Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/xMvcm_KV6q0WJkvp0p4gD5RNtig.roa
File: xMvcm_KV6q0WJkvp0p4gD5RNtig.roa (raw, json)
Hash identifier: MOFzlknqO7qCpoU+Pp5PBhNUvTsjYxK2qCRh4fdjI0Y=
Subject key identifier: C4:CB:DC:9B:F2:95:EA:AD:16:26:4B:E9:D2:9E:20:0F:94:4D:B6:28
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018E15C8487F1DFD1FD5B3383F2FF491DBA3
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/xMvcm_KV6q0WJkvp0p4gD5RNtig.roa
Signing time: Wed 06 Mar 2024 22:00:30 +0000
ROA not before: Wed 06 Mar 2024 22:00:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264617
IP address blocks: 45.94.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:15:c8:48:7f:1d:fd:1f:d5:b3:38:3f:2f:f4:91:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Mar 6 22:00:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4cbdc9bf295eaad16264be9d29e200f944db628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:77:bf:62:2b:a8:36:c8:eb:d0:9a:a6:d5:
0a:67:c0:9d:fc:cd:4a:b6:dc:a6:a9:7b:9f:fe:cd:
ca:9e:3b:9d:cc:25:dd:de:b7:99:ac:95:b8:07:c7:
9d:7a:67:d8:9d:26:ef:99:ce:c4:cc:81:29:3a:4a:
03:5c:05:b9:5f:8d:3c:0b:b7:9b:d6:2b:61:dc:11:
e9:57:18:c5:59:6c:de:a0:a7:e8:1c:ad:70:fe:0d:
6a:0d:64:20:63:2e:71:b9:5f:34:98:bc:e1:40:54:
83:d1:a6:25:24:50:20:1c:34:53:f8:74:02:61:93:
f1:55:33:28:63:f1:1b:48:92:42:05:44:2a:84:98:
61:b1:23:a2:9a:7f:ea:79:34:11:c9:02:6c:b0:67:
42:4d:6b:97:07:ed:41:d6:77:2f:5a:0f:36:62:ec:
7c:b0:8b:6d:d9:b7:43:d0:89:ab:59:7d:52:86:fa:
0f:c3:88:3a:a1:3b:0c:71:fc:4d:51:54:0f:87:a0:
e8:c1:32:dc:bb:e6:cc:09:bf:1c:5a:98:c3:02:c9:
33:97:68:5f:ac:60:f3:a7:45:84:12:a9:84:28:6b:
16:cc:88:86:0d:dc:b6:7f:6c:bd:af:8f:cd:a5:d8:
c5:94:f0:a0:4d:d3:06:d9:c3:f8:c5:5b:32:1f:8c:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:DC:9B:F2:95:EA:AD:16:26:4B:E9:D2:9E:20:0F:94:4D:B6:28
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/xMvcm_KV6q0WJkvp0p4gD5RNtig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:16:55:3a:91:06:d9:46:94:3c:57:bc:75:59:28:e3:e6:ff:
a1:94:47:23:21:40:a9:ab:5b:ff:4b:e6:54:c0:e1:78:8b:f6:
57:0a:16:36:8c:a1:d6:ed:cd:f8:d3:dd:69:23:a1:0f:f9:73:
ce:4c:a2:03:7d:60:e0:0a:9e:54:f8:07:2b:aa:40:98:b8:55:
cd:9b:3d:06:d7:bd:33:f1:46:9b:bf:b9:8c:00:36:e3:20:a0:
d2:d7:df:13:f4:34:f9:e2:35:af:fb:36:70:18:da:a0:1a:0c:
6f:60:42:00:26:44:fc:21:65:7f:47:8c:22:77:63:29:39:f8:
42:f8:7b:71:bd:df:65:4a:d1:8f:9d:69:67:d8:a9:44:1e:03:
d8:e6:25:e0:d0:25:3c:70:7d:69:f3:64:c6:a5:d1:d4:f4:af:
3a:0a:74:4d:33:96:a5:ce:56:98:00:a9:c9:6c:4d:b5:55:24:
0e:83:bf:57:0e:23:e4:c6:2a:7e:fe:e7:f2:58:ab:c2:37:68:
65:5f:eb:50:c1:78:f2:2c:3a:82:c0:b5:fa:ef:fa:09:2d:fe:
6c:35:29:65:8f:e6:0b:fe:5d:4c:fe:21:fb:7c:1c:f3:5d:8f:
e3:b7:5c:6f:0b:93:b3:2b:65:cf:a3:f1:af:14:95:cd:bd:08:
1f:10:93:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4VyEh/Hf0f1bM4Py/0kdujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjQwMzA2MjIwMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGNiZGM5YmYyOTVlYWFkMTYyNjRiZTlkMjllMjAwZjk0NGRiNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWl3v2IrqDbI69CaptUKZ8Cd/M1K
ttymqXuf/s3KnjudzCXd3reZrJW4B8edemfYnSbvmc7EzIEpOkoDXAW5X408C7eb
1ith3BHpVxjFWWzeoKfoHK1w/g1qDWQgYy5xuV80mLzhQFSD0aYlJFAgHDRT+HQC
YZPxVTMoY/EbSJJCBUQqhJhhsSOimn/qeTQRyQJssGdCTWuXB+1B1ncvWg82Yux8
sItt2bdD0ImrWX1ShvoPw4g6oTsMcfxNUVQPh6DowTLcu+bMCb8cWpjDAskzl2hf
rGDzp0WEEqmEKGsWzIiGDdy2f2y9r4/NpdjFlPCgTdMG2cP4xVsyH4zJrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTL3JvyleqtFiZL6dKeIA+UTbYoMB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEveE12Y21fS1Y2cTBXSmt2cDBwNGdENVJOdGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6IMA0G
CSqGSIb3DQEBCwUAA4IBAQCcFlU6kQbZRpQ8V7x1WSjj5v+hlEcjIUCpq1v/S+ZU
wOF4i/ZXChY2jKHW7c34091pI6EP+XPOTKIDfWDgCp5U+AcrqkCYuFXNmz0G170z
8Uabv7mMADbjIKDS198T9DT54jWv+zZwGNqgGgxvYEIAJkT8IWV/R4wid2MpOfhC
+Htxvd9lStGPnWln2KlEHgPY5iXg0CU8cH1p82TGpdHU9K86CnRNM5alzlaYAKnJ
bE21VSQOg79XDiPkxip+/ufyWKvCN2hlX+tQwXjyLDqCwLX67/oJLf5sNSllj+YL
/l1M/iH7fBzzXY/jt1xvC5OzK2XPo/GvFJXNvQgfEJMQ
-----END CERTIFICATE-----
Generated at Wed May 1 18:33:55 2024 by rpki-client on console-ams.rpki-client.org