Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa
File: AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa (raw, json)
Hash identifier: xLke7gfQB182MSaM5qheQBtQH+6Di7aYb4SB9oKSHCk=
Subject key identifier: 03:33:9C:DF:A1:C9:F0:C1:01:D2:24:F7:5F:E3:39:94:6E:28:E9:34
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018DFA77BFF75DB48567679A2A852F6BDE12
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa
Signing time: Fri 01 Mar 2024 14:42:48 +0000
ROA not before: Fri 01 Mar 2024 14:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.140.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:77:bf:f7:5d:b4:85:67:67:9a:2a:85:2f:6b:de:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Mar 1 14:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03339cdfa1c9f0c101d224f75fe339946e28e934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:c3:d3:7e:dd:e7:41:b3:54:da:ea:6a:bb:
2f:1a:cf:eb:09:d3:c9:35:4a:3e:2a:0d:19:92:bc:
7b:a0:67:f7:4a:9c:bc:4a:50:74:87:6f:be:5a:f2:
c9:20:19:19:7d:ff:c2:46:d6:48:01:84:cf:d6:e8:
01:18:41:51:b0:38:48:7e:86:f1:ed:b1:fc:00:ed:
92:f9:ce:33:16:51:06:33:49:4d:e3:5a:57:89:5c:
9e:c3:2b:25:eb:3b:9e:93:0f:f8:a0:5f:60:6a:de:
c1:37:5b:ab:bc:b2:dd:6c:b9:d2:1e:04:0a:1f:fa:
0a:0b:13:c0:a2:ac:02:2b:93:21:ae:82:5d:ed:ad:
fa:10:28:18:de:73:03:40:42:81:3d:9f:62:2a:5d:
3c:9f:a6:f9:7e:9e:eb:16:e1:2c:2e:3f:d4:34:04:
b8:70:d6:1a:cc:c7:29:39:8a:c9:d9:44:cc:5d:63:
15:24:7d:0f:ef:e7:62:4d:9b:e8:09:96:b5:73:b1:
f8:f0:29:e2:86:1e:86:d4:22:a4:3a:15:77:aa:ff:
af:0b:d1:be:b7:fb:15:26:d9:b3:bc:fd:36:5f:6d:
b4:c1:af:2d:9f:5c:26:09:90:5d:97:6c:8e:60:04:
39:7e:05:7a:2f:80:30:f0:21:fe:2d:eb:e8:bd:a6:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:9C:DF:A1:C9:F0:C1:01:D2:24:F7:5F:E3:39:94:6E:28:E9:34
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0d:56:af:da:c3:59:4a:6d:87:9d:29:30:80:ef:bf:e2:3c:
c6:51:a3:e4:b7:96:7f:e9:86:77:bd:9f:36:b6:81:40:c3:f0:
0f:a5:a4:09:67:87:c2:17:20:b5:f7:48:a4:96:59:c8:0b:fd:
45:10:b5:dd:b5:69:d1:61:d4:15:46:71:44:14:2c:07:73:c1:
60:d2:24:c0:ad:a4:d9:f0:41:c4:9d:c7:96:2f:1f:41:f2:12:
94:74:5d:ce:87:cc:c4:d9:8d:7d:2d:86:f2:fb:e6:83:9a:ac:
85:82:5a:1c:f7:31:65:08:fb:83:60:f2:64:ea:83:d4:9a:9a:
06:e1:fe:71:4c:0a:05:22:82:42:5b:36:04:e3:86:c9:47:35:
15:31:67:b3:c9:b3:d0:b4:6f:78:c3:9c:90:19:75:21:af:4a:
21:06:24:b2:55:0b:2b:f6:82:2a:70:c6:cf:da:26:8e:e4:24:
86:ec:95:d5:9a:35:62:c4:ac:ea:cd:c7:73:d8:f6:f4:b1:5a:
ca:a4:4c:0d:f9:c9:b8:b4:f1:b3:03:56:12:2c:38:de:44:63:
66:58:9b:ae:08:21:9e:97:6f:49:9e:37:2e:01:08:02:a5:d5:
fd:61:20:42:87:09:f8:a0:7c:12:30:90:3a:f6:0a:64:6b:30:
e0:c7:f1:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY36d7/3XbSFZ2eaKoUva94SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjQwMzAxMTQ0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzMzOWNkZmExYzlmMGMxMDFkMjI0Zjc1ZmUzMzk5NDZlMjhlOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCLD037d50GzVNrqarsvGs/rCdPJ
NUo+Kg0Zkrx7oGf3Spy8SlB0h2++WvLJIBkZff/CRtZIAYTP1ugBGEFRsDhIfobx
7bH8AO2S+c4zFlEGM0lN41pXiVyewysl6zuekw/4oF9gat7BN1urvLLdbLnSHgQK
H/oKCxPAoqwCK5MhroJd7a36ECgY3nMDQEKBPZ9iKl08n6b5fp7rFuEsLj/UNAS4
cNYazMcpOYrJ2UTMXWMVJH0P7+diTZvoCZa1c7H48Cnihh6G1CKkOhV3qv+vC9G+
t/sVJtmzvP02X220wa8tn1wmCZBdl2yOYAQ5fgV6L4Aw8CH+Levovaa26QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAMznN+hyfDBAdIk91/jOZRuKOk0MB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvQXpPYzM2SEo4TUVCMGlUM1gtTTVsRzRvNlRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzTMA0G
CSqGSIb3DQEBCwUAA4IBAQAlDVav2sNZSm2HnSkwgO+/4jzGUaPkt5Z/6YZ3vZ82
toFAw/APpaQJZ4fCFyC190ikllnIC/1FELXdtWnRYdQVRnFEFCwHc8Fg0iTAraTZ
8EHEnceWLx9B8hKUdF3Oh8zE2Y19LYby++aDmqyFgloc9zFlCPuDYPJk6oPUmpoG
4f5xTAoFIoJCWzYE44bJRzUVMWezybPQtG94w5yQGXUhr0ohBiSyVQsr9oIqcMbP
2iaO5CSG7JXVmjVixKzqzcdz2Pb0sVrKpEwN+cm4tPGzA1YSLDjeRGNmWJuuCCGe
l29JnjcuAQgCpdX9YSBChwn4oHwSMJA69gpkazDgx/HR
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:42:23 2024 by rpki-client on console-ams.rpki-client.org