Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/aMg7LdjwbJbSHWG7m48sAvlkdEU.roa
File: aMg7LdjwbJbSHWG7m48sAvlkdEU.roa (raw, json)
Hash identifier: t8Waj48YwIWj9mz8MP1CiQDmskTHrcY4GPZbz8Zl8KQ=
Subject key identifier: 68:C8:3B:2D:D8:F0:6C:96:D2:1D:61:BB:9B:8F:2C:02:F9:64:74:45
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1AE68E34D84EFB92413050767253B
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/aMg7LdjwbJbSHWG7m48sAvlkdEU.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209155
IP address blocks: 45.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ae:68:e3:4d:84:ef:b9:24:13:05:07:67:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c83b2dd8f06c96d21d61bb9b8f2c02f9647445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c1:dd:20:67:65:63:d8:6c:bb:ef:fb:cc:
f0:f8:8e:cc:58:e1:e7:97:dd:b7:7a:41:1b:bf:22:
64:cc:a2:03:6f:e1:70:a5:ff:f5:e4:8a:3b:ab:0b:
2a:56:d9:05:39:dd:a8:c8:f5:2c:d7:03:21:7c:a6:
ea:04:e4:46:4d:79:84:4f:fa:04:d7:df:18:ba:e1:
de:18:db:2a:60:29:5e:67:06:fd:a0:34:28:16:af:
cf:38:2b:82:26:cc:c3:98:e5:a4:84:70:2e:6f:08:
c3:13:26:b0:81:61:71:31:7e:40:5f:87:94:3a:2f:
c4:b9:b1:8a:99:33:e6:18:50:77:63:1a:79:ee:17:
39:2a:cf:01:6d:b6:09:e6:30:24:e6:78:4f:e6:f7:
aa:aa:48:d6:24:84:3b:72:53:ac:59:f6:7d:36:09:
84:22:24:6f:d8:c1:5c:77:02:ec:16:23:ac:db:72:
bf:d3:f1:a5:1b:ed:81:03:0f:ec:b5:42:f4:7a:3d:
d0:e5:c2:1f:ee:2b:b3:11:83:cd:69:f8:d0:0b:9b:
91:ed:c1:ae:32:e7:0a:9f:41:ee:8e:2f:4d:f1:fe:
aa:d8:a2:10:d5:88:5c:75:86:0a:ca:5e:ab:10:fc:
4d:f4:b0:20:12:52:99:19:6a:0f:98:7a:b0:0d:af:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:3B:2D:D8:F0:6C:96:D2:1D:61:BB:9B:8F:2C:02:F9:64:74:45
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/aMg7LdjwbJbSHWG7m48sAvlkdEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:da:bc:83:4c:0b:d9:d3:e6:d0:50:e6:8c:5a:18:b6:bd:c8:
53:99:b6:6b:4c:79:94:c1:69:f9:c8:7f:3d:df:84:4e:ba:dc:
79:95:c1:eb:4a:90:ce:32:50:b1:77:5a:2f:16:d8:88:ff:6a:
fb:7b:8b:b3:1a:4a:3a:81:fe:a0:be:80:5e:89:3b:c1:f5:1d:
38:6f:4f:c0:e1:99:aa:93:6e:76:cb:48:a6:82:f6:5e:3e:18:
3b:98:1a:4a:4d:09:a6:31:c4:e6:98:d4:f7:6e:da:69:98:1e:
60:06:e7:ba:a8:5b:00:08:db:6c:b2:79:76:5c:0e:57:20:af:
ab:d8:fa:4f:23:41:f3:f1:ed:a4:a4:69:43:7b:86:c8:32:f2:
15:24:d5:c6:3a:d6:66:9a:b2:09:b7:13:e5:ef:15:aa:b3:ed:
ca:81:c9:c3:a9:29:14:ba:b5:ba:bd:92:0b:13:92:74:66:ab:
dd:bb:55:23:f8:55:78:f7:0d:97:b8:1e:00:67:35:c2:38:c7:
d1:39:5c:3c:08:ba:74:f8:dd:22:c9:6c:4f:bd:7d:07:dc:8d:
11:96:23:fd:83:00:9d:0e:2f:03:b7:24:94:bf:c6:1b:b3:c5:
fa:c3:a6:dc:52:ac:05:db:9e:5b:45:3d:8a:71:35:f6:9a:67:
8b:81:53:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsa5o402E77kkEwUHZyU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUwMTAxMTE0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGM4M2IyZGQ4ZjA2Yzk2ZDIxZDYxYmI5YjhmMmMwMmY5NjQ3NDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjB3SBnZWPYbLvv+8zw+I7MWOHn
l923ekEbvyJkzKIDb+Fwpf/15Io7qwsqVtkFOd2oyPUs1wMhfKbqBORGTXmET/oE
198YuuHeGNsqYCleZwb9oDQoFq/POCuCJszDmOWkhHAubwjDEyawgWFxMX5AX4eU
Oi/EubGKmTPmGFB3Yxp57hc5Ks8BbbYJ5jAk5nhP5veqqkjWJIQ7clOsWfZ9NgmE
IiRv2MFcdwLsFiOs23K/0/GlG+2BAw/stUL0ej3Q5cIf7iuzEYPNafjQC5uR7cGu
MucKn0Huji9N8f6q2KIQ1YhcdYYKyl6rEPxN9LAgElKZGWoPmHqwDa+RTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjIOy3Y8GyW0h1hu5uPLAL5ZHRFMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvYU1nN0xkandiSmJTSFdHN200OHNBdmxrZEVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV0/MA0G
CSqGSIb3DQEBCwUAA4IBAQAv2ryDTAvZ0+bQUOaMWhi2vchTmbZrTHmUwWn5yH89
34ROutx5lcHrSpDOMlCxd1ovFtiI/2r7e4uzGko6gf6gvoBeiTvB9R04b0/A4Zmq
k252y0imgvZePhg7mBpKTQmmMcTmmNT3btppmB5gBue6qFsACNtssnl2XA5XIK+r
2PpPI0Hz8e2kpGlDe4bIMvIVJNXGOtZmmrIJtxPl7xWqs+3KgcnDqSkUurW6vZIL
E5J0Zqvdu1Uj+FV49w2XuB4AZzXCOMfROVw8CLp0+N0iyWxPvX0H3I0RliP9gwCd
Di8DtySUv8Ybs8X6w6bcUqwF255bRT2KcTX2mmeLgVNM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:55 2025 by rpki-client