Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m06epDPoYRfArc5pkBy6BEVMFz0.roa
File: m06epDPoYRfArc5pkBy6BEVMFz0.roa (raw, json)
Hash identifier: XPCLKZli31zB9KuNdIEBxeMnxvS3OLPjbonLOQTGt2g=
Subject key identifier: 9B:4E:9E:A4:33:E8:61:17:C0:AD:CE:69:90:1C:BA:04:45:4C:17:3D
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01934ECB5BFED40F622A33DFFF54D49F1D0B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m06epDPoYRfArc5pkBy6BEVMFz0.roa
Signing time: Thu 21 Nov 2024 12:56:10 +0000
ROA not before: Thu 21 Nov 2024 12:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39476
IP address blocks: 45.139.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:cb:5b:fe:d4:0f:62:2a:33:df:ff:54:d4:9f:1d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 21 12:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b4e9ea433e86117c0adce69901cba04454c173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:e8:41:76:a9:49:7b:be:0f:7f:b2:6e:58:
18:e7:60:d2:f5:de:16:43:25:be:e6:ba:5e:e6:e3:
d5:50:7e:ef:dc:a1:64:91:a6:c2:c4:ab:3b:f5:be:
56:f0:af:5f:2f:3f:bc:26:89:e1:f0:1c:4d:27:ce:
ba:c0:98:be:35:73:d9:52:9e:bd:19:ca:0b:6a:f3:
4a:e4:09:95:46:e7:00:f8:33:c2:2a:f1:eb:2f:f9:
de:b5:b9:2c:ef:06:c5:6f:75:e9:d3:b0:88:15:3a:
96:d7:4c:0d:a5:1c:30:a6:2a:80:1a:de:a9:26:36:
ea:2e:4c:8f:50:5c:52:18:a0:1e:3f:8f:4c:21:81:
10:92:b6:30:4e:11:43:d4:ca:1a:f7:9c:a8:18:88:
19:18:88:e2:0c:32:b4:15:9c:3a:9f:08:9a:ee:2b:
32:16:81:ca:50:63:90:e9:92:7d:65:2f:27:f5:6a:
47:57:7d:b8:11:cc:9d:67:2f:49:79:e1:fd:8c:05:
d5:53:d5:4b:63:9f:f6:2b:8d:5e:49:01:3e:50:dd:
5d:2c:16:f1:84:ce:c9:cf:ee:c2:7d:33:c8:d3:2c:
d3:d9:e8:46:b4:13:cc:3b:fd:81:34:28:f4:12:39:
73:18:5c:25:8d:ce:81:1b:09:cd:9d:0b:ea:c8:da:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:9E:A4:33:E8:61:17:C0:AD:CE:69:90:1C:BA:04:45:4C:17:3D
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/m06epDPoYRfArc5pkBy6BEVMFz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:fc:ed:04:b0:b6:28:47:30:f7:e6:6d:de:a7:f0:f6:17:3e:
78:dd:b3:f0:8e:66:6d:b0:eb:20:dd:1b:49:a8:f3:3f:5b:5e:
26:19:7d:9c:e3:3f:8f:77:95:ea:41:f5:b1:16:d7:97:8f:67:
52:a0:bd:4f:3f:88:05:0d:d1:49:56:ef:a8:ae:2d:13:28:68:
86:e3:5b:a1:36:a2:59:c3:35:4e:0c:fe:71:e3:a0:d2:db:c2:
9d:94:3b:b5:07:b7:97:07:50:96:b0:7b:dc:61:76:40:1d:2d:
69:1b:c7:8d:ac:64:b4:0d:b9:d8:07:a7:b0:2a:0f:18:fe:88:
fb:67:ba:af:60:5f:5f:6a:92:fb:bf:7c:50:70:07:66:a4:37:
ee:9b:31:f3:26:68:f0:fd:12:a0:49:c0:2c:21:9c:99:c9:22:
7d:57:ef:15:de:ea:67:bd:30:64:96:08:d0:f1:10:22:82:e1:
b8:89:a6:b6:4f:5a:47:ab:93:c8:ea:f1:98:5c:fe:1a:47:1c:
42:fa:b8:3a:c8:19:92:c9:c8:77:fb:96:ec:f7:6a:e0:34:62:
e5:67:18:68:9b:43:d6:66:c4:88:98:4d:65:a3:69:d5:8f:0b:
e2:85:2c:15:58:c5:bc:61:3f:9d:38:63:db:23:e5:45:cf:d3:
a1:78:45:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNOy1v+1A9iKjPf/1TUnx0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQxMTIxMTI1NjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRlOWVhNDMzZTg2MTE3YzBhZGNlNjk5MDFjYmEwNDQ1NGMxNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWXoQXapSXu+D3+yblgY52DS9d4W
QyW+5rpe5uPVUH7v3KFkkabCxKs79b5W8K9fLz+8Jonh8BxNJ866wJi+NXPZUp69
GcoLavNK5AmVRucA+DPCKvHrL/netbks7wbFb3Xp07CIFTqW10wNpRwwpiqAGt6p
JjbqLkyPUFxSGKAeP49MIYEQkrYwThFD1Moa95yoGIgZGIjiDDK0FZw6nwia7isy
FoHKUGOQ6ZJ9ZS8n9WpHV324EcydZy9JeeH9jAXVU9VLY5/2K41eSQE+UN1dLBbx
hM7Jz+7CfTPI0yzT2ehGtBPMO/2BNCj0EjlzGFwljc6BGwnNnQvqyNqdoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtOnqQz6GEXwK3OaZAcugRFTBc9MB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvbTA2ZXBEUG9ZUmZBcmM1cGtCeTZCRVZNRnowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYt8MA0G
CSqGSIb3DQEBCwUAA4IBAQBf/O0EsLYoRzD35m3ep/D2Fz543bPwjmZtsOsg3RtJ
qPM/W14mGX2c4z+Pd5XqQfWxFteXj2dSoL1PP4gFDdFJVu+ori0TKGiG41uhNqJZ
wzVODP5x46DS28KdlDu1B7eXB1CWsHvcYXZAHS1pG8eNrGS0DbnYB6ewKg8Y/oj7
Z7qvYF9fapL7v3xQcAdmpDfumzHzJmjw/RKgScAsIZyZySJ9V+8V3upnvTBklgjQ
8RAiguG4iaa2T1pHq5PI6vGYXP4aRxxC+rg6yBmSych3+5bs92rgNGLlZxhom0PW
ZsSImE1lo2nVjwvihSwVWMW8YT+dOGPbI+VFz9OheEWK
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:27:32 2024 by rpki-client on console-ams.rpki-client.org