Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yxR2UqSpcK4OZIA-OY6MWpjpa9g.roa
File: yxR2UqSpcK4OZIA-OY6MWpjpa9g.roa (raw, json)
Hash identifier: sM1WPVOituzp4qGm15FK3656tzayTCjB6Rw+/9zG7qw=
Subject key identifier: CB:14:76:52:A4:A9:70:AE:0E:64:80:3E:39:8E:8C:5A:98:E9:6B:D8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01932AAAB26F4B62BA887A15A30AE989B52D
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yxR2UqSpcK4OZIA-OY6MWpjpa9g.roa
Signing time: Thu 14 Nov 2024 12:34:10 +0000
ROA not before: Thu 14 Nov 2024 12:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20200
IP address blocks: 45.155.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:aa:b2:6f:4b:62:ba:88:7a:15:a3:0a:e9:89:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 14 12:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb147652a4a970ae0e64803e398e8c5a98e96bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:69:b2:13:3c:3d:42:08:c8:7b:a8:58:fb:
48:38:8c:00:9f:8a:c5:14:22:6f:0e:f2:3b:86:fe:
64:06:f6:a6:b1:b8:a5:b2:fd:43:82:d3:85:d5:13:
0c:9a:96:c7:80:1c:d0:fe:b0:2f:74:6d:bd:be:59:
07:01:d7:00:78:c6:ee:27:bd:9f:01:ea:29:3a:e3:
7c:a1:17:75:7c:34:48:8f:1b:09:bc:f5:0e:d5:7a:
d4:dc:14:99:4b:33:e5:a2:d6:56:7f:8a:45:23:75:
ac:34:e7:b3:c6:74:86:a4:46:26:55:4f:dc:44:ca:
33:51:80:13:87:2d:a2:b9:dc:27:67:6e:b2:b2:8c:
00:5b:b6:96:e0:bd:94:34:cb:85:cc:b0:f4:12:ba:
32:f9:fb:56:bb:2c:69:8f:18:f5:02:b8:b1:94:86:
4b:ac:21:15:6e:d7:de:68:a3:55:13:7d:ce:e2:47:
e7:d6:8a:5d:6f:87:50:f1:60:f2:94:49:70:13:f7:
65:cf:94:9d:23:c6:4f:2d:de:0a:fd:ff:72:0a:5b:
07:46:a9:13:68:5f:96:2c:e8:9b:4f:73:67:9d:0e:
e1:cf:e6:01:d6:02:4b:04:7f:fe:bd:dd:a9:02:fe:
ca:f8:3a:6d:57:19:21:08:b6:0f:7c:24:38:9f:ca:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:76:52:A4:A9:70:AE:0E:64:80:3E:39:8E:8C:5A:98:E9:6B:D8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/yxR2UqSpcK4OZIA-OY6MWpjpa9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c1:ff:88:bd:cf:ee:ab:a2:0e:4f:b5:cb:9b:32:54:cd:de:
5c:06:23:5c:bc:45:99:29:2e:95:a2:2e:48:61:7d:6c:66:99:
22:9a:97:8f:b7:39:a4:e4:ad:a4:bf:53:f7:40:41:e3:fd:3b:
e0:b5:e3:e8:c1:87:50:49:b3:2e:d2:09:a1:fc:2d:28:60:04:
85:be:fe:91:10:8e:80:46:0f:1e:32:c8:24:59:41:ef:39:49:
57:ba:1e:d5:8c:d0:35:14:7d:30:28:28:dc:99:4e:99:cb:2d:
97:23:ac:31:e5:52:db:d6:9f:1d:d3:6b:ab:d8:1f:91:34:67:
99:a6:2e:34:a7:5c:2c:55:ee:0e:91:3b:26:ec:0b:e1:11:97:
e6:bb:88:44:2d:44:02:41:24:a4:bf:4d:e3:6e:48:e3:a2:c6:
db:40:4d:d0:ae:5d:f7:c0:e7:5f:59:50:e5:87:44:b1:3c:5b:
5c:3f:81:d2:9c:df:39:ee:5f:15:b5:68:e8:98:24:20:d9:22:
21:57:40:30:b2:c4:86:98:42:64:8d:8c:89:cd:72:b0:15:ed:
4f:18:c6:a8:f2:27:73:cc:6d:eb:26:70:1c:5d:02:72:9e:03:
e5:a3:0b:f3:ff:50:37:5e:d3:a7:ef:ef:ed:e0:12:9a:fb:74:
b4:5b:76:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMqqrJvS2K6iHoVowrpibUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQxMTE0MTIzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE0NzY1MmE0YTk3MGFlMGU2NDgwM2UzOThlOGM1YTk4ZTk2YmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABpshM8PUIIyHuoWPtIOIwAn4rF
FCJvDvI7hv5kBvamsbilsv1DgtOF1RMMmpbHgBzQ/rAvdG29vlkHAdcAeMbuJ72f
AeopOuN8oRd1fDRIjxsJvPUO1XrU3BSZSzPlotZWf4pFI3WsNOezxnSGpEYmVU/c
RMozUYAThy2iudwnZ26ysowAW7aW4L2UNMuFzLD0Eroy+ftWuyxpjxj1ArixlIZL
rCEVbtfeaKNVE33O4kfn1opdb4dQ8WDylElwE/dlz5SdI8ZPLd4K/f9yClsHRqkT
aF+WLOibT3NnnQ7hz+YB1gJLBH/+vd2pAv7K+DptVxkhCLYPfCQ4n8rmzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsUdlKkqXCuDmSAPjmOjFqY6WvYMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEveXhSMlVxU3BjSzRPWklBLU9ZNk1XcGpwYTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZv/MA0G
CSqGSIb3DQEBCwUAA4IBAQDFwf+Ivc/uq6IOT7XLmzJUzd5cBiNcvEWZKS6Voi5I
YX1sZpkimpePtzmk5K2kv1P3QEHj/TvgtePowYdQSbMu0gmh/C0oYASFvv6REI6A
Rg8eMsgkWUHvOUlXuh7VjNA1FH0wKCjcmU6Zyy2XI6wx5VLb1p8d02ur2B+RNGeZ
pi40p1wsVe4OkTsm7AvhEZfmu4hELUQCQSSkv03jbkjjosbbQE3Qrl33wOdfWVDl
h0SxPFtcP4HSnN857l8VtWjomCQg2SIhV0AwssSGmEJkjYyJzXKwFe1PGMao8idz
zG3rJnAcXQJyngPlowvz/1A3XtOn7+/t4BKa+3S0W3b3
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:28 2024 by rpki-client on console-fra.rpki-client.org