Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/e3gmZjj7LS7A0Hun7nCciE9hbXE.roa
File: e3gmZjj7LS7A0Hun7nCciE9hbXE.roa (raw, json)
Hash identifier: 4+10xNy/Fig7Cu/c4VJDqY9uYRPxXGAi8im3w3C+KVc=
Subject key identifier: 7B:78:26:66:38:FB:2D:2E:C0:D0:7B:A7:EE:70:9C:88:4F:61:6D:71
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018CC3B6C40FA81E709686AFFE7BE965C50D
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/e3gmZjj7LS7A0Hun7nCciE9hbXE.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44222
IP address blocks: 45.159.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c4:0f:a8:1e:70:96:86:af:fe:7b:e9:65:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b78266638fb2d2ec0d07ba7ee709c884f616d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:b8:ed:f3:11:16:d8:44:f2:f6:2e:a3:b9:
4a:3f:b5:dc:9a:b3:79:5b:db:e8:6d:ff:a6:64:34:
62:14:1f:b9:a3:8c:64:86:85:08:88:64:b3:b6:26:
d5:f5:8e:2f:b7:ad:2c:f0:49:a3:7f:82:47:9a:93:
87:de:a1:5e:82:cb:dd:0f:82:f2:46:68:19:3e:2f:
b7:6f:97:c8:3e:77:04:e7:1f:69:6e:99:ba:4e:ee:
0d:ae:1b:e9:ca:88:8d:8a:85:5e:47:f5:cb:b2:04:
40:f0:18:4e:7b:25:bf:7b:1e:69:fd:f1:d2:1e:7f:
a7:a5:c0:8f:b7:88:c5:e0:e3:a0:2a:71:0d:5e:6b:
69:79:55:09:e9:44:f1:ce:d2:5b:3b:18:fd:d7:07:
3b:b0:cf:94:ea:1e:18:14:b6:c0:02:37:f7:01:43:
71:54:2b:27:ca:49:cc:58:ff:8b:bc:4e:9e:cc:dd:
10:32:26:b4:f5:c5:2d:1c:fe:81:c9:21:93:36:e6:
e5:f4:e1:f7:83:ab:f6:2b:9a:2d:f9:46:97:8b:ba:
bb:20:99:4a:3a:9d:78:32:a3:70:5e:26:5a:e7:34:
4e:45:5f:e0:24:bf:4a:46:66:bb:a0:86:ed:cf:de:
26:2f:b1:bd:03:33:45:49:30:16:5b:bb:bb:c6:4c:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:78:26:66:38:FB:2D:2E:C0:D0:7B:A7:EE:70:9C:88:4F:61:6D:71
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/e3gmZjj7LS7A0Hun7nCciE9hbXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c2:56:c6:32:93:95:ea:31:c5:79:74:c3:22:65:9a:59:8e:
09:36:8d:0d:fc:e4:33:18:65:d0:e9:f9:09:d1:e1:74:64:80:
f8:b6:19:25:c4:02:ba:b9:10:7c:5f:26:cc:9f:fe:c0:b8:f0:
f9:03:89:44:28:5d:f2:91:fb:d8:b7:e6:d7:be:67:4b:93:59:
e7:7f:af:93:fa:d2:be:44:c2:13:bf:2a:b5:ab:89:27:50:f0:
28:d3:13:6e:e7:3f:b4:88:62:8e:74:cf:2c:b9:b7:b0:6b:33:
3c:93:31:0e:f2:b8:0e:67:f5:83:00:f0:80:2d:6e:5a:8c:ee:
b1:fe:d2:7a:d5:ca:81:73:a8:b7:56:bf:95:aa:3e:54:27:f3:
db:3c:c5:f7:3f:09:fe:10:15:10:a4:f0:cd:21:53:f3:72:cc:
8e:d6:60:1e:2c:d5:88:32:b3:21:fe:a0:c8:72:f1:7f:0d:9f:
63:6f:42:56:50:1f:05:60:25:00:38:c4:39:67:ed:16:21:74:
59:3a:79:35:61:76:d4:0a:d5:77:08:d0:fc:32:fc:a2:d5:f1:
97:48:ad:a7:76:00:d5:6d:13:c1:2b:8d:7d:96:43:27:9e:06:
ea:c3:72:3c:6e:43:ab:cd:0f:68:00:81:0f:96:4c:88:ed:76:
38:7f:a0:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtsQPqB5wloav/nvpZcUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwMTAxMDYyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjc4MjY2NjM4ZmIyZDJlYzBkMDdiYTdlZTcwOWM4ODRmNjE2ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5m47fMRFthE8vYuo7lKP7XcmrN5
W9vobf+mZDRiFB+5o4xkhoUIiGSztibV9Y4vt60s8Emjf4JHmpOH3qFegsvdD4Ly
RmgZPi+3b5fIPncE5x9pbpm6Tu4NrhvpyoiNioVeR/XLsgRA8BhOeyW/ex5p/fHS
Hn+npcCPt4jF4OOgKnENXmtpeVUJ6UTxztJbOxj91wc7sM+U6h4YFLbAAjf3AUNx
VCsnyknMWP+LvE6ezN0QMia09cUtHP6BySGTNubl9OH3g6v2K5ot+UaXi7q7IJlK
Op14MqNwXiZa5zRORV/gJL9KRma7oIbtz94mL7G9AzNFSTAWW7u7xkxZSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHt4JmY4+y0uwNB7p+5wnIhPYW1xMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvZTNnbVpqajdMUzdBMEh1bjduQ2NpRTloYlhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ/7MA0G
CSqGSIb3DQEBCwUAA4IBAQAfwlbGMpOV6jHFeXTDImWaWY4JNo0N/OQzGGXQ6fkJ
0eF0ZID4thklxAK6uRB8XybMn/7AuPD5A4lEKF3ykfvYt+bXvmdLk1nnf6+T+tK+
RMITvyq1q4knUPAo0xNu5z+0iGKOdM8subewazM8kzEO8rgOZ/WDAPCALW5ajO6x
/tJ61cqBc6i3Vr+Vqj5UJ/PbPMX3Pwn+EBUQpPDNIVPzcsyO1mAeLNWIMrMh/qDI
cvF/DZ9jb0JWUB8FYCUAOMQ5Z+0WIXRZOnk1YXbUCtV3CND8Mvyi1fGXSK2ndgDV
bRPBK419lkMnngbqw3I8bkOrzQ9oAIEPlkyI7XY4f6Dl
-----END CERTIFICATE-----
Generated at Sun May 19 20:34:34 2024 by rpki-client on console-fra.rpki-client.org