d1:bc:57:
ea:ba:c4:82:47:af:30:a7:10:eb:3d:f4:d6:14:dd:
07:59:08:0c:c4:8d:55:df:48:73:61:ff:8c:b7:80:
b3:f8:62:6e:9e:c3:b1:f4:d0:1f:19:44:aa:b5:e9:
a0:4e:66:21:2d:f7:32:4b:3f:d4:28:c4:63:28:0f:
a5:74:a1:59:05:fa:8c:62:11:64:7a:6a:ac:39:8e:
29:fd:c9:17:89:d8:a2:49:3e:26:52:ae:ab:42:a4:
10:09:df:e0:a8:38:06:20:9d:85:af:f7:74:08:bf:
e7:20:3d:8c:a6:0e:e7:90:50:9b:09:bb:b0:df:22:
3e:2a:da:2b:fe:9c:19:2d:58:f2:fb:68:ba:9f:30:
5f:0d:4e:f0:a3:12:a3:94:d8:15:3e:11:ac:79:94:
9c:1e:e7:11:7b:15:4c:56:76:72:9c:10:07:4e:6e:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:D1:7B:AA:D2:C1:7F:D1:AB:5B:57:70:96:3E:77:38:EC:FF:16
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/Xf7Re6rSwX_Rq1tXcJY-dzjs_xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.198.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:fc:b4:f6:80:8b:26:7a:1d:26:f3:b3:36:43:fb:7e:c5:c5:
86:18:cb:33:9c:00:c9:ee:87:ad:f7:3f:8f:0b:4c:20:c6:a0:
5e:68:17:75:e0:42:ec:84:4c:f6:a4:a4:1a:ac:38:96:a9:15:
64:e0:bb:78:2a:b8:71:25:b8:df:72:79:e1:39:7c:9c:36:78:
3b:9c:8f:b7:cd:62:57:c2:3a:07:39:29:89:a1:b9:27:ea:58:
90:e3:bf:82:37:4c:65:fa:6d:36:dd:cc:f7:72:c4:6f:ff:a4:
d4:8b:52:00:96:36:5f:a0:61:6b:b9:c9:67:39:ab:73:cd:c6:
4e:3f:a6:6a:ad:37:d2:12:c2:3b:ca:75:54:99:93:de:15:0f:
0b:40:2e:af:8b:f3:81:ce:ea:bb:c0:3f:52:28:bc:c7:90:24:
59:f0:c4:80:bc:ef:5e:0d:ec:92:30:4c:6c:fe:c2:a8:11:c6:
55:8d:84:59:33:c1:59:af:ac:9c:e4:cc:41:18:ef:59:9d:97:
da:6f:28:61:d6:e1:d2:d8:e7:d1:29:66:73:58:92:16:c9:2d:
cb:9c:b3:cb:45:28:6a:ab:d6:1e:81:94:60:c3:c9:58:81:3a:
5f:16:18:2f:14:2a:9e:36:0c:69:87:1e:97:da:98:47:30:bf:
72:ae:3f:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+4juE5qDnn7j6Vb0Np6Qd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjQwNTI3MDUzODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGZlZDE3YmFhZDJjMTdmZDFhYjViNTc3MDk2M2U3NzM4ZWNmZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EJpHQdhrrHgb9FQ6GQsUNy8HF5y
cyGrcnhp8zfp+QxB2DUffftBPl1g1g532mNELKjlVUSIz+iRrYU+3pzc4nOPyVHw
35Re74y1hvYSID5Q+FNMW/3RvFfqusSCR68wpxDrPfTWFN0HWQgMxI1V30hzYf+M
t4Cz+GJunsOx9NAfGUSqtemgTmYhLfcySz/UKMRjKA+ldKFZBfqMYhFkemqsOY4p
/ckXidiiST4mUq6rQqQQCd/gqDgGIJ2Fr/d0CL/nID2Mpg7nkFCbCbuw3yI+Ktor
/pwZLVjy+2i6nzBfDU7woxKjlNgVPhGseZScHucRexVMVnZynBAHTm7XNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3+0Xuq0sF/0atbV3CWPnc47P8WMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvWGY3UmU2clN3WF9ScTF0WGNKWS1kempzX3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZDGMA0G
CSqGSIb3DQEBCwUAA4IBAQBP/LT2gIsmeh0m87M2Q/t+xcWGGMsznADJ7oet9z+P
C0wgxqBeaBd14ELshEz2pKQarDiWqRVk4Lt4KrhxJbjfcnnhOXycNng7nI+3zWJX
wjoHOSmJobkn6liQ47+CN0xl+m023cz3csRv/6TUi1IAljZfoGFruclnOatzzcZO
P6ZqrTfSEsI7ynVUmZPeFQ8LQC6vi/OBzuq7wD9SKLzHkCRZ8MSAvO9eDeySMExs
/sKoEcZVjYRZM8FZr6yc5MxBGO9ZnZfabyhh1uHS2OfRKWZzWJIWyS3LnLPLRShq
q9YegZRgw8lYgTpfFhgvFCqeNgxphx6X2phHML9yrj93
-----END CERTIFICATE-----
Generated at Thu Jun 20 10:02:33 2024 by rpki-client on console-fra.rpki-client.org