Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/0vLpjnXRfMAWy4WFbASQBQjShtc.roa
File: 0vLpjnXRfMAWy4WFbASQBQjShtc.roa (raw, json)
Hash identifier: gojMPWjcYrVqPgqboGOi5lR68w3e6s832Bry1yW5Opg=
Subject key identifier: D2:F2:E9:8E:75:D1:7C:C0:16:CB:85:85:6C:04:90:05:08:D2:86:D7
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 0192E2D9DBE7C9CCB0A8B9A3B3119CA2104F
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/0vLpjnXRfMAWy4WFbASQBQjShtc.roa
Signing time: Thu 31 Oct 2024 13:53:01 +0000
ROA not before: Thu 31 Oct 2024 13:53:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56534
IP address blocks: 45.140.76.0/23 maxlen: 23
45.140.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:d9:db:e7:c9:cc:b0:a8:b9:a3:b3:11:9c:a2:10:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Oct 31 13:53:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2f2e98e75d17cc016cb85856c04900508d286d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:16:91:33:23:42:59:74:17:fb:25:db:bd:
94:7c:8b:ed:ba:b4:75:a2:80:6c:a0:d5:3a:12:9f:
2f:7e:38:59:ce:33:f4:19:66:96:4b:c8:ab:47:d2:
52:fd:6a:95:d6:a3:0a:4c:75:49:68:ff:15:ff:5e:
ee:48:66:8f:f1:ab:bf:5d:9e:ef:ee:56:59:60:5e:
54:e9:25:ee:5d:6c:68:1b:5e:7a:61:b3:c0:81:28:
cc:af:87:96:b8:67:2d:91:0f:9b:65:2a:7c:6f:93:
b5:94:85:f7:40:25:41:ab:27:7a:f7:63:09:61:62:
c1:74:03:6f:87:d9:4c:b7:bf:e5:93:6c:13:d6:63:
f3:2b:5b:a2:02:1e:c0:9b:c4:44:0b:cf:e4:4b:0c:
e2:75:f8:c0:37:49:33:15:a7:af:b0:73:34:fc:f1:
74:37:f7:2a:6b:db:a3:02:51:49:9a:e6:3f:6f:85:
e1:85:7e:b7:59:87:96:c3:6e:c7:d6:20:ca:6c:79:
d7:ef:1d:c0:8d:75:9e:b0:32:43:87:a7:67:a9:00:
b0:29:32:49:02:9f:c5:0c:ac:52:ff:0b:6a:83:3a:
2f:88:c3:e0:1a:70:20:89:a1:ea:02:1c:ed:c2:35:
aa:c0:47:3b:69:c4:21:e8:ea:31:09:20:6d:f1:84:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:E9:8E:75:D1:7C:C0:16:CB:85:85:6C:04:90:05:08:D2:86:D7
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/0vLpjnXRfMAWy4WFbASQBQjShtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.76.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:d5:eb:ae:55:ee:b8:44:b1:b4:b5:65:87:1b:79:a2:d7:ab:
22:d1:81:b5:b5:c0:30:ff:90:82:76:86:a3:f8:71:dd:a5:b3:
fd:72:17:e9:9d:64:c6:55:b6:a6:c9:54:55:47:37:d7:58:d5:
e5:f9:2c:81:cb:87:00:22:a2:18:91:02:48:70:f3:0d:d4:5c:
9e:1c:5e:51:03:8b:cf:a1:e2:87:84:a9:31:14:09:e9:a5:84:
14:5d:9f:6c:5e:66:ce:f3:49:5b:b4:1f:bf:47:2b:4e:a1:f8:
30:f1:64:ef:b7:06:13:27:09:5a:1e:e3:b4:2b:03:8a:43:eb:
a6:e0:6c:35:1b:08:db:82:42:38:b8:c8:4c:b6:ef:51:4c:ae:
f7:3e:48:2d:ec:3f:b9:fe:df:55:fa:ff:9b:0e:9a:91:74:01:
89:3b:42:89:5b:a1:88:44:6f:21:cc:c4:aa:ef:a0:44:c3:4f:
29:b7:21:3f:45:b3:59:e5:0f:9c:e1:8a:6a:a0:bd:c0:76:fd:
0d:8b:52:27:fc:fa:41:46:d9:1a:a1:d9:7d:89:fc:c1:0c:fa:
b7:33:89:8a:08:78:f2:6c:e1:12:cb:2e:5b:96:e1:96:26:7e:
70:16:61:f1:d2:e1:d1:02:4b:6d:31:3b:fa:71:48:ab:72:21:
96:05:1b:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLi2dvnycywqLmjsxGcohBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjQxMDMxMTM1MzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmYyZTk4ZTc1ZDE3Y2MwMTZjYjg1ODU2YzA0OTAwNTA4ZDI4NmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1kWkTMjQll0F/sl272UfIvturR1
ooBsoNU6Ep8vfjhZzjP0GWaWS8irR9JS/WqV1qMKTHVJaP8V/17uSGaP8au/XZ7v
7lZZYF5U6SXuXWxoG156YbPAgSjMr4eWuGctkQ+bZSp8b5O1lIX3QCVBqyd692MJ
YWLBdANvh9lMt7/lk2wT1mPzK1uiAh7Am8REC8/kSwzidfjAN0kzFaevsHM0/PF0
N/cqa9ujAlFJmuY/b4XhhX63WYeWw27H1iDKbHnX7x3AjXWesDJDh6dnqQCwKTJJ
Ap/FDKxS/wtqgzoviMPgGnAgiaHqAhztwjWqwEc7acQh6OoxCSBt8YSCfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLy6Y510XzAFsuFhWwEkAUI0obXMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvMHZMcGpuWFJmTUFXeTRXRmJBU1FCUWpTaHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYxMMA0G
CSqGSIb3DQEBCwUAA4IBAQCL1euuVe64RLG0tWWHG3mi16si0YG1tcAw/5CCdoaj
+HHdpbP9chfpnWTGVbamyVRVRzfXWNXl+SyBy4cAIqIYkQJIcPMN1FyeHF5RA4vP
oeKHhKkxFAnppYQUXZ9sXmbO80lbtB+/RytOofgw8WTvtwYTJwlaHuO0KwOKQ+um
4Gw1GwjbgkI4uMhMtu9RTK73Pkgt7D+5/t9V+v+bDpqRdAGJO0KJW6GIRG8hzMSq
76BEw08ptyE/RbNZ5Q+c4YpqoL3Adv0Ni1In/PpBRtkaodl9ifzBDPq3M4mKCHjy
bOESyy5bluGWJn5wFmHx0uHRAkttMTv6cUirciGWBRvh
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:59:37 2024 by rpki-client on console-ams.rpki-client.org