Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/51QwOsAkEg5uxXWA7v6JW8nhFFk.roa
File: 51QwOsAkEg5uxXWA7v6JW8nhFFk.roa (raw, json)
Hash identifier: E7Ag2VJ0ybxWJOU0v6r+wf1w/JjAIjiXt3YeH++KfOc=
Subject key identifier: E7:54:30:3A:C0:24:12:0E:6E:C5:75:80:EE:FE:89:5B:C9:E1:14:59
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018CC8016663AA8C99D525861BD718994F4E
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/51QwOsAkEg5uxXWA7v6JW8nhFFk.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203105
IP address blocks: 45.92.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:66:63:aa:8c:99:d5:25:86:1b:d7:18:99:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e754303ac024120e6ec57580eefe895bc9e11459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:c3:6f:a1:55:ee:75:73:05:68:9e:84:50:
be:b4:b2:79:66:2b:a0:88:ee:c1:a9:49:93:00:47:
44:00:b5:8e:15:08:5a:45:c6:e0:b3:50:c1:f5:b5:
36:ec:cd:7f:d0:1b:99:ac:81:08:08:0c:d0:d8:ed:
03:03:19:0a:7b:8c:08:a7:3c:72:d0:1f:c1:f3:15:
44:b4:47:e0:c4:50:88:ec:a2:98:22:16:a8:10:01:
2f:c4:9a:76:d3:b1:06:cb:8f:58:44:fd:4d:af:5c:
0a:6e:51:6d:73:f4:35:be:99:3a:10:f2:ad:9b:57:
30:ed:b3:4e:0d:47:e4:83:0d:62:f2:7c:03:98:0d:
f9:b4:66:26:ee:c7:9e:4a:14:f4:4a:cd:6f:5b:d7:
ad:cd:04:32:14:e0:31:57:79:6a:51:3e:01:e8:9f:
7f:15:2a:14:68:85:e4:ee:56:8c:df:bd:84:2c:37:
af:f3:af:fd:fb:31:6d:8f:21:4d:48:a1:51:6f:5e:
fd:ad:46:b2:55:91:55:ed:82:0c:17:86:54:48:d2:
43:1c:c6:ef:f4:44:31:3c:6a:fa:a6:ed:d4:c2:3a:
13:25:95:f6:e8:84:6b:ce:03:19:49:3b:19:60:67:
ff:55:1c:07:aa:80:6c:3b:e1:a4:ba:41:f5:77:f6:
cf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:30:3A:C0:24:12:0E:6E:C5:75:80:EE:FE:89:5B:C9:E1:14:59
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/51QwOsAkEg5uxXWA7v6JW8nhFFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d4:50:23:40:99:cd:a9:b7:b3:63:4b:ae:31:89:8b:50:b8:
9a:74:42:5b:19:d5:d1:3f:3d:e0:b1:ae:44:46:fe:db:34:46:
d1:88:1e:93:a8:84:51:43:79:dd:55:c8:b6:d0:f7:bd:c3:60:
53:f8:43:40:c3:db:18:51:36:80:09:43:82:e1:14:aa:a3:d1:
7f:6b:fd:c4:c9:dc:2c:52:fc:71:bd:ef:25:81:3f:db:61:12:
01:21:b1:45:10:7e:2d:f0:81:c1:c4:4f:52:55:3d:3e:fe:48:
95:de:ee:47:79:c8:db:20:bc:12:44:45:94:87:e8:30:82:87:
9e:0b:68:bc:c5:49:d0:f1:0d:f1:f0:f2:a4:95:dd:84:d4:98:
d2:a1:cf:bc:f5:ab:24:ee:d2:a8:0b:7e:73:9a:0c:63:57:19:
11:78:51:b7:41:86:b2:eb:54:66:14:08:40:cc:05:b7:ac:ce:
bb:c6:af:a8:dd:5b:6b:43:01:cd:36:63:55:4e:b6:a1:12:38:
2a:61:80:0c:63:3a:4d:b1:fd:d7:c6:0b:b1:c3:6a:e9:7b:2b:
62:4c:3b:ac:b2:09:e6:2d:d5:ca:30:82:29:e8:4f:21:97:03:
ce:d6:60:e5:1b:ca:6b:fc:e4:3b:8c:42:b3:d4:e6:21:fc:c8:
9e:cc:84:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAWZjqoyZ1SWGG9cYmU9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzU0MzAzYWMwMjQxMjBlNmVjNTc1ODBlZWZlODk1YmM5ZTExNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnDb6FV7nVzBWiehFC+tLJ5Ziug
iO7BqUmTAEdEALWOFQhaRcbgs1DB9bU27M1/0BuZrIEICAzQ2O0DAxkKe4wIpzxy
0B/B8xVEtEfgxFCI7KKYIhaoEAEvxJp207EGy49YRP1Nr1wKblFtc/Q1vpk6EPKt
m1cw7bNODUfkgw1i8nwDmA35tGYm7seeShT0Ss1vW9etzQQyFOAxV3lqUT4B6J9/
FSoUaIXk7laM372ELDev86/9+zFtjyFNSKFRb179rUayVZFV7YIMF4ZUSNJDHMbv
9EQxPGr6pu3UwjoTJZX26IRrzgMZSTsZYGf/VRwHqoBsO+GkukH1d/bPeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdUMDrAJBIObsV1gO7+iVvJ4RRZMB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvNTFRd09zQWtFZzV1eFhXQTd2NkpXOG5oRkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwqMA0G
CSqGSIb3DQEBCwUAA4IBAQBB1FAjQJnNqbezY0uuMYmLULiadEJbGdXRPz3gsa5E
Rv7bNEbRiB6TqIRRQ3ndVci20Pe9w2BT+ENAw9sYUTaACUOC4RSqo9F/a/3Eydws
Uvxxve8lgT/bYRIBIbFFEH4t8IHBxE9SVT0+/kiV3u5HecjbILwSREWUh+gwgoee
C2i8xUnQ8Q3x8PKkld2E1JjSoc+89ask7tKoC35zmgxjVxkReFG3QYay61RmFAhA
zAW3rM67xq+o3VtrQwHNNmNVTrahEjgqYYAMYzpNsf3Xxguxw2rpeytiTDussgnm
LdXKMIIp6E8hlwPO1mDlG8pr/OQ7jEKz1OYh/MiezITp
-----END CERTIFICATE-----
Generated at Fri May 24 19:10:53 2024 by rpki-client on console-ams.rpki-client.org