Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/rzDcVQbMrYB3vSK7FxhJPQiL_2Q.roa
File: rzDcVQbMrYB3vSK7FxhJPQiL_2Q.roa (raw, json)
Hash identifier: jRfK4WaMNg2V2dKRwQLXVfeXE7w017S1V47bVOVUsxM=
Subject key identifier: AF:30:DC:55:06:CC:AD:80:77:BD:22:BB:17:18:49:3D:08:8B:FF:64
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018D9D509B034F248CC0F1C8B4AC537892A4
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/rzDcVQbMrYB3vSK7FxhJPQiL_2Q.roa
Signing time: Mon 12 Feb 2024 12:35:21 +0000
ROA not before: Mon 12 Feb 2024 12:35:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47430
IP address blocks: 45.139.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:50:9b:03:4f:24:8c:c0:f1:c8:b4:ac:53:78:92:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Feb 12 12:35:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af30dc5506ccad8077bd22bb1718493d088bff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:7d:30:74:41:e5:b5:98:73:00:49:31:a4:
6c:a5:fd:e4:0e:a1:ad:b8:54:60:6e:f8:b1:1a:d1:
d4:fb:4a:73:28:5c:6c:ed:98:48:86:24:c7:df:72:
9d:18:33:4e:74:94:26:4c:e2:5e:f2:29:e2:44:f6:
5e:d2:43:77:fe:b4:6a:72:9d:6b:05:0a:81:73:19:
fa:59:0c:77:3e:e8:98:f1:3f:91:6d:98:79:31:df:
4d:a4:33:10:2f:2c:70:c2:8e:61:22:7c:dd:b6:11:
21:fc:f6:db:5a:bc:16:ae:83:3d:61:3b:01:6e:ac:
ca:13:88:20:27:d6:ed:eb:e3:da:b4:e7:89:fa:74:
73:b4:21:09:7d:5c:da:d6:6c:02:f2:7e:24:12:e2:
1a:2a:50:b4:f8:22:45:f7:ea:73:e9:20:de:cc:18:
e1:dc:72:32:4e:cb:94:a3:47:72:71:db:03:f9:6d:
b0:8a:24:44:0d:92:69:15:2b:98:7c:b1:e0:ef:b6:
d3:69:5f:4f:5d:75:39:88:db:94:94:fb:12:2a:c0:
a1:97:f3:36:74:f2:51:13:60:be:89:1b:05:a3:5e:
18:c1:f9:3e:c1:98:40:1b:e5:24:a7:4f:ea:08:23:
19:14:aa:73:ed:bc:24:1f:33:c3:ab:4f:8e:d1:8d:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:DC:55:06:CC:AD:80:77:BD:22:BB:17:18:49:3D:08:8B:FF:64
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/rzDcVQbMrYB3vSK7FxhJPQiL_2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e2:33:8c:bb:6c:49:78:b8:ed:b2:ef:e2:db:42:4c:08:22:
2d:52:06:16:02:9f:1c:33:1d:cd:e0:d4:02:6b:b6:a2:99:8f:
45:e5:01:60:80:87:d5:4b:8c:1e:20:0b:b4:3c:a1:60:ce:30:
a3:ad:5e:d5:a8:b3:92:f2:8a:05:35:64:1d:36:b4:8a:81:dc:
a8:51:33:84:ed:cc:e0:75:b0:22:3e:8a:26:52:81:a1:34:38:
1d:95:02:b5:9f:44:57:ce:1c:e8:52:4d:14:a8:3b:da:1e:ba:
e4:9d:78:49:af:8d:30:32:44:ba:b5:f9:ab:cf:39:6c:fa:e3:
20:ae:ac:1c:61:82:25:eb:6d:66:c7:7f:cc:59:20:01:6a:e1:
5d:ba:43:bd:d8:6a:25:99:fe:0f:1b:76:b6:3b:a8:a1:73:93:
39:3b:be:cf:9c:4c:bf:fa:54:a3:6a:4d:52:cd:9e:3d:46:f8:
0f:d0:ba:ab:e1:58:6d:8e:1b:85:2e:c7:1d:7c:29:fa:98:a7:
a1:10:b9:5f:f2:a4:58:5c:c5:fc:78:08:89:76:15:ec:7c:67:
8c:a2:45:21:d2:3d:63:db:1c:29:a9:25:e2:c0:75:62:62:e8:
7c:71:7e:5e:47:82:6a:a1:6d:79:d4:89:57:26:15:81:e7:a4:
53:60:16:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2dUJsDTySMwPHItKxTeJKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjQwMjEyMTIzNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjMwZGM1NTA2Y2NhZDgwNzdiZDIyYmIxNzE4NDkzZDA4OGJmZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEF9MHRB5bWYcwBJMaRspf3kDqGt
uFRgbvixGtHU+0pzKFxs7ZhIhiTH33KdGDNOdJQmTOJe8iniRPZe0kN3/rRqcp1r
BQqBcxn6WQx3PuiY8T+RbZh5Md9NpDMQLyxwwo5hInzdthEh/PbbWrwWroM9YTsB
bqzKE4ggJ9bt6+PatOeJ+nRztCEJfVza1mwC8n4kEuIaKlC0+CJF9+pz6SDezBjh
3HIyTsuUo0dycdsD+W2wiiREDZJpFSuYfLHg77bTaV9PXXU5iNuUlPsSKsChl/M2
dPJRE2C+iRsFo14Ywfk+wZhAG+Ukp0/qCCMZFKpz7bwkHzPDq0+O0Y39WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8w3FUGzK2Ad70iuxcYST0Ii/9kMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvcnpEY1ZRYk1yWUIzdlNLN0Z4aEpQUWlMXzJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYsJMA0G
CSqGSIb3DQEBCwUAA4IBAQA04jOMu2xJeLjtsu/i20JMCCItUgYWAp8cMx3N4NQC
a7aimY9F5QFggIfVS4weIAu0PKFgzjCjrV7VqLOS8ooFNWQdNrSKgdyoUTOE7czg
dbAiPoomUoGhNDgdlQK1n0RXzhzoUk0UqDvaHrrknXhJr40wMkS6tfmrzzls+uMg
rqwcYYIl621mx3/MWSABauFdukO92Golmf4PG3a2O6ihc5M5O77PnEy/+lSjak1S
zZ49RvgP0Lqr4VhtjhuFLscdfCn6mKehELlf8qRYXMX8eAiJdhXsfGeMokUh0j1j
2xwpqSXiwHViYuh8cX5eR4JqoW151IlXJhWB56RTYBbp
-----END CERTIFICATE-----
Generated at Wed May 29 03:21:15 2024 by rpki-client on console-ams.rpki-client.org