Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4lWHlorG663k0EfTMGJD2tDS2xs.roa
File: 4lWHlorG663k0EfTMGJD2tDS2xs.roa (raw, json)
Hash identifier: DfQD/adOM6isn/EaEVyC0rW9bmSfup22Cphm02m7Kvs=
Subject key identifier: E2:55:87:96:8A:C6:EB:AD:E4:D0:47:D3:30:62:43:DA:D0:D2:DB:1B
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01933F87E175AC205E05F590DA12DCE01698
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4lWHlorG663k0EfTMGJD2tDS2xs.roa
Signing time: Mon 18 Nov 2024 13:48:09 +0000
ROA not before: Mon 18 Nov 2024 13:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 45.82.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:87:e1:75:ac:20:5e:05:f5:90:da:12:dc:e0:16:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Nov 18 13:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e25587968ac6ebade4d047d3306243dad0d2db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:0e:ca:44:2d:45:d9:09:ca:51:5a:5d:32:
b3:53:2f:6b:55:61:07:b4:37:62:86:f5:23:5a:ff:
5f:ac:3c:26:1c:c4:07:55:16:8c:9a:9f:84:5d:4d:
00:04:58:73:ab:dc:66:15:ac:16:69:5f:bd:b6:b9:
9f:65:e5:d3:34:e4:2b:8c:2b:2a:22:5d:08:8e:b6:
05:c8:a3:03:3a:10:ba:15:d1:33:0e:be:6a:84:99:
ae:66:f7:d8:a5:5d:2c:da:30:5b:0b:92:bd:8d:9a:
83:cf:00:ef:83:f9:c3:bb:6c:b4:09:e0:32:a5:d2:
8e:ee:cb:8c:40:27:ed:36:ef:b7:c2:92:e8:63:8a:
79:95:c2:70:38:7b:34:dd:36:de:1e:f6:dc:6f:b2:
0b:dd:6b:53:13:f0:03:b5:79:60:08:92:57:57:fe:
19:b1:78:dc:c6:b4:21:1f:85:ca:aa:20:fa:36:3c:
db:c9:78:30:5a:07:9e:cf:98:90:48:35:14:f8:58:
f2:b5:ef:b8:7c:2d:c3:4f:c6:f4:dd:02:77:32:17:
fd:4f:f2:e7:60:39:8a:77:59:da:a4:9e:5a:55:b6:
56:67:34:8d:41:57:a6:dd:3d:ab:ec:c3:e2:92:d3:
bc:b1:39:66:fd:43:b5:cf:b2:73:5d:bd:4b:1f:d1:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:87:96:8A:C6:EB:AD:E4:D0:47:D3:30:62:43:DA:D0:D2:DB:1B
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/4lWHlorG663k0EfTMGJD2tDS2xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.82.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d4:71:42:c0:15:f1:28:8a:fb:60:17:4b:76:73:71:31:e3:
59:57:e0:f3:35:cd:9d:1c:70:4f:d0:e4:8f:78:7d:05:06:0e:
0a:03:af:29:8b:d4:dd:5e:40:f4:fa:29:46:14:38:02:63:a4:
ae:71:e9:d3:ab:f5:e7:f8:01:b0:c9:f7:da:e6:ca:6b:8c:85:
76:ae:82:cd:c3:6c:d5:5d:f4:ac:9e:17:a4:e6:00:eb:ee:a8:
fe:40:e9:72:c2:8c:d3:1d:fe:42:e5:cc:cf:c5:d1:d3:b8:3b:
90:5e:3e:39:af:7f:c5:32:7d:45:05:87:15:7c:8a:dd:15:7b:
c7:f0:48:de:fa:96:7a:4e:86:dc:a7:d5:14:ac:94:a5:95:b2:
04:e6:8e:43:4d:ec:36:95:73:6e:c2:e1:ae:ec:11:7d:6b:ab:
4a:a1:45:45:de:62:f6:7a:93:6d:bf:9d:66:96:e9:88:45:15:
ec:ac:7d:96:0b:18:34:2c:1f:6b:ea:8f:d5:bb:14:b2:cc:8b:
e0:8f:7b:27:b3:2b:d8:7c:13:9b:4d:d8:25:79:07:87:55:b4:
23:e4:0c:e7:d7:d5:04:02:be:51:32:02:55:c8:4c:80:74:42:
97:1d:14:eb:61:9c:3d:2c:b5:3d:9f:05:69:9c:05:35:0d:18:
0b:8d:0d:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM/h+F1rCBeBfWQ2hLc4BaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjQxMTE4MTM0ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjU1ODc5NjhhYzZlYmFkZTRkMDQ3ZDMzMDYyNDNkYWQwZDJkYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZEOykQtRdkJylFaXTKzUy9rVWEH
tDdihvUjWv9frDwmHMQHVRaMmp+EXU0ABFhzq9xmFawWaV+9trmfZeXTNOQrjCsq
Il0IjrYFyKMDOhC6FdEzDr5qhJmuZvfYpV0s2jBbC5K9jZqDzwDvg/nDu2y0CeAy
pdKO7suMQCftNu+3wpLoY4p5lcJwOHs03TbeHvbcb7IL3WtTE/ADtXlgCJJXV/4Z
sXjcxrQhH4XKqiD6NjzbyXgwWgeez5iQSDUU+Fjyte+4fC3DT8b03QJ3Mhf9T/Ln
YDmKd1napJ5aVbZWZzSNQVem3T2r7MPiktO8sTlm/UO1z7JzXb1LH9FtIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJVh5aKxuut5NBH0zBiQ9rQ0tsbMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvNGxXSGxvckc2NjNrMEVmVE1HSkQydERTMnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVJSMA0G
CSqGSIb3DQEBCwUAA4IBAQCm1HFCwBXxKIr7YBdLdnNxMeNZV+DzNc2dHHBP0OSP
eH0FBg4KA68pi9TdXkD0+ilGFDgCY6SucenTq/Xn+AGwyffa5sprjIV2roLNw2zV
XfSsnhek5gDr7qj+QOlywozTHf5C5czPxdHTuDuQXj45r3/FMn1FBYcVfIrdFXvH
8Eje+pZ6Tobcp9UUrJSllbIE5o5DTew2lXNuwuGu7BF9a6tKoUVF3mL2epNtv51m
lumIRRXsrH2WCxg0LB9r6o/VuxSyzIvgj3snsyvYfBObTdgleQeHVbQj5Azn19UE
Ar5RMgJVyEyAdEKXHRTrYZw9LLU9nwVpnAU1DRgLjQ2r
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:09:22 2024 by rpki-client on console-fra.rpki-client.org