Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/e2MUp4KMYJE4J5I_GA9A8s2Ye0U.roa
File: e2MUp4KMYJE4J5I_GA9A8s2Ye0U.roa (raw, json)
Hash identifier: UKTxawnGHuklgR0qAx08LB6QoTrBI9V1J1TGEFxyUJ0=
Subject key identifier: 7B:63:14:A7:82:8C:60:91:38:27:92:3F:18:0F:40:F2:CD:98:7B:45
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB443AA2F938E2EDA1370B923CAD51
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/e2MUp4KMYJE4J5I_GA9A8s2Ye0U.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 45.11.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:44:3a:a2:f9:38:e2:ed:a1:37:0b:92:3c:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b6314a7828c60913827923f180f40f2cd987b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:29:69:f6:8d:89:e6:35:58:e7:ea:af:ad:
a6:35:c4:4b:ea:32:d6:0c:04:42:08:ba:45:ab:ef:
7d:c7:82:84:5f:8e:df:6e:63:6d:a9:95:f6:05:c9:
36:7f:6a:56:66:a9:71:70:34:29:96:ee:1f:1b:34:
37:9e:94:79:bc:ce:0a:5b:d9:78:c1:73:f7:54:73:
f1:54:ce:e1:e5:3d:c4:a1:a1:07:db:79:58:d7:b1:
35:c9:c4:c2:36:7a:29:69:94:74:71:df:93:09:a3:
e5:d5:88:b2:c3:fb:2c:ee:83:b4:bb:d1:eb:0b:79:
28:11:9f:87:76:89:a2:7a:2a:b8:f4:68:2d:9a:31:
52:93:ee:15:b5:e5:f1:0b:14:ff:dd:d0:ea:82:54:
59:35:ba:56:26:96:79:b8:a6:f0:17:99:1a:78:0e:
26:bf:39:ec:c2:a8:bf:26:06:e3:c3:9f:f2:84:8a:
af:5b:55:09:07:50:e5:6c:66:21:5b:d9:95:90:ce:
7f:7a:da:7f:04:26:04:06:74:98:9c:31:b2:70:a6:
2b:59:d3:3a:9f:bd:0a:a8:c8:5f:47:77:6b:18:73:
88:64:39:32:13:ff:2c:b4:b6:b4:61:be:25:35:f4:
c6:af:df:9a:37:a2:f6:99:9d:df:43:bc:97:24:55:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:14:A7:82:8C:60:91:38:27:92:3F:18:0F:40:F2:CD:98:7B:45
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/e2MUp4KMYJE4J5I_GA9A8s2Ye0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:f1:77:ec:22:89:65:70:ba:8a:31:31:56:8f:a5:15:98:d5:
41:71:86:47:47:98:f0:cb:32:b1:47:21:15:aa:bb:01:fa:f0:
85:9c:72:69:19:a4:7e:77:a5:80:cc:d3:be:b9:44:f2:3d:2a:
c3:27:cb:da:18:29:c5:5f:3e:ee:93:ce:52:5d:1d:66:6d:b1:
ba:92:c0:75:19:91:1d:7f:eb:a2:fc:82:2e:43:e9:4c:ff:e9:
3d:4b:58:fb:46:7d:ac:e6:32:1b:f5:7e:26:bd:3a:6f:ba:cd:
9e:67:b9:25:7f:3a:51:2d:6d:fd:61:be:58:c1:4a:7b:18:ee:
1b:11:fe:a0:4d:3d:ff:fd:f6:a7:90:c9:22:53:44:b8:18:e5:
de:b4:52:6c:4d:99:d1:ee:28:f2:2e:fe:af:a5:b5:dd:79:63:
49:27:87:1b:61:f2:61:66:21:17:59:20:f2:54:c7:c0:24:45:
7c:c2:5d:0a:17:6b:b4:cd:f1:9b:de:d2:f0:ca:14:67:fc:4d:
7c:b6:63:56:64:a4:98:63:7f:b0:bd:a2:6a:83:80:08:d6:0e:
8f:5b:4b:ff:ed:f5:fe:c9:7b:4d:d4:d8:ad:0e:ce:cf:6d:7d:
b8:fc:6a:e4:2a:41:11:3e:9b:85:1e:bf:62:8b:1d:6a:d4:1f:
14:ce:cd:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC20Q6ovk44u2hNwuSPK1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUx
OTBlM2IwHhcNMjQwMTAxMDIyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjYzMTRhNzgyOGM2MDkxMzgyNzkyM2YxODBmNDBmMmNkOTg3YjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0kpafaNieY1WOfqr62mNcRL6jLW
DARCCLpFq+99x4KEX47fbmNtqZX2Bck2f2pWZqlxcDQplu4fGzQ3npR5vM4KW9l4
wXP3VHPxVM7h5T3EoaEH23lY17E1ycTCNnopaZR0cd+TCaPl1Yiyw/ss7oO0u9Hr
C3koEZ+Hdomieiq49GgtmjFSk+4VteXxCxT/3dDqglRZNbpWJpZ5uKbwF5kaeA4m
vznswqi/Jgbjw5/yhIqvW1UJB1DlbGYhW9mVkM5/etp/BCYEBnSYnDGycKYrWdM6
n70KqMhfR3drGHOIZDkyE/8stLa0Yb4lNfTGr9+aN6L2mZ3fQ7yXJFVpgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtjFKeCjGCROCeSPxgPQPLNmHtFMB8GA1UdIwQY
MBaAFDaQAYPPCKblvIB4RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMt
MmY1YjZhODNmYWYzLzEvZTJNVXA0S01ZSkU0SjVJX0dBOUE4czJZZTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYz
LzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu7MA0G
CSqGSIb3DQEBCwUAA4IBAQDS8XfsIollcLqKMTFWj6UVmNVBcYZHR5jwyzKxRyEV
qrsB+vCFnHJpGaR+d6WAzNO+uUTyPSrDJ8vaGCnFXz7uk85SXR1mbbG6ksB1GZEd
f+ui/IIuQ+lM/+k9S1j7Rn2s5jIb9X4mvTpvus2eZ7klfzpRLW39Yb5YwUp7GO4b
Ef6gTT3//fankMkiU0S4GOXetFJsTZnR7ijyLv6vpbXdeWNJJ4cbYfJhZiEXWSDy
VMfAJEV8wl0KF2u0zfGb3tLwyhRn/E18tmNWZKSYY3+wvaJqg4AI1g6PW0v/7fX+
yXtN1NitDs7PbX24/GrkKkERPpuFHr9iix1q1B8Uzs3H
-----END CERTIFICATE-----
Generated at Sun Apr 28 12:25:02 2024 by rpki-client on console-ams.rpki-client.org