Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/4or7LQbRm4dXUXkDoqjkVAdWTKo.roa
File: 4or7LQbRm4dXUXkDoqjkVAdWTKo.roa (raw, json)
Hash identifier: xixbEi5im5DCmI947JDaOTSW6Rrv410ByH4DhtLy9q4=
Subject key identifier: E2:8A:FB:2D:06:D1:9B:87:57:51:79:03:A2:A8:E4:54:07:56:4C:AA
Certificate issuer: /CN=4a3ba2d337bc870d043a68bf170aa6701e27880e
Certificate serial: 018CCFA70CA264C5CD033C08F7EE3793AFBA
Authority key identifier: 4A:3B:A2:D3:37:BC:87:0D:04:3A:68:BF:17:0A:A6:70:1E:27:88:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjui0ze8hw0EOmi_FwqmcB4niA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/4or7LQbRm4dXUXkDoqjkVAdWTKo.roa
Signing time: Wed 03 Jan 2024 14:08:00 +0000
ROA not before: Wed 03 Jan 2024 14:08:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56485
IP address blocks: 45.11.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjui0ze8hw0EOmi_FwqmcB4niA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:a7:0c:a2:64:c5:cd:03:3c:08:f7:ee:37:93:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3ba2d337bc870d043a68bf170aa6701e27880e
Validity
Not Before: Jan 3 14:08:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e28afb2d06d19b8757517903a2a8e45407564caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:20:14:24:52:db:9d:79:6e:f0:ef:a9:19:
ad:17:e8:65:88:74:bb:6a:68:23:c8:b9:44:53:9c:
87:0b:7f:f3:56:e5:15:ac:c0:3d:ea:c1:17:cb:6c:
af:ca:5b:25:ba:b3:24:25:e4:b5:a8:70:07:b0:c8:
c8:db:db:de:ea:95:54:e5:f5:48:6b:19:32:dd:05:
08:f0:14:8e:b6:0e:3b:5d:a6:df:83:50:ed:64:24:
52:11:48:87:cb:c5:67:5d:4e:19:92:36:3e:3d:7e:
29:5c:a6:ce:9e:98:2c:74:57:1a:07:bb:10:2c:dc:
a6:ba:8d:82:9c:d3:c4:38:a5:63:e8:ff:47:08:ed:
c0:2a:cf:25:83:43:17:b9:1d:17:c4:f5:56:d0:c8:
89:86:8a:51:51:f8:d4:4a:70:64:10:dd:28:52:47:
6f:4d:0a:32:93:e4:e1:a9:e3:35:a9:c6:88:2f:8d:
a0:83:c1:25:37:78:4a:ca:cc:61:ff:70:5b:73:e9:
19:35:59:68:e4:22:73:aa:89:1f:39:4c:8a:df:67:
a8:1d:06:f7:12:d4:8e:0a:4a:44:59:64:df:06:bd:
87:54:57:1c:6f:f5:29:97:11:79:d4:97:5c:1b:dd:
d0:a2:38:2b:4c:63:fa:e2:db:ba:09:5d:fb:0d:90:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:FB:2D:06:D1:9B:87:57:51:79:03:A2:A8:E4:54:07:56:4C:AA
X509v3 Authority Key Identifier:
keyid:4A:3B:A2:D3:37:BC:87:0D:04:3A:68:BF:17:0A:A6:70:1E:27:88:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjui0ze8hw0EOmi_FwqmcB4niA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/4or7LQbRm4dXUXkDoqjkVAdWTKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/0e018a-e4f5-4bd2-8cdb-16ad719fbb6d/1/Sjui0ze8hw0EOmi_FwqmcB4niA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.198.0/24
Signature Algorithm: sha256WithRSAEncryption
18:26:bc:cd:74:66:f5:d2:ee:14:8d:55:15:14:49:c5:3e:c5:
bf:94:57:eb:18:49:3d:bc:ff:f9:0b:05:cc:8c:ea:ef:a2:18:
f0:49:18:45:86:6e:9a:74:ac:00:9b:f0:29:a8:d9:0f:00:37:
07:29:cd:a4:76:ce:61:51:03:47:4f:5f:ca:e4:06:e9:db:3a:
f6:a6:8d:f5:ee:56:a7:7c:f5:0c:34:c8:74:1c:10:cb:69:f9:
78:13:02:2d:ee:3c:bf:63:2f:10:f7:7d:c8:d8:85:d7:7c:2d:
93:b5:63:ec:1f:98:2c:bb:41:0c:6e:d3:c5:3d:a5:aa:75:9e:
b0:34:d5:2e:e6:34:5b:48:1d:01:a3:64:12:ed:4c:ae:ba:c9:
0e:f9:e2:59:d0:8d:60:8b:78:45:7d:7a:23:9f:71:d3:89:c9:
38:8e:48:73:1b:1d:8c:50:01:cc:fc:f4:9e:89:81:4e:42:9b:
f3:f7:ef:02:11:da:62:d6:f7:41:6c:67:2f:f1:ea:1c:8f:11:
90:aa:6a:31:55:f2:95:1d:66:cf:8c:b8:28:da:fb:5f:25:20:
b5:3b:f5:8b:5e:95:b9:8b:e3:f1:fc:c2:44:21:d4:f0:8f:96:
a9:4d:95:5f:b3:44:1d:ac:70:e6:7f:c8:45:ab:98:33:57:36:
32:01:84:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzPpwyiZMXNAzwI9+43k6+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2JhMmQzMzdiYzg3MGQwNDNhNjhiZjE3MGFhNjcwMWUy
Nzg4MGUwHhcNMjQwMTAzMTQwODAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjhhZmIyZDA2ZDE5Yjg3NTc1MTc5MDNhMmE4ZTQ1NDA3NTY0Y2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLkgFCRS2515bvDvqRmtF+hliHS7
amgjyLlEU5yHC3/zVuUVrMA96sEXy2yvylslurMkJeS1qHAHsMjI29ve6pVU5fVI
axky3QUI8BSOtg47Xabfg1DtZCRSEUiHy8VnXU4ZkjY+PX4pXKbOnpgsdFcaB7sQ
LNymuo2CnNPEOKVj6P9HCO3AKs8lg0MXuR0XxPVW0MiJhopRUfjUSnBkEN0oUkdv
TQoyk+ThqeM1qcaIL42gg8ElN3hKysxh/3Bbc+kZNVlo5CJzqokfOUyK32eoHQb3
EtSOCkpEWWTfBr2HVFccb/UplxF51JdcG93QojgrTGP64tu6CV37DZDOBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKK+y0G0ZuHV1F5A6Ko5FQHVkyqMB8GA1UdIwQY
MBaAFEo7otM3vIcNBDpovxcKpnAeJ4gOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p1aTB6ZThodzBFT21pX0Z3cW1jQjRuaUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8wZTAxOGEtZTRmNS00YmQyLThjZGIt
MTZhZDcxOWZiYjZkLzEvNG9yN0xRYlJtNGRYVVhrRG9xamtWQWRXVEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8wZTAxOGEtZTRmNS00YmQyLThjZGItMTZhZDcxOWZiYjZk
LzEvU2p1aTB6ZThodzBFT21pX0Z3cW1jQjRuaUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQvGMA0G
CSqGSIb3DQEBCwUAA4IBAQAYJrzNdGb10u4UjVUVFEnFPsW/lFfrGEk9vP/5CwXM
jOrvohjwSRhFhm6adKwAm/ApqNkPADcHKc2kds5hUQNHT1/K5Abp2zr2po317lan
fPUMNMh0HBDLafl4EwIt7jy/Yy8Q933I2IXXfC2TtWPsH5gsu0EMbtPFPaWqdZ6w
NNUu5jRbSB0Bo2QS7UyuuskO+eJZ0I1gi3hFfXojn3HTick4jkhzGx2MUAHM/PSe
iYFOQpvz9+8CEdpi1vdBbGcv8eocjxGQqmoxVfKVHWbPjLgo2vtfJSC1O/WLXpW5
i+Px/MJEIdTwj5apTZVfs0QdrHDmf8hFq5gzVzYyAYSf
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:25:49 2024 by rpki-client on console-ams.rpki-client.org