Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2yrL66P0evELXgf9xzJi21a7V6U.roa
File: 2yrL66P0evELXgf9xzJi21a7V6U.roa (raw, json)
Hash identifier: nqDlU9Fzx+3L3oQf3CyBdhlRuATW5IluM6zWdSCh71c=
Subject key identifier: DB:2A:CB:EB:A3:F4:7A:F1:0B:5E:07:FD:C7:32:62:DB:56:BB:57:A5
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CC8DF156C5CF0EFC3101B3E0EA215CBA1
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2yrL66P0evELXgf9xzJi21a7V6U.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 45.157.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:15:6c:5c:f0:ef:c3:10:1b:3e:0e:a2:15:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db2acbeba3f47af10b5e07fdc73262db56bb57a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:ca:93:31:b7:ef:17:05:30:16:fe:fb:40:
24:d3:67:0f:0d:a8:12:68:6b:e5:9d:48:39:a7:8c:
f7:a4:45:a9:32:87:82:a3:56:57:63:05:32:28:67:
ce:6d:7e:de:91:f9:90:1c:2d:f8:71:db:ab:cd:86:
63:c2:4e:c7:c3:de:b9:86:51:db:b7:c3:94:a9:b1:
58:34:72:12:a2:31:7b:b7:ce:43:6f:62:0a:de:09:
d2:a7:0e:e9:81:a7:67:f3:12:4d:24:22:01:74:45:
ef:4a:aa:4e:0d:47:06:c9:1d:80:3b:37:f4:29:d6:
22:d6:5c:1e:fb:99:1b:5d:c6:32:44:2c:a9:a5:bc:
de:d7:b7:99:c3:b1:0c:35:c2:ca:77:f4:cc:f2:f9:
71:c6:be:88:fd:8a:c8:c0:3a:cd:f3:64:43:71:6d:
ee:ee:8a:44:e2:5b:82:1e:f2:22:e0:fc:ed:55:35:
ea:60:fe:e3:74:cc:e0:54:09:44:fb:73:99:ef:c2:
2f:3f:bb:e4:3a:ca:9c:f5:80:c9:c6:23:b5:aa:77:
b7:1f:81:4c:82:59:72:6e:fe:6f:de:b8:eb:7c:c8:
83:1f:bb:0c:18:c6:0e:c0:5c:ed:b1:5b:56:ca:ab:
8e:5c:95:14:1e:0f:0e:c5:48:c8:17:81:e7:2b:2e:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:CB:EB:A3:F4:7A:F1:0B:5E:07:FD:C7:32:62:DB:56:BB:57:A5
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2yrL66P0evELXgf9xzJi21a7V6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:54:8a:a4:89:82:9e:43:2b:a3:35:6c:44:fc:97:29:e4:d7:
e7:13:fe:ed:1e:32:fc:73:56:c7:27:52:65:95:17:0d:e4:17:
f2:96:c8:15:ed:98:d6:9a:de:8a:aa:d5:c0:fd:5c:3f:04:19:
28:59:d7:30:e3:e1:c8:2d:b5:30:d6:41:98:ff:f5:6d:50:cc:
80:c1:66:68:f5:1c:b6:10:b5:8c:e9:c3:20:ac:9a:23:dc:35:
a7:bd:e6:23:8e:b3:94:db:22:81:48:43:a3:74:60:26:21:af:
4f:1e:52:06:d7:98:99:5f:85:83:42:0c:f5:36:1b:6d:32:49:
14:f2:74:64:63:d6:ac:66:b6:56:b5:5e:54:dd:c1:a7:bf:0e:
7f:03:09:84:1d:ff:1f:40:bc:f7:2a:52:b9:db:fb:2d:f6:91:
02:9e:d3:15:cf:b4:6f:d9:25:57:e4:93:76:33:f0:13:17:1e:
c4:d5:8e:ef:1c:cf:e1:bc:46:0b:88:8d:3f:6f:7b:2e:35:e1:
e1:f9:5b:8a:ef:45:c6:64:ab:b4:40:ec:78:8f:d1:b8:20:0d:
6e:e2:8b:56:6c:66:4f:2a:be:fc:d9:f5:5d:dc:94:33:de:47:
e1:97:2a:be:63:cd:42:29:35:de:2c:66:e4:de:63:9f:26:95:
ee:80:13:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3xVsXPDvwxAbPg6iFcuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQwMTAyMDYzMTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjJhY2JlYmEzZjQ3YWYxMGI1ZTA3ZmRjNzMyNjJkYjU2YmI1N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXfKkzG37xcFMBb++0Ak02cPDagS
aGvlnUg5p4z3pEWpMoeCo1ZXYwUyKGfObX7ekfmQHC34cdurzYZjwk7Hw965hlHb
t8OUqbFYNHISojF7t85Db2IK3gnSpw7pgadn8xJNJCIBdEXvSqpODUcGyR2AOzf0
KdYi1lwe+5kbXcYyRCyppbze17eZw7EMNcLKd/TM8vlxxr6I/YrIwDrN82RDcW3u
7opE4luCHvIi4PztVTXqYP7jdMzgVAlE+3OZ78IvP7vkOsqc9YDJxiO1qne3H4FM
gllybv5v3rjrfMiDH7sMGMYOwFztsVtWyquOXJUUHg8OxUjIF4HnKy4e7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsqy+uj9HrxC14H/ccyYttWu1elMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvMnlyTDY2UDBldkVMWGdmOXh6SmkyMWE3VjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3QMA0G
CSqGSIb3DQEBCwUAA4IBAQCxVIqkiYKeQyujNWxE/Jcp5NfnE/7tHjL8c1bHJ1Jl
lRcN5BfylsgV7ZjWmt6KqtXA/Vw/BBkoWdcw4+HILbUw1kGY//VtUMyAwWZo9Ry2
ELWM6cMgrJoj3DWnveYjjrOU2yKBSEOjdGAmIa9PHlIG15iZX4WDQgz1NhttMkkU
8nRkY9asZrZWtV5U3cGnvw5/AwmEHf8fQLz3KlK52/st9pECntMVz7Rv2SVX5JN2
M/ATFx7E1Y7vHM/hvEYLiI0/b3suNeHh+VuK70XGZKu0QOx4j9G4IA1u4otWbGZP
Kr782fVd3JQz3kfhlyq+Y81CKTXeLGbk3mOfJpXugBMP
-----END CERTIFICATE-----
Generated at Wed May 29 07:49:19 2024 by rpki-client on console-ams.rpki-client.org