Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/xcdQedE7xqhGcUXspO94B_OQ0nY.roa
File: xcdQedE7xqhGcUXspO94B_OQ0nY.roa (raw, json)
Hash identifier: TwYqwZmDDTBpjrf0iKk63Yy7mlEGA3si7GFehqqa5fc=
Subject key identifier: C5:C7:50:79:D1:3B:C6:A8:46:71:45:EC:A4:EF:78:07:F3:90:D2:76
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018CC3B6F4B29F7D7F03D02ACE6EA7FFE74B
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/xcdQedE7xqhGcUXspO94B_OQ0nY.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202425
IP address blocks: 45.148.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f4:b2:9f:7d:7f:03:d0:2a:ce:6e:a7:ff:e7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c75079d13bc6a8467145eca4ef7807f390d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:7c:50:60:cf:2b:e5:06:27:89:ed:74:4d:
ef:88:05:65:7b:55:39:b1:5d:2f:d6:7f:c8:c5:c1:
44:70:bf:6a:f7:a6:ac:7b:0a:1a:9a:44:79:62:0f:
c4:9a:8f:3f:9b:d1:d3:a2:dd:c2:38:09:14:6d:7a:
e6:fd:1d:56:df:06:a5:57:91:b4:a2:9e:b9:0c:06:
65:d8:2f:ad:fa:2c:db:b8:6d:e8:7a:2f:08:21:2e:
83:5f:65:92:65:f7:d1:84:c3:86:2a:c2:e8:22:f4:
6a:27:07:8f:b1:da:54:1d:bd:59:03:d9:61:08:23:
d4:6d:fe:5a:59:98:b6:36:2e:20:ea:49:57:93:88:
23:9e:8c:57:49:9f:3a:cd:81:e5:d3:1e:4d:c7:a3:
d1:8c:c1:e7:89:8a:ff:5f:59:cb:55:b8:e5:bd:07:
e3:9f:48:0f:15:b9:99:78:e3:07:a8:1b:f4:aa:01:
50:33:2c:14:22:47:fb:d7:c5:aa:17:78:ff:fa:5f:
36:e2:22:09:a6:a9:38:c7:29:82:90:f0:0d:90:cc:
b1:85:11:64:66:95:84:eb:c1:2f:03:b9:71:d3:01:
b6:79:8a:34:f0:b9:b8:39:c6:20:9b:e5:26:b7:49:
a8:11:bf:77:1f:41:d3:70:43:de:1d:bc:cc:00:72:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:50:79:D1:3B:C6:A8:46:71:45:EC:A4:EF:78:07:F3:90:D2:76
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/xcdQedE7xqhGcUXspO94B_OQ0nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9c:e0:0e:e0:50:ab:ae:ae:92:fb:52:a5:cf:9c:c2:c3:1d:
48:6e:4b:7e:43:d1:ee:18:19:cc:40:a0:65:83:35:8a:12:61:
d5:42:45:89:85:ea:9f:e0:90:2e:13:21:cc:41:3e:1c:a2:84:
94:50:44:ae:9f:58:14:09:3c:0c:89:67:2d:66:2d:cc:7d:86:
77:69:4e:03:d7:0f:96:a6:61:fa:b7:ec:bb:6e:6e:b7:46:e3:
fd:93:18:aa:2c:77:5d:ab:61:40:69:75:2a:d9:5e:8c:0a:1f:
27:f0:b0:2d:16:ad:25:94:21:70:59:59:4c:2c:8e:95:2f:88:
af:04:ca:5c:75:ec:66:c8:4a:42:3b:3a:f4:70:f2:09:53:45:
66:31:63:eb:f2:49:54:63:56:32:30:f6:52:d7:4e:09:55:f6:
90:d7:7a:fc:f7:2f:45:51:73:30:07:23:5e:12:78:a9:05:b8:
4e:59:49:31:f2:1f:52:7f:9a:b3:48:43:82:85:e3:6e:5c:b9:
2b:3c:26:c5:d0:c9:19:9f:95:c1:61:6b:bf:f5:c9:48:98:8d:
50:79:ae:c3:17:be:30:99:d2:5f:51:5d:e1:50:ad:60:e6:7f:
be:b7:bd:e4:c8:72:68:db:56:c3:ee:07:14:11:57:32:65:18:
1e:6b:61:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtvSyn31/A9Aqzm6n/+dLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy
ODVkZTcwHhcNMjQwMTAxMDYyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM3NTA3OWQxM2JjNmE4NDY3MTQ1ZWNhNGVmNzgwN2YzOTBkMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Op8UGDPK+UGJ4ntdE3viAVle1U5
sV0v1n/IxcFEcL9q96asewoamkR5Yg/Emo8/m9HTot3COAkUbXrm/R1W3walV5G0
op65DAZl2C+t+izbuG3oei8IIS6DX2WSZffRhMOGKsLoIvRqJwePsdpUHb1ZA9lh
CCPUbf5aWZi2Ni4g6klXk4gjnoxXSZ86zYHl0x5Nx6PRjMHniYr/X1nLVbjlvQfj
n0gPFbmZeOMHqBv0qgFQMywUIkf718WqF3j/+l824iIJpqk4xymCkPANkMyxhRFk
ZpWE68EvA7lx0wG2eYo08Lm4OcYgm+Umt0moEb93H0HTcEPeHbzMAHIMSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXHUHnRO8aoRnFF7KTveAfzkNJ2MB8GA1UdIwQY
MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEveGNkUWVkRTd4cWhHY1VYc3BPOTRCX09RMG5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSQMA0G
CSqGSIb3DQEBCwUAA4IBAQAVnOAO4FCrrq6S+1Klz5zCwx1Ibkt+Q9HuGBnMQKBl
gzWKEmHVQkWJheqf4JAuEyHMQT4cooSUUESun1gUCTwMiWctZi3MfYZ3aU4D1w+W
pmH6t+y7bm63RuP9kxiqLHddq2FAaXUq2V6MCh8n8LAtFq0llCFwWVlMLI6VL4iv
BMpcdexmyEpCOzr0cPIJU0VmMWPr8klUY1YyMPZS104JVfaQ13r89y9FUXMwByNe
EnipBbhOWUkx8h9Sf5qzSEOCheNuXLkrPCbF0MkZn5XBYWu/9clImI1Qea7DF74w
mdJfUV3hUK1g5n++t73kyHJo21bD7gcUEVcyZRgea2Fw
-----END CERTIFICATE-----
Generated at Mon Jun 17 01:59:13 2024 by rpki-client on console-fra.rpki-client.org