Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/aXJrr0AlHeXLke7y62hFJyWFeto.roa
File: aXJrr0AlHeXLke7y62hFJyWFeto.roa (raw, json)
Hash identifier: Mydv8SC0h2sUo3at7zXgpSgLBQ0iknnN5HFjOI1m3NU=
Subject key identifier: 69:72:6B:AF:40:25:1D:E5:CB:91:EE:F2:EB:68:45:27:25:85:7A:DA
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018CC64B69DD3CB47A4744347AE364239818
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/aXJrr0AlHeXLke7y62hFJyWFeto.roa
Signing time: Mon 01 Jan 2024 18:31:20 +0000
ROA not before: Mon 01 Jan 2024 18:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139659
IP address blocks: 45.136.12.0/22 maxlen: 24
45.144.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:69:dd:3c:b4:7a:47:44:34:7a:e3:64:23:98:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 18:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69726baf40251de5cb91eef2eb68452725857ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:b3:ea:2b:96:84:be:c3:9b:8f:98:8f:3f:
e0:87:f4:56:4f:16:5c:05:a0:8d:66:d7:67:02:00:
4b:27:ee:29:55:4a:40:6e:b8:ea:49:bd:9e:2d:67:
88:c2:01:4d:13:09:91:85:68:3f:78:91:51:40:09:
5a:ba:ac:af:c5:86:d2:73:6b:3c:68:7b:97:83:1f:
58:da:2b:3d:f8:cb:34:6e:6d:5a:55:0e:e3:c9:85:
2f:fc:18:bc:0e:7c:a8:9f:c1:e7:62:78:2c:e0:66:
78:9e:01:aa:98:7b:84:44:db:91:1c:a9:a7:58:e1:
08:b1:46:02:80:58:bc:34:50:78:e1:1c:b9:b3:82:
a4:81:af:6e:80:b5:28:98:4a:f7:50:c9:ee:b5:3b:
f8:5e:71:8b:c2:bd:5f:52:f0:26:9a:24:d5:2d:05:
12:16:0e:e0:36:0e:b1:31:cd:6c:bd:4c:6c:6a:ce:
17:d2:09:1a:14:74:30:ca:df:ad:40:0a:cb:13:18:
31:99:e1:e8:28:f1:9d:ca:c2:7b:d4:43:f1:3c:65:
a2:ed:d4:e3:d2:96:6f:9b:f0:80:b7:3f:ad:26:62:
ad:d9:cd:48:06:2d:4d:d5:5f:46:70:1d:7b:0f:c4:
be:e0:1b:84:eb:56:af:2d:cc:b5:66:c0:55:56:8a:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:6B:AF:40:25:1D:E5:CB:91:EE:F2:EB:68:45:27:25:85:7A:DA
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/aXJrr0AlHeXLke7y62hFJyWFeto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.12.0/22
45.144.136.0/22
Signature Algorithm: sha256WithRSAEncryption
66:0f:19:cd:0b:a4:58:0d:db:0a:09:da:c4:c4:74:07:d8:c6:
5f:4e:a6:99:e0:38:9e:ea:81:f6:24:bc:71:6d:61:44:59:04:
a8:01:ac:fd:00:50:e2:08:67:40:d8:36:31:af:46:f7:e6:45:
ff:f1:c2:b0:85:96:eb:14:df:58:30:6c:10:39:a9:da:b7:cd:
f4:da:7e:e3:6a:e2:41:d0:eb:f8:5c:4a:98:78:99:a9:c1:79:
76:07:2f:05:63:7d:f9:13:c8:ba:cd:c2:cd:51:9d:a7:15:4a:
4d:c1:75:1c:23:37:aa:e4:f6:9a:26:92:0b:7f:b5:e4:8a:62:
9e:44:f2:91:57:72:6b:5f:e4:0b:46:f3:1d:fd:92:0b:9a:f9:
16:57:0b:1d:ff:89:be:c4:3c:d6:00:39:1d:12:f0:1e:82:74:
d8:dd:48:3f:c7:5c:07:2c:65:f4:97:bf:e2:6d:f0:c2:d5:cc:
6f:15:85:c6:6f:92:57:5e:c3:69:41:d6:b8:bf:f7:53:0c:51:
4d:ac:e8:29:52:dc:05:d3:34:67:a8:5b:96:92:2d:63:09:e8:
b0:70:31:c6:45:42:8f:16:99:58:b5:6a:a4:91:bd:d1:ee:e6:
69:ec:f4:78:94:d6:91:e0:8f:ab:25:de:c2:7b:e7:8f:00:30:
48:8f:87:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGS2ndPLR6R0Q0euNkI5gYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2I0ODc4NDhmZmY2MzUzM2Q4N2MzMjRlY2M1MWMyYzNl
YTJhZGIwHhcNMjQwMTAxMTgzMTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTcyNmJhZjQwMjUxZGU1Y2I5MWVlZjJlYjY4NDUyNzI1ODU3YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6yz6iuWhL7Dm4+Yjz/gh/RWTxZc
BaCNZtdnAgBLJ+4pVUpAbrjqSb2eLWeIwgFNEwmRhWg/eJFRQAlauqyvxYbSc2s8
aHuXgx9Y2is9+Ms0bm1aVQ7jyYUv/Bi8Dnyon8HnYngs4GZ4ngGqmHuERNuRHKmn
WOEIsUYCgFi8NFB44Ry5s4Kkga9ugLUomEr3UMnutTv4XnGLwr1fUvAmmiTVLQUS
Fg7gNg6xMc1svUxsas4X0gkaFHQwyt+tQArLExgxmeHoKPGdysJ71EPxPGWi7dTj
0pZvm/CAtz+tJmKt2c1IBi1N1V9GcB17D8S+4BuE61avLcy1ZsBVVopWVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGlya69AJR3ly5Hu8utoRSclhXraMB8GA1UdIwQY
MBaAFDR7SHhI//Y1M9h8Mk7MUcLD6irbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2It
MjMwYjNiNzJhMTc1LzEvYVhKcnIwQWxIZVhMa2U3eTYyaEZKeVdGZXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2ItMjMwYjNiNzJhMTc1
LzEvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYgMAwQC
LZCIMA0GCSqGSIb3DQEBCwUAA4IBAQBmDxnNC6RYDdsKCdrExHQH2MZfTqaZ4Die
6oH2JLxxbWFEWQSoAaz9AFDiCGdA2DYxr0b35kX/8cKwhZbrFN9YMGwQOanat830
2n7jauJB0Ov4XEqYeJmpwXl2By8FY335E8i6zcLNUZ2nFUpNwXUcIzeq5PaaJpIL
f7XkimKeRPKRV3JrX+QLRvMd/ZILmvkWVwsd/4m+xDzWADkdEvAegnTY3Ug/x1wH
LGX0l7/ibfDC1cxvFYXGb5JXXsNpQda4v/dTDFFNrOgpUtwF0zRnqFuWki1jCeiw
cDHGRUKPFplYtWqkkb3R7uZp7PR4lNaR4I+rJd7Ce+ePADBIj4dG
-----END CERTIFICATE-----
Generated at Sun May 19 21:04:28 2024 by rpki-client on console-ams.rpki-client.org