Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MWq-NIe9TcTyra4a1XgGOe8UYS0.roa
File: MWq-NIe9TcTyra4a1XgGOe8UYS0.roa (raw, json)
Hash identifier: OaOSNjLVZmeJkIyoJRZPOk9VyTZDlUEFNemOJEE9Ch0=
Subject key identifier: 31:6A:BE:34:87:BD:4D:C4:F2:AD:AE:1A:D5:78:06:39:EF:14:61:2D
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 018CC3B6FF3A17DC91CC9E3E13773C2495B3
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MWq-NIe9TcTyra4a1XgGOe8UYS0.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202914
IP address blocks: 45.84.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ff:3a:17:dc:91:cc:9e:3e:13:77:3c:24:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=316abe3487bd4dc4f2adae1ad5780639ef14612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:22:5b:24:84:20:e4:8c:4b:71:ae:f2:fa:
cb:7f:18:78:2b:f2:eb:11:0c:83:1a:d7:83:ef:30:
fd:78:e2:d3:18:43:8f:15:54:2a:ac:26:c4:3b:b8:
08:81:1d:f8:1e:00:26:2f:88:10:b6:1d:79:37:83:
2b:ed:4a:b3:eb:c5:b4:99:76:ee:cc:c1:65:89:15:
27:80:42:34:dc:eb:cf:9f:70:6e:e1:9c:df:26:95:
e9:b9:2e:15:17:ff:05:b1:db:c9:ad:43:28:c0:ac:
74:a0:ad:1e:53:eb:0d:be:a3:fd:5c:33:dd:cd:04:
2b:88:c4:78:6e:55:3b:d6:6f:9a:c8:29:9d:79:68:
75:60:f5:2d:d9:f8:66:e7:2f:61:06:6d:b6:8c:38:
cf:01:87:50:6c:e9:3b:21:8e:a6:31:f0:04:c8:6d:
09:e7:bf:e5:db:e1:47:81:78:ca:ac:85:df:74:6d:
bc:44:ee:2d:f0:91:e1:95:6a:11:17:22:bb:00:0c:
eb:da:07:b6:dd:dd:82:af:a1:4c:7c:8f:21:10:7c:
a7:e5:fe:c3:9c:31:c8:57:93:c0:97:ed:8c:2f:26:
9b:0d:37:b9:e1:e9:af:ac:b4:48:10:cd:bc:4c:9e:
d3:f4:9b:18:79:f4:5a:5a:49:d8:39:de:54:1d:9d:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:BE:34:87:BD:4D:C4:F2:AD:AE:1A:D5:78:06:39:EF:14:61:2D
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/MWq-NIe9TcTyra4a1XgGOe8UYS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.100.0/24
Signature Algorithm: sha256WithRSAEncryption
74:cd:c1:06:38:72:d5:6e:0f:c3:8d:de:a6:6d:40:77:ac:a1:
ae:22:f5:b3:d4:3e:be:cd:05:ac:cf:c5:f1:90:8e:f8:13:e9:
b7:22:49:1a:a0:d6:36:1a:b6:65:96:ba:cd:d6:ab:a6:6d:4b:
12:00:db:3b:7a:f7:79:4b:fd:2b:24:27:cf:50:ad:af:72:d0:
b1:60:dc:ff:9d:ac:9f:94:0f:72:be:fe:d2:4b:ef:17:9f:7d:
f6:22:b2:01:e1:e5:83:09:8a:ce:dd:bf:47:07:1e:5e:f9:78:
f5:4f:6b:d1:ef:71:01:e9:4d:cb:e9:05:e7:34:b1:0d:e5:44:
ab:3c:25:34:f7:34:13:9f:fd:cf:9d:53:8c:3a:5c:a5:7a:f6:
90:ff:a2:b0:b2:3f:95:10:94:1c:ec:3e:8f:ae:b5:fb:8d:09:
a8:3f:99:cf:a2:96:50:9c:b8:67:c8:c1:31:4f:5d:b8:ce:a2:
ff:d7:44:ad:41:ee:26:ed:de:bc:66:7a:1b:fb:75:02:61:73:
54:78:7a:0b:3f:0c:2d:93:5a:49:1c:d1:36:17:ea:59:bf:28:
41:99:9f:5b:7b:ae:cb:e1:70:67:d8:f5:e9:c9:a5:1f:7f:f9:
f8:5b:f7:58:72:22:aa:27:44:3a:85:61:8f:ec:2d:61:e7:08:
55:19:56:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtv86F9yRzJ4+E3c8JJWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjQwMTAxMDYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZhYmUzNDg3YmQ0ZGM0ZjJhZGFlMWFkNTc4MDYzOWVmMTQ2MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEQiWySEIOSMS3Gu8vrLfxh4K/Lr
EQyDGteD7zD9eOLTGEOPFVQqrCbEO7gIgR34HgAmL4gQth15N4Mr7Uqz68W0mXbu
zMFliRUngEI03OvPn3Bu4ZzfJpXpuS4VF/8FsdvJrUMowKx0oK0eU+sNvqP9XDPd
zQQriMR4blU71m+ayCmdeWh1YPUt2fhm5y9hBm22jDjPAYdQbOk7IY6mMfAEyG0J
57/l2+FHgXjKrIXfdG28RO4t8JHhlWoRFyK7AAzr2ge23d2Cr6FMfI8hEHyn5f7D
nDHIV5PAl+2MLyabDTe54emvrLRIEM28TJ7T9JsYefRaWknYOd5UHZ3htQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFqvjSHvU3E8q2uGtV4BjnvFGEtMB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvTVdxLU5JZTlUY1R5cmE0YTFYZ0dPZThVWVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRkMA0G
CSqGSIb3DQEBCwUAA4IBAQB0zcEGOHLVbg/Djd6mbUB3rKGuIvWz1D6+zQWsz8Xx
kI74E+m3IkkaoNY2GrZllrrN1qumbUsSANs7evd5S/0rJCfPUK2vctCxYNz/nayf
lA9yvv7SS+8Xn332IrIB4eWDCYrO3b9HBx5e+Xj1T2vR73EB6U3L6QXnNLEN5USr
PCU09zQTn/3PnVOMOlylevaQ/6Kwsj+VEJQc7D6PrrX7jQmoP5nPopZQnLhnyMEx
T124zqL/10StQe4m7d68Znob+3UCYXNUeHoLPwwtk1pJHNE2F+pZvyhBmZ9be67L
4XBn2PXpyaUff/n4W/dYciKqJ0Q6hWGP7C1h5whVGVbk
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:29:45 2024 by rpki-client on console-ams.rpki-client.org