Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v64n6njJTZA2UZiOK8ApaECUuuo.roa
File: v64n6njJTZA2UZiOK8ApaECUuuo.roa (raw, json)
Hash identifier: SFH3MwaBWXQwOd95V9XodUXRzyYLkhXalRoY+XjXtdQ=
Subject key identifier: BF:AE:27:EA:78:C9:4D:90:36:51:98:8E:2B:C0:29:68:40:94:BA:EA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E0A1D609A1438979460C2066B047616DC
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v64n6njJTZA2UZiOK8ApaECUuuo.roa
Signing time: Mon 04 Mar 2024 15:38:01 +0000
ROA not before: Mon 04 Mar 2024 15:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44893
IP address blocks: 45.142.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:1d:60:9a:14:38:97:94:60:c2:06:6b:04:76:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 4 15:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfae27ea78c94d903651988e2bc029684094baea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:89:fd:8e:e1:12:b6:74:40:76:b1:13:b8:
98:e7:43:8b:43:cc:70:04:bb:9a:c5:2a:b6:56:b7:
59:fc:90:07:2d:72:ca:02:75:b1:39:84:87:58:3d:
b2:24:12:19:de:5e:33:35:30:32:3c:d1:f5:8b:99:
80:48:ab:96:4c:e8:38:3f:64:7e:03:45:68:99:c0:
b0:0a:a5:80:9a:f2:9c:c3:bb:68:bb:0c:5e:af:a4:
48:51:3d:78:e9:5c:51:c5:ba:f2:67:42:75:01:83:
11:8b:d3:c7:5e:4b:e5:41:09:d1:98:17:38:2e:07:
86:2a:52:56:f9:a8:5c:13:dd:95:a7:73:e0:fa:87:
b6:52:8e:7f:2e:c6:2a:95:8d:3f:94:bc:c7:61:43:
d4:26:1b:ab:3c:5b:86:7e:58:44:17:d2:4a:63:48:
a3:fc:cc:61:45:5f:88:43:78:50:ad:b9:4b:65:9d:
a1:10:78:54:f6:5e:6b:2d:01:da:b3:55:a2:69:ae:
67:83:20:8f:fd:d3:17:4c:38:a4:14:64:fb:68:3a:
e4:6b:e7:5e:4d:7c:51:71:b2:e6:30:ff:43:ac:b7:
89:ef:b5:64:9f:d0:a6:18:8a:c7:aa:c3:d9:8e:82:
fa:9d:51:23:3f:dc:10:1f:57:ed:69:54:8d:a0:5f:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:27:EA:78:C9:4D:90:36:51:98:8E:2B:C0:29:68:40:94:BA:EA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/v64n6njJTZA2UZiOK8ApaECUuuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.38.0/24
Signature Algorithm: sha256WithRSAEncryption
86:54:5b:33:49:5b:4b:49:4d:35:be:3b:2e:dc:87:ba:37:46:
c1:95:35:38:fe:91:00:8f:95:22:07:7b:0d:89:79:74:fc:32:
ce:2f:b6:3c:cd:09:80:61:df:82:c0:cc:5d:f2:95:c1:3e:72:
14:53:9f:ae:04:c6:9f:13:80:64:3a:19:32:40:31:01:21:dc:
15:12:05:95:a6:5b:75:6d:b3:92:eb:a9:bb:e1:c0:40:e4:5a:
fa:5c:a7:fe:ac:67:32:3e:2e:b6:c7:77:e3:11:48:15:0a:50:
bd:c2:f6:81:97:03:97:47:1d:35:5a:a0:cd:42:e9:5e:4b:1d:
09:82:bf:a4:5b:1a:27:16:59:85:b4:08:4e:75:a0:ef:d1:bc:
13:df:4d:6e:37:8e:32:94:12:75:79:e8:33:b8:7a:4a:8c:35:
1e:0c:61:af:51:70:28:80:26:12:e0:24:53:2b:ca:76:b5:cf:
c4:fa:e8:51:b1:95:4b:34:78:01:1b:52:b6:71:24:84:ae:bd:
96:64:9a:5a:a9:e9:96:3f:83:d3:86:40:4c:e8:6d:2e:1b:e8:
fd:17:ea:86:5e:96:57:01:75:49:a9:c8:6b:3c:bd:ae:1f:25:
a3:a0:eb:73:74:a2:51:6f:57:61:37:0b:56:78:cb:f6:d1:1a:
80:c3:a6:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4KHWCaFDiXlGDCBmsEdhbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMzA0MTUzODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmFlMjdlYTc4Yzk0ZDkwMzY1MTk4OGUyYmMwMjk2ODQwOTRiYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2J/Y7hErZ0QHaxE7iY50OLQ8xw
BLuaxSq2VrdZ/JAHLXLKAnWxOYSHWD2yJBIZ3l4zNTAyPNH1i5mASKuWTOg4P2R+
A0VomcCwCqWAmvKcw7touwxer6RIUT146VxRxbryZ0J1AYMRi9PHXkvlQQnRmBc4
LgeGKlJW+ahcE92Vp3Pg+oe2Uo5/LsYqlY0/lLzHYUPUJhurPFuGflhEF9JKY0ij
/MxhRV+IQ3hQrblLZZ2hEHhU9l5rLQHas1Wiaa5ngyCP/dMXTDikFGT7aDrka+de
TXxRcbLmMP9DrLeJ77Vkn9CmGIrHqsPZjoL6nVEjP9wQH1ftaVSNoF/x9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+uJ+p4yU2QNlGYjivAKWhAlLrqMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvdjY0bjZuakpUWkEyVVppT0s4QXBhRUNVdXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4mMA0G
CSqGSIb3DQEBCwUAA4IBAQCGVFszSVtLSU01vjsu3Ie6N0bBlTU4/pEAj5UiB3sN
iXl0/DLOL7Y8zQmAYd+CwMxd8pXBPnIUU5+uBMafE4BkOhkyQDEBIdwVEgWVplt1
bbOS66m74cBA5Fr6XKf+rGcyPi62x3fjEUgVClC9wvaBlwOXRx01WqDNQuleSx0J
gr+kWxonFlmFtAhOdaDv0bwT301uN44ylBJ1eegzuHpKjDUeDGGvUXAogCYS4CRT
K8p2tc/E+uhRsZVLNHgBG1K2cSSErr2WZJpaqemWP4PThkBM6G0uG+j9F+qGXpZX
AXVJqchrPL2uHyWjoOtzdKJRb1dhNwtWeMv20RqAw6Yh
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:21 2024 by rpki-client on console-ams.rpki-client.org