Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/K7IybBXT33JhsvdFfBGKJWqI2KY.roa
File: K7IybBXT33JhsvdFfBGKJWqI2KY.roa (raw, json)
Hash identifier: 7jbishiCyYSz+YuC+XG+b0bWHOI49oP1xCe2LNS1ZLA=
Subject key identifier: 2B:B2:32:6C:15:D3:DF:72:61:B2:F7:45:7C:11:8A:25:6A:88:D8:A6
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018CC5DC6CC465D9B647B88D4D842B9F7B82
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/K7IybBXT33JhsvdFfBGKJWqI2KY.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 45.12.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6c:c4:65:d9:b6:47:b8:8d:4d:84:2b:9f:7b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb2326c15d3df7261b2f7457c118a256a88d8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:49:f9:30:73:aa:e2:04:4c:3e:64:33:cb:
89:4b:cc:aa:5b:97:3a:51:49:9c:9b:71:91:b4:9c:
96:47:dd:be:b0:b3:0f:4b:eb:96:96:5a:1d:e1:0e:
41:0a:14:cc:33:60:4f:89:f3:aa:cd:97:01:d8:1f:
6b:3b:93:47:48:24:a4:0c:8e:65:68:b7:f5:83:4d:
24:e0:f0:17:5d:0d:fd:2d:a9:5f:73:72:37:43:e5:
7c:fe:94:54:43:07:97:7d:e5:bd:12:a2:77:ae:a1:
f6:88:f5:7b:ee:8d:da:48:73:62:2b:05:88:dc:02:
5c:27:c1:6a:4d:07:99:76:6f:0c:56:83:ed:92:72:
21:39:fd:5b:c6:33:a5:e0:ae:55:c5:9b:e8:6c:fc:
2e:02:c9:50:9b:eb:7d:b9:3c:42:4c:c9:3d:cc:62:
63:1a:0a:7c:c0:c9:7d:9d:22:bb:5c:5c:c3:c1:a4:
58:2d:7c:8d:02:21:0a:6e:95:c3:46:7a:8c:3c:59:
91:e0:a7:d8:e2:e9:26:45:22:5a:67:8e:34:f0:86:
0b:00:df:51:b7:97:15:66:aa:90:d4:11:6b:b8:27:
a3:49:76:f0:2e:cc:27:68:c0:d8:1b:90:ce:ae:32:
ab:51:60:5f:b6:14:b7:72:1d:9f:75:30:b7:43:ac:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:32:6C:15:D3:DF:72:61:B2:F7:45:7C:11:8A:25:6A:88:D8:A6
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/K7IybBXT33JhsvdFfBGKJWqI2KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.186.0/24
Signature Algorithm: sha256WithRSAEncryption
88:74:6c:3c:d8:e8:f5:e1:96:a6:ed:52:76:7c:b1:df:2a:f6:
3d:1b:0f:5f:47:6a:f9:e8:1d:6a:db:da:96:ac:1b:8e:4a:0c:
02:4c:53:62:ca:27:3a:61:7b:b2:a2:e9:c3:7f:6d:76:b5:f1:
f3:86:23:c9:13:8e:d0:7d:00:cb:56:19:81:c9:c6:2d:7e:0d:
12:d1:e7:58:2a:70:31:dd:55:85:8d:58:b0:17:62:61:4a:93:
4d:eb:43:47:84:ad:de:a7:da:31:06:fe:a5:19:2f:2d:44:76:
95:7a:fc:a3:1a:f0:c6:63:e4:b5:19:93:a7:81:08:c3:ec:ca:
67:47:de:f0:5c:57:db:21:f9:57:d0:38:69:8c:bc:1f:b7:a6:
eb:b8:56:2c:ef:ef:d4:23:74:f9:ea:64:8a:55:6a:34:64:67:
cf:e4:82:8f:ca:e8:f5:8e:35:62:65:b9:cc:50:d3:59:c8:71:
71:b1:fb:dd:65:0e:1b:7d:59:f6:5b:c8:40:ac:aa:97:1f:bf:
5d:39:48:02:05:2b:93:3b:b1:35:50:f9:4b:e0:86:e4:67:40:
dd:4c:d9:1a:fa:09:4f:b1:a3:9b:72:1d:57:4e:5b:bb:b1:23:
8f:de:47:fa:41:a6:2d:5c:4b:0d:f3:a2:65:5d:29:21:48:83:
1a:38:0b:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3GzEZdm2R7iNTYQrn3uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm
OWY0NjUwHhcNMjQwMTAxMTYzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmIyMzI2YzE1ZDNkZjcyNjFiMmY3NDU3YzExOGEyNTZhODhkOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivFJ+TBzquIETD5kM8uJS8yqW5c6
UUmcm3GRtJyWR92+sLMPS+uWllod4Q5BChTMM2BPifOqzZcB2B9rO5NHSCSkDI5l
aLf1g00k4PAXXQ39Lalfc3I3Q+V8/pRUQweXfeW9EqJ3rqH2iPV77o3aSHNiKwWI
3AJcJ8FqTQeZdm8MVoPtknIhOf1bxjOl4K5VxZvobPwuAslQm+t9uTxCTMk9zGJj
Ggp8wMl9nSK7XFzDwaRYLXyNAiEKbpXDRnqMPFmR4KfY4ukmRSJaZ4408IYLAN9R
t5cVZqqQ1BFruCejSXbwLswnaMDYG5DOrjKrUWBfthS3ch2fdTC3Q6wP9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCuyMmwV099yYbL3RXwRiiVqiNimMB8GA1UdIwQY
MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt
NmRlZjM5OGNlNWM5LzEvSzdJeWJCWFQzM0poc3ZkRmZCR0tKV3FJMktZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5
LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQy6MA0G
CSqGSIb3DQEBCwUAA4IBAQCIdGw82Oj14Zam7VJ2fLHfKvY9Gw9fR2r56B1q29qW
rBuOSgwCTFNiyic6YXuyounDf212tfHzhiPJE47QfQDLVhmBycYtfg0S0edYKnAx
3VWFjViwF2JhSpNN60NHhK3ep9oxBv6lGS8tRHaVevyjGvDGY+S1GZOngQjD7Mpn
R97wXFfbIflX0DhpjLwft6bruFYs7+/UI3T56mSKVWo0ZGfP5IKPyuj1jjViZbnM
UNNZyHFxsfvdZQ4bfVn2W8hArKqXH79dOUgCBSuTO7E1UPlL4IbkZ0DdTNka+glP
saObch1XTlu7sSOP3kf6QaYtXEsN86JlXSkhSIMaOAsa
-----END CERTIFICATE-----
Generated at Mon May 6 15:45:57 2024 by rpki-client on console-ams.rpki-client.org