Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/a1y-1jwMAPovpcTpUCI2aGaC-JI.roa
File: a1y-1jwMAPovpcTpUCI2aGaC-JI.roa (raw, json)
Hash identifier: zbMjrviirHF3kXXQ4O77hoMVrreN5A2+NXHhnsOH9/s=
Subject key identifier: 6B:5C:BE:D6:3C:0C:00:FA:2F:A5:C4:E9:50:22:36:68:66:82:F8:92
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 018CC56E438661F6FFF4B1965B41F61F0201
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/a1y-1jwMAPovpcTpUCI2aGaC-JI.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201877
IP address blocks: 45.13.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:43:86:61:f6:ff:f4:b1:96:5b:41:f6:1f:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b5cbed63c0c00fa2fa5c4e9502236686682f892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:2e:07:09:8a:69:b9:32:1c:c7:3f:9e:75:
0e:dd:5b:96:57:85:7a:fa:1f:8c:0e:97:35:0c:f7:
8f:84:3f:cf:1a:23:b5:86:aa:90:2d:45:4e:cb:37:
87:75:50:8e:4c:19:c0:39:ac:5b:5f:ee:87:ec:81:
ef:a9:56:5c:3b:dc:7c:87:d7:f1:eb:7b:27:ae:e7:
38:2c:65:4d:6b:ee:9f:7e:4c:c4:fe:48:f7:90:a6:
4c:6d:34:75:ff:2f:07:14:db:78:b2:0f:cf:d8:a3:
df:23:ce:65:79:59:7b:35:99:e8:5c:dc:02:1d:99:
30:80:20:68:c1:7e:54:fd:7a:6e:26:6d:6d:54:f2:
06:cf:03:3e:59:cf:bb:2b:36:ee:61:ba:19:78:06:
18:94:79:8d:97:98:d2:88:f3:43:d8:d0:46:db:f0:
8b:f4:65:65:2e:03:43:db:e5:dd:b0:d3:44:be:ed:
fe:f5:81:5d:38:8d:68:9d:c9:a4:dc:13:40:70:75:
f4:c9:e5:3a:52:63:96:64:79:aa:cb:f1:12:60:7d:
b1:c3:af:6d:30:75:26:ae:fd:81:cc:6d:ad:cf:54:
56:47:28:8d:1f:22:91:05:06:cc:1d:c5:46:af:2b:
88:e5:9c:cf:93:9a:9a:65:ac:45:4f:e7:66:05:c7:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:BE:D6:3C:0C:00:FA:2F:A5:C4:E9:50:22:36:68:66:82:F8:92
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/a1y-1jwMAPovpcTpUCI2aGaC-JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:13:57:f3:5f:76:8a:45:cd:1d:1f:43:b1:d2:34:70:df:b4:
27:77:f0:b1:08:78:62:c2:f1:60:81:5a:cb:fd:23:80:d4:64:
51:ca:ef:f3:97:b3:9a:24:d7:22:16:6c:2b:cb:54:2e:6b:9b:
2d:66:57:ee:3f:2c:8c:c3:66:0f:35:b1:6a:06:86:bc:f1:50:
49:f2:e5:1d:99:75:c1:bd:9e:47:e6:4f:66:5e:8f:ce:b6:89:
ad:de:77:f1:de:e9:04:fa:8e:0c:8e:e3:69:b5:50:96:00:5e:
02:52:75:49:a7:de:5f:4a:f5:3c:07:6b:9a:19:f9:7f:56:19:
24:a7:4f:a3:62:d9:c9:26:1e:87:5c:0a:fe:23:3a:5d:54:0e:
81:fa:dc:28:25:dc:68:ec:94:08:93:3d:a5:e5:a0:5e:33:7c:
37:7f:3d:e7:6f:fe:c1:19:90:78:58:fd:a1:ab:7d:56:c6:a8:
06:15:01:eb:4e:92:88:3e:16:01:0c:3c:d6:16:d2:8e:bd:43:
9f:d6:51:d3:57:3d:c5:c1:48:81:a2:29:ea:6c:77:7d:2c:49:
b7:dc:b3:c4:32:7a:13:d7:14:03:1b:ae:80:be:5b:b7:cf:77:
ab:68:d7:51:eb:ee:15:e6:64:cd:bd:a5:df:83:b7:3a:87:fb:
0b:67:81:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbkOGYfb/9LGWW0H2HwIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDk4NDUwMTA4NGE0NzIyMGM1Y2NjZjU0NzhiODk3YzI4
MjJjN2YwHhcNMjQwMTAxMTQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjVjYmVkNjNjMGMwMGZhMmZhNWM0ZTk1MDIyMzY2ODY2ODJmODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraouBwmKabkyHMc/nnUO3VuWV4V6
+h+MDpc1DPePhD/PGiO1hqqQLUVOyzeHdVCOTBnAOaxbX+6H7IHvqVZcO9x8h9fx
63snruc4LGVNa+6ffkzE/kj3kKZMbTR1/y8HFNt4sg/P2KPfI85leVl7NZnoXNwC
HZkwgCBowX5U/XpuJm1tVPIGzwM+Wc+7KzbuYboZeAYYlHmNl5jSiPND2NBG2/CL
9GVlLgND2+XdsNNEvu3+9YFdOI1oncmk3BNAcHX0yeU6UmOWZHmqy/ESYH2xw69t
MHUmrv2BzG2tz1RWRyiNHyKRBQbMHcVGryuI5ZzPk5qaZaxFT+dmBcfY6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtcvtY8DAD6L6XE6VAiNmhmgviSMB8GA1UdIwQY
MBaAFKwJhFAQhKRyIMXMz1R4uJfCgix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgt
NGJjNzAzNGYyOGQ4LzEvYTF5LTFqd01BUG92cGNUcFVDSTJhR2FDLUpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yOTNlYzItYjE0NC00YmNjLThhNDgtNGJjNzAzNGYyOGQ4
LzEvckFtRVVCQ0VwSElneGN6UFZIaTRsOEtDTEg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ14MA0G
CSqGSIb3DQEBCwUAA4IBAQB/E1fzX3aKRc0dH0Ox0jRw37Qnd/CxCHhiwvFggVrL
/SOA1GRRyu/zl7OaJNciFmwry1Qua5stZlfuPyyMw2YPNbFqBoa88VBJ8uUdmXXB
vZ5H5k9mXo/Otomt3nfx3ukE+o4MjuNptVCWAF4CUnVJp95fSvU8B2uaGfl/Vhkk
p0+jYtnJJh6HXAr+IzpdVA6B+twoJdxo7JQIkz2l5aBeM3w3fz3nb/7BGZB4WP2h
q31WxqgGFQHrTpKIPhYBDDzWFtKOvUOf1lHTVz3FwUiBoinqbHd9LEm33LPEMnoT
1xQDG66Avlu3z3eraNdR6+4V5mTNvaXfg7c6h/sLZ4HN
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:31 2024 by rpki-client on console-fra.rpki-client.org