Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EccNMOlNlyE5E-ZNULcjgu8pkjY.roa
File: EccNMOlNlyE5E-ZNULcjgu8pkjY.roa (raw, json)
Hash identifier: juzfcDnFfWVfpf1wiRIbd6JdycZy89tAUGbro2dxaHA=
Subject key identifier: 11:C7:0D:30:E9:4D:97:21:39:13:E6:4D:50:B7:23:82:EF:29:92:36
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB330B958FB81F21F8C2D6F7C0A4AF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EccNMOlNlyE5E-ZNULcjgu8pkjY.roa
Signing time: Mon 01 Jan 2024 02:29:54 +0000
ROA not before: Mon 01 Jan 2024 02:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203624
IP address blocks: 45.91.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:33:0b:95:8f:b8:1f:21:f8:c2:d6:f7:c0:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c70d30e94d97213913e64d50b72382ef299236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:04:bd:cc:78:62:69:bd:88:70:4f:8c:da:
ba:49:cb:94:91:68:8d:9d:1a:d6:cc:00:6a:5d:1e:
e6:89:60:b1:b3:04:20:48:5f:17:e5:26:7c:e9:6e:
6a:ed:07:2c:aa:ac:9e:a6:6d:a8:da:0a:23:7f:fd:
e2:9a:02:9d:7b:b4:c5:c6:74:d0:8a:ce:d8:3d:b5:
bb:b5:4d:9a:c6:ba:d3:56:fc:45:3a:e3:31:03:ae:
08:9b:10:df:63:8a:02:c4:84:58:ec:c7:ca:c4:f1:
d0:81:9b:2d:c5:87:7a:fb:34:86:7f:5d:68:50:5f:
12:ea:77:22:fd:14:f6:64:bc:64:92:ce:6d:ca:36:
17:f2:cf:a5:60:02:e9:44:db:1e:7b:59:f0:70:64:
2d:37:c5:bc:83:aa:4c:a1:44:cf:14:7e:97:3b:3c:
09:16:c2:9f:c3:ef:54:2a:4d:3d:fc:df:70:0c:a5:
d7:81:07:a7:85:9e:88:68:6d:53:e3:8c:b1:a7:32:
fc:ec:e6:7e:46:7a:34:33:50:8c:ca:2b:4f:17:62:
18:80:5a:d7:ed:d4:5c:73:7f:21:9e:9a:15:a2:01:
92:87:8d:d2:bf:3b:77:4c:bf:ca:e6:b0:9d:5e:c7:
6f:ff:8a:6a:0f:b4:6a:09:7d:2d:ef:09:12:55:19:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:0D:30:E9:4D:97:21:39:13:E6:4D:50:B7:23:82:EF:29:92:36
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/EccNMOlNlyE5E-ZNULcjgu8pkjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.84.0/22
Signature Algorithm: sha256WithRSAEncryption
66:07:3e:4a:9c:a3:7b:de:36:1c:b9:e8:b5:2a:9b:ab:7b:de:
8d:94:09:4d:d0:f6:0d:e6:5c:23:28:58:1d:15:94:ee:ba:19:
b6:42:ce:64:2a:49:27:5a:f9:62:d9:e7:aa:28:45:b9:2f:37:
d7:77:90:e0:65:34:5c:a9:fc:e1:8f:53:26:18:46:f2:8a:a8:
56:e1:7f:a3:b2:0d:ea:f4:7a:02:84:a5:c1:e2:42:b1:7d:25:
ef:ec:c7:ce:ed:a1:14:d7:d8:a8:15:56:0a:7f:58:0e:84:9a:
b4:ab:06:1c:7e:38:e9:31:2d:30:fa:56:b4:d2:ce:98:b0:35:
5e:bb:3f:00:fe:5e:bb:ad:4c:ec:33:c9:97:ff:60:60:8a:76:
20:0d:fa:94:2e:3f:6b:c1:14:c3:1a:57:bf:87:e6:29:05:f5:
62:e4:d2:e9:c5:79:aa:9e:79:1f:d9:51:f1:31:d6:6b:b0:c1:
00:15:ea:a3:7a:9d:6b:74:64:db:be:84:10:2b:cf:51:3e:4d:
e4:f3:a4:95:46:73:df:41:45:fb:77:cf:37:f9:d3:d8:c4:d6:
93:23:11:35:9f:d9:9a:8e:74:5a:65:e6:fb:a6:8b:cb:06:4e:
0b:d7:a2:f1:b5:de:6b:ff:49:18:19:32:85:b4:bb:df:0c:f2:
4d:d2:94:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zMLlY+4HyH4wtb3wKSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM3MGQzMGU5NGQ5NzIxMzkxM2U2NGQ1MGI3MjM4MmVmMjk5MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVUEvcx4Ymm9iHBPjNq6ScuUkWiN
nRrWzABqXR7miWCxswQgSF8X5SZ86W5q7Qcsqqyepm2o2gojf/3imgKde7TFxnTQ
is7YPbW7tU2axrrTVvxFOuMxA64ImxDfY4oCxIRY7MfKxPHQgZstxYd6+zSGf11o
UF8S6nci/RT2ZLxkks5tyjYX8s+lYALpRNsee1nwcGQtN8W8g6pMoUTPFH6XOzwJ
FsKfw+9UKk09/N9wDKXXgQenhZ6IaG1T44yxpzL87OZ+Rno0M1CMyitPF2IYgFrX
7dRcc38hnpoVogGSh43Svzt3TL/K5rCdXsdv/4pqD7RqCX0t7wkSVRk/KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHHDTDpTZchORPmTVC3I4LvKZI2MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvRWNjTk1PbE5seUU1RS1aTlVMY2pndThwa2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVtUMA0G
CSqGSIb3DQEBCwUAA4IBAQBmBz5KnKN73jYcuei1Kpure96NlAlN0PYN5lwjKFgd
FZTuuhm2Qs5kKkknWvli2eeqKEW5LzfXd5DgZTRcqfzhj1MmGEbyiqhW4X+jsg3q
9HoChKXB4kKxfSXv7MfO7aEU19ioFVYKf1gOhJq0qwYcfjjpMS0w+la00s6YsDVe
uz8A/l67rUzsM8mX/2BginYgDfqULj9rwRTDGle/h+YpBfVi5NLpxXmqnnkf2VHx
MdZrsMEAFeqjep1rdGTbvoQQK89RPk3k86SVRnPfQUX7d883+dPYxNaTIxE1n9ma
jnRaZeb7povLBk4L16Lxtd5r/0kYGTKFtLvfDPJN0pRV
-----END CERTIFICATE-----
Generated at Sat May 4 09:03:51 2024 by rpki-client on console-ams.rpki-client.org