Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/KJIEtIf6urNiI9EVTeSAVtQHVm4.roa
File: KJIEtIf6urNiI9EVTeSAVtQHVm4.roa (raw, json)
Hash identifier: aKqVA6K/5sjVFkFVZkYGjNa+xARn75Af6YGUiy9jR9I=
Subject key identifier: 28:92:04:B4:87:FA:BA:B3:62:23:D1:15:4D:E4:80:56:D4:07:56:6E
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 01906E438AF70733A5E3CBD9D887EF78E3B4
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/KJIEtIf6urNiI9EVTeSAVtQHVm4.roa
Signing time: Mon 01 Jul 2024 12:27:18 +0000
ROA not before: Mon 01 Jul 2024 12:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56534
IP address blocks: 45.140.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:43:8a:f7:07:33:a5:e3:cb:d9:d8:87:ef:78:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Jul 1 12:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=289204b487fabab36223d1154de48056d407566e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:72:ea:9c:57:19:6f:6d:e5:16:e8:5d:a6:
c3:69:4b:e9:0f:b3:74:ad:96:af:af:69:e9:a4:d0:
21:e9:6a:99:1e:d8:13:35:dd:44:3b:e5:49:4b:e2:
a7:93:6e:bb:8b:52:b4:d2:74:05:7e:c7:88:54:b0:
9b:43:70:3e:a7:92:9d:57:06:15:76:db:04:20:11:
b8:2a:c5:30:69:80:c0:df:b7:7c:d3:65:9a:c5:b9:
64:06:8c:85:8f:60:cd:dd:17:2c:12:d4:87:c5:38:
9b:ac:33:42:3b:65:48:0a:2e:69:b2:f1:67:63:94:
c2:77:ec:cc:5c:61:38:a6:df:ae:50:af:21:2c:13:
31:9c:64:43:e1:39:e4:a7:42:36:85:e9:5b:fa:8d:
93:7b:c4:36:cf:15:4a:88:35:b3:5d:a7:53:ea:52:
71:22:bb:da:50:14:a6:b2:12:19:17:2e:39:fd:34:
f1:02:32:ec:fe:fc:fe:fe:9a:7a:20:97:99:d2:cf:
dc:a0:88:46:5b:79:97:6a:05:f6:f7:51:5d:7c:66:
c1:61:76:3b:0b:8c:6c:6e:43:d0:34:c1:57:07:c7:
4a:33:f4:d7:e5:48:d7:ca:94:1a:1d:6f:59:99:cb:
59:da:c4:c9:a2:61:ab:42:e6:e5:12:ed:b3:bc:1d:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:04:B4:87:FA:BA:B3:62:23:D1:15:4D:E4:80:56:D4:07:56:6E
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/KJIEtIf6urNiI9EVTeSAVtQHVm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.76.0/24
Signature Algorithm: sha256WithRSAEncryption
11:18:2a:fc:45:44:d3:7b:1c:b4:66:20:7d:4a:6f:1c:c7:43:
b2:d5:5c:d1:9e:30:bb:c4:bc:b1:7f:a5:d5:38:8b:90:b2:d0:
46:6f:75:5c:80:c6:48:8a:ec:02:50:ef:c9:d6:c7:ba:64:eb:
27:da:1c:12:00:93:23:1e:c3:93:19:72:84:7e:ba:c2:77:eb:
cf:ba:13:fb:40:60:bc:d7:e9:8e:12:d5:fa:a0:f1:ed:95:2d:
df:f2:0b:16:ea:8c:14:59:97:ab:d4:b0:4a:ca:d1:fb:4e:5c:
29:03:5b:7c:7e:f4:bd:d9:90:42:1e:8c:21:0f:3b:1e:b2:da:
81:c4:bd:ab:d9:a7:1f:13:f3:f0:dd:ec:be:19:d6:37:db:d7:
d7:00:7e:65:8c:4a:3d:06:2f:01:63:5a:5e:91:c3:72:88:ed:
a4:c7:27:00:a0:35:8b:26:f0:34:ee:d4:6d:a1:9b:9f:27:dc:
7b:be:b9:48:42:34:89:7b:fc:d8:89:a2:78:f3:d1:e0:12:20:
da:32:ac:9c:72:7d:33:71:59:04:63:36:45:45:ea:45:54:39:
92:0d:1f:78:2e:66:84:ba:35:d9:88:f0:c0:8a:0c:4b:9b:fc:
d1:90:10:b6:44:86:89:25:dc:03:e2:80:41:69:bf:19:bd:66:
5d:2a:8e:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBuQ4r3BzOl48vZ2IfveOO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1
ZDViOTQwHhcNMjQwNzAxMTIyNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODkyMDRiNDg3ZmFiYWIzNjIyM2QxMTU0ZGU0ODA1NmQ0MDc1NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyNy6pxXGW9t5RboXabDaUvpD7N0
rZavr2nppNAh6WqZHtgTNd1EO+VJS+Knk267i1K00nQFfseIVLCbQ3A+p5KdVwYV
dtsEIBG4KsUwaYDA37d802WaxblkBoyFj2DN3RcsEtSHxTibrDNCO2VICi5psvFn
Y5TCd+zMXGE4pt+uUK8hLBMxnGRD4Tnkp0I2helb+o2Te8Q2zxVKiDWzXadT6lJx
IrvaUBSmshIZFy45/TTxAjLs/vz+/pp6IJeZ0s/coIhGW3mXagX291FdfGbBYXY7
C4xsbkPQNMFXB8dKM/TX5UjXypQaHW9ZmctZ2sTJomGrQublEu2zvB34pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiSBLSH+rqzYiPRFU3kgFbUB1ZuMB8GA1UdIwQY
MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt
ZDNkMzBlYmMzNmFjLzEvS0pJRXRJZjZ1ck5pSTlFVlRlU0FWdFFIVm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj
LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYxMMA0G
CSqGSIb3DQEBCwUAA4IBAQARGCr8RUTTexy0ZiB9Sm8cx0Oy1VzRnjC7xLyxf6XV
OIuQstBGb3VcgMZIiuwCUO/J1se6ZOsn2hwSAJMjHsOTGXKEfrrCd+vPuhP7QGC8
1+mOEtX6oPHtlS3f8gsW6owUWZer1LBKytH7TlwpA1t8fvS92ZBCHowhDzsestqB
xL2r2acfE/Pw3ey+GdY329fXAH5ljEo9Bi8BY1pekcNyiO2kxycAoDWLJvA07tRt
oZufJ9x7vrlIQjSJe/zYiaJ489HgEiDaMqyccn0zcVkEYzZFRepFVDmSDR94LmaE
ujXZiPDAigxLm/zRkBC2RIaJJdwD4oBBab8ZvWZdKo6d
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:17:57 2024 by rpki-client on console-ams.rpki-client.org