Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5tdu5qpYW4ulg547fui_0lp6Mxk.roa
File: 5tdu5qpYW4ulg547fui_0lp6Mxk.roa (raw, json)
Hash identifier: DIiVq5/50Cdi71nK0pFPCHl3DKGlOZQ9+r3DCMpghdM=
Subject key identifier: E6:D7:6E:E6:AA:58:5B:8B:A5:83:9E:3B:7E:E8:BF:D2:5A:7A:33:19
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019221D87CADAE3C2F8E92D4E5BFB0F69158
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5tdu5qpYW4ulg547fui_0lp6Mxk.roa
Signing time: Tue 24 Sep 2024 02:24:48 +0000
ROA not before: Tue 24 Sep 2024 02:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47154
IP address blocks: 45.155.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:21:d8:7c:ad:ae:3c:2f:8e:92:d4:e5:bf:b0:f6:91:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 24 02:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6d76ee6aa585b8ba5839e3b7ee8bfd25a7a3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:c4:75:74:d8:92:fe:16:38:24:37:64:13:
8f:9c:32:db:5c:01:27:de:91:6c:c1:a8:da:43:c7:
50:20:0e:91:00:2d:1f:d3:16:11:d2:04:f3:94:50:
95:39:f1:ec:3c:cd:71:4f:b9:fe:8a:b4:16:ba:8b:
86:a5:8a:f6:52:db:8b:9e:0e:2d:8e:d9:65:11:6d:
6a:9b:45:b0:a7:3c:be:61:88:7c:9e:f8:b7:1f:be:
29:40:0b:be:88:ea:56:82:d9:7c:db:14:6e:e2:50:
68:2b:ef:c9:51:4b:98:6c:10:40:bf:a7:8f:b5:f8:
cc:b1:6f:37:16:3c:d8:8b:ce:61:b4:d6:08:d5:44:
62:e8:5d:a2:ab:96:24:70:a1:39:ad:dd:70:dd:80:
f9:84:36:29:0b:64:e7:59:8e:cc:e2:f7:8a:0c:85:
4b:0c:35:22:56:40:ab:a8:8c:eb:55:24:2e:08:33:
72:82:81:fd:c4:70:34:79:1e:ac:6a:93:e4:a1:27:
48:86:e6:48:d8:21:09:76:46:2a:a8:2e:80:b9:32:
93:79:3e:8c:d7:3e:59:f8:e6:ee:29:ec:17:df:1e:
ff:b3:f3:43:24:c4:1c:44:ea:29:74:5a:3d:b6:9b:
23:18:fd:21:8d:5d:7d:d5:55:ed:44:0c:65:b6:eb:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D7:6E:E6:AA:58:5B:8B:A5:83:9E:3B:7E:E8:BF:D2:5A:7A:33:19
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5tdu5qpYW4ulg547fui_0lp6Mxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:82:27:f5:f7:cb:2d:78:27:16:fa:40:f0:fd:0e:85:e3:53:
54:dd:b1:4b:16:99:9b:ee:8a:e8:9a:2f:40:63:96:01:f1:6f:
a7:35:9d:35:81:13:cd:5e:82:84:93:bb:3e:69:0f:e4:87:43:
c5:46:00:b6:1a:72:9d:34:ee:ff:a7:20:ec:af:6c:97:4f:e9:
91:fb:da:b9:c4:ae:8a:f2:21:43:3a:2d:8a:3e:97:42:49:a4:
8c:0f:e5:10:72:56:87:b2:ba:44:88:54:a3:37:91:0a:82:c9:
78:e1:34:77:f4:13:dc:b4:8f:5c:9c:9d:4f:40:e8:04:1c:cf:
3d:b7:9b:8f:eb:30:4c:b7:02:ed:4a:57:9b:00:e8:f1:7e:1b:
15:c8:2f:5c:c9:db:a0:7f:96:3a:9c:5c:87:7e:f3:ad:95:f9:
cd:67:77:67:b3:75:d1:6a:d6:54:f2:b9:7c:ac:1b:f9:3a:48:
a0:d6:65:e9:70:25:2b:af:9d:54:b6:ad:28:04:d2:1b:34:aa:
f0:b8:db:ad:e8:0c:bf:b4:b2:e6:8c:e9:a7:bb:95:b1:96:d2:
42:32:6e:2a:5b:e7:0a:9c:fc:4e:5d:c7:fa:e8:4e:02:ea:c2:
e1:06:4c:3b:51:78:ef:a9:c0:4b:2b:b2:c6:56:57:ca:29:71:
6e:99:a4:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIh2HytrjwvjpLU5b+w9pFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwOTI0MDIyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmQ3NmVlNmFhNTg1YjhiYTU4MzllM2I3ZWU4YmZkMjVhN2EzMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCLEdXTYkv4WOCQ3ZBOPnDLbXAEn
3pFswajaQ8dQIA6RAC0f0xYR0gTzlFCVOfHsPM1xT7n+irQWuouGpYr2UtuLng4t
jtllEW1qm0Wwpzy+YYh8nvi3H74pQAu+iOpWgtl82xRu4lBoK+/JUUuYbBBAv6eP
tfjMsW83FjzYi85htNYI1URi6F2iq5YkcKE5rd1w3YD5hDYpC2TnWY7M4veKDIVL
DDUiVkCrqIzrVSQuCDNygoH9xHA0eR6sapPkoSdIhuZI2CEJdkYqqC6AuTKTeT6M
1z5Z+ObuKewX3x7/s/NDJMQcROopdFo9tpsjGP0hjV191VXtRAxltusCZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObXbuaqWFuLpYOeO37ov9JaejMZMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvNXRkdTVxcFlXNHVsZzU0N2Z1aV8wbHA2TXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZtbMA0G
CSqGSIb3DQEBCwUAA4IBAQDFgif198steCcW+kDw/Q6F41NU3bFLFpmb7oromi9A
Y5YB8W+nNZ01gRPNXoKEk7s+aQ/kh0PFRgC2GnKdNO7/pyDsr2yXT+mR+9q5xK6K
8iFDOi2KPpdCSaSMD+UQclaHsrpEiFSjN5EKgsl44TR39BPctI9cnJ1PQOgEHM89
t5uP6zBMtwLtSlebAOjxfhsVyC9cydugf5Y6nFyHfvOtlfnNZ3dns3XRatZU8rl8
rBv5Okig1mXpcCUrr51Utq0oBNIbNKrwuNut6Ay/tLLmjOmnu5WxltJCMm4qW+cK
nPxOXcf66E4C6sLhBkw7UXjvqcBLK7LGVlfKKXFumaRK
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:48:05 2024 by rpki-client on console-ams.rpki-client.org