Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/ORsbDDrXWVucACS-Banty9Z9Qb8.roa
File: ORsbDDrXWVucACS-Banty9Z9Qb8.roa (raw, json)
Hash identifier: Z58tp30Knqain01m7cWxAjfBukdxn1vgNKbxUDVzpAw=
Subject key identifier: 39:1B:1B:0C:3A:D7:59:5B:9C:00:24:BE:05:A9:ED:CB:D6:7D:41:BF
Certificate issuer: /CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Certificate serial: 018CC6B7CCB57BD4FF7EEF08411F5BB2015D
Authority key identifier: 51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/ORsbDDrXWVucACS-Banty9Z9Qb8.roa
Signing time: Mon 01 Jan 2024 20:29:43 +0000
ROA not before: Mon 01 Jan 2024 20:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.143.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:cc:b5:7b:d4:ff:7e:ef:08:41:1f:5b:b2:01:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Validity
Not Before: Jan 1 20:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=391b1b0c3ad7595b9c0024be05a9edcbd67d41bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:4b:41:a9:bf:4f:1f:9f:9c:f1:59:a8:03:
34:0a:88:15:1b:46:9b:8d:59:17:35:f5:0a:fd:01:
c2:4a:a3:72:67:ba:78:98:6d:56:c6:1a:b9:d9:4b:
7a:48:71:c1:d6:ef:39:43:84:b1:21:3a:7c:1b:26:
59:05:4c:88:fd:12:05:1f:86:92:e5:72:0f:47:ab:
6f:bd:e1:43:e7:c1:61:d2:de:1a:72:b4:52:47:83:
80:9a:f9:35:5b:f6:e6:35:be:13:4d:d4:e8:f9:24:
05:60:9a:8e:d1:c5:6a:04:21:02:ff:20:e6:8d:3d:
e1:ba:d2:81:52:15:f5:15:5e:a9:45:79:ca:33:80:
9e:2b:2a:9d:f2:ae:db:06:6c:b0:ce:a4:6e:cf:93:
95:1d:f7:8b:4b:47:26:fb:5f:f6:a9:77:d0:a7:49:
f1:3b:6d:41:87:84:c2:22:5b:1a:95:f7:24:54:52:
10:31:1a:7a:fc:f0:8f:38:38:b8:31:d1:b9:e2:4f:
e0:c7:c0:02:70:95:ae:17:75:28:61:1b:ca:ea:d1:
42:d9:4a:73:d3:65:a9:ff:eb:a6:0c:c7:e3:9b:1c:
04:b1:ea:32:17:20:b6:57:45:20:fe:48:81:35:a5:
32:29:0e:cb:0f:2f:5b:c6:67:48:3d:27:fc:04:38:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:1B:0C:3A:D7:59:5B:9C:00:24:BE:05:A9:ED:CB:D6:7D:41:BF
X509v3 Authority Key Identifier:
keyid:51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/ORsbDDrXWVucACS-Banty9Z9Qb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.112.0/22
Signature Algorithm: sha256WithRSAEncryption
18:cc:4b:eb:93:9d:41:fd:2d:eb:bd:74:50:32:6d:d7:2b:12:
d4:c2:5e:b5:cf:0e:2e:ce:92:62:bf:74:34:8d:e6:0c:8b:f0:
7b:81:1e:40:d7:35:67:16:10:9d:72:c2:c8:0e:24:ec:2e:ae:
70:27:b3:3e:e0:94:97:25:8e:6c:08:1f:17:c6:8e:fa:b1:7b:
2e:1e:8a:fc:15:80:19:c7:04:44:6e:c2:79:9d:62:54:7c:60:
c2:9b:38:e4:40:ec:78:2a:ef:40:c7:84:ad:dd:17:9a:94:f2:
b0:c2:7a:01:3b:60:51:32:c0:27:1e:90:01:48:a9:65:b3:94:
5d:b9:c2:e3:1a:c7:78:97:92:14:4d:f0:23:8c:d2:a5:fe:88:
a7:16:27:0e:00:94:d5:f1:90:c1:a3:4c:1e:0a:c4:74:07:b8:
45:3e:d5:6c:de:43:83:96:03:66:7e:73:5c:85:ce:be:84:02:
49:a2:e3:9a:0c:8a:1b:11:90:e2:8e:5e:1e:9e:78:9e:bd:bb:
3a:b2:80:61:10:b3:97:12:8b:2a:13:2a:84:11:e3:0b:c5:f0:
a3:62:91:f6:e9:ec:bd:eb:5a:a2:46:1d:e4:c2:65:79:31:b8:
fc:47:39:cd:7b:1f:97:08:b6:6f:43:8b:7e:2e:a6:0d:9c:0a:
83:c7:ac:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt8y1e9T/fu8IQR9bsgFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYzMzMjRjMGQ3ODg2ZjVmYjE3Y2M4ZDI2NzJjZDI0N2Fh
ZDIyNjQwHhcNMjQwMTAxMjAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTFiMWIwYzNhZDc1OTViOWMwMDI0YmUwNWE5ZWRjYmQ2N2Q0MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqRLQam/Tx+fnPFZqAM0CogVG0ab
jVkXNfUK/QHCSqNyZ7p4mG1Wxhq52Ut6SHHB1u85Q4SxITp8GyZZBUyI/RIFH4aS
5XIPR6tvveFD58Fh0t4acrRSR4OAmvk1W/bmNb4TTdTo+SQFYJqO0cVqBCEC/yDm
jT3hutKBUhX1FV6pRXnKM4CeKyqd8q7bBmywzqRuz5OVHfeLS0cm+1/2qXfQp0nx
O21Bh4TCIlsalfckVFIQMRp6/PCPODi4MdG54k/gx8ACcJWuF3UoYRvK6tFC2Upz
02Wp/+umDMfjmxwEseoyFyC2V0Ug/kiBNaUyKQ7LDy9bxmdIPSf8BDhPPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkbGww611lbnAAkvgWp7cvWfUG/MB8GA1UdIwQY
MBaAFFHDMkwNeIb1+xfMjSZyzSR6rSJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWNNeVRBMTRodlg3Rjh5TkpuTE5KSHF0SW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yY2MxNmUtNzRlNC00MWVhLWFiZWUt
MDVhYTVlZDQ3NzQxLzEvT1JzYkREclhXVnVjQUNTLUJhbnR5OVo5UWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yY2MxNmUtNzRlNC00MWVhLWFiZWUtMDVhYTVlZDQ3NzQx
LzEvVWNNeVRBMTRodlg3Rjh5TkpuTE5KSHF0SW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY9wMA0G
CSqGSIb3DQEBCwUAA4IBAQAYzEvrk51B/S3rvXRQMm3XKxLUwl61zw4uzpJiv3Q0
jeYMi/B7gR5A1zVnFhCdcsLIDiTsLq5wJ7M+4JSXJY5sCB8Xxo76sXsuHor8FYAZ
xwREbsJ5nWJUfGDCmzjkQOx4Ku9Ax4St3RealPKwwnoBO2BRMsAnHpABSKlls5Rd
ucLjGsd4l5IUTfAjjNKl/oinFicOAJTV8ZDBo0weCsR0B7hFPtVs3kODlgNmfnNc
hc6+hAJJouOaDIobEZDijl4ennievbs6soBhELOXEosqEyqEEeMLxfCjYpH26ey9
61qiRh3kwmV5Mbj8RznNex+XCLZvQ4t+LqYNnAqDx6wV
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:50:49 2024 by rpki-client on console-ams.rpki-client.org