Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa
File: z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa (raw, json)
Hash identifier: u9oA2bHZw3lUSP+WTjTj9gYnq5LWD1Tw4yifxX9/ry4=
Subject key identifier: CF:61:36:0D:69:D8:E4:EB:0A:CD:67:19:FD:39:16:DD:83:89:F1:DC
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018CC80167DF73163438B0C2FCB8B1CDCAE8
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208612
IP address blocks: 45.92.43.0/24 maxlen: 24
2a0e:1cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:67:df:73:16:34:38:b0:c2:fc:b8:b1:cd:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf61360d69d8e4eb0acd6719fd3916dd8389f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:71:29:a2:96:e6:62:db:f7:8e:60:61:54:
52:52:cf:33:0e:1d:ec:69:f3:28:f5:4f:b9:7d:0c:
c8:d8:a9:af:a3:1b:ac:de:c9:b4:cc:22:88:f0:1a:
b0:34:56:63:89:18:34:4b:1b:6b:bf:e8:4a:76:34:
9f:2c:98:47:b5:6c:1e:bf:8e:3b:00:41:1a:f3:85:
9d:c8:d5:80:c3:3a:45:18:fc:84:e7:c8:ec:f2:0a:
c6:1a:81:5a:41:32:da:a1:9d:07:08:26:68:ba:6b:
16:65:ab:02:95:fc:47:26:5a:7f:be:37:89:dd:ce:
56:f2:e2:3b:d9:ff:32:a7:fb:12:dd:ff:ea:5d:8a:
6c:7f:7c:38:e3:b2:ba:ce:94:81:28:d0:eb:3d:78:
34:60:87:d6:94:b7:0e:0b:ab:2e:64:9b:b2:2e:fa:
8a:68:ab:11:a3:12:67:e5:43:c5:5f:ba:62:38:ee:
ed:e8:db:2d:15:14:05:6e:b9:20:7e:d4:2e:72:c4:
88:94:00:39:a1:23:93:61:83:0c:c9:21:05:67:bb:
86:c7:50:a1:70:a7:3b:9c:11:b6:33:8a:f4:f5:0f:
91:91:1d:d7:c6:23:eb:21:7d:79:38:d5:b4:3d:4a:
24:3a:52:7f:5a:af:dd:81:2a:ad:48:27:96:77:41:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:36:0D:69:D8:E4:EB:0A:CD:67:19:FD:39:16:DD:83:89:F1:DC
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/z2E2DWnY5OsKzWcZ_TkW3YOJ8dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.43.0/24
IPv6:
2a0e:1cc0::/48
Signature Algorithm: sha256WithRSAEncryption
18:58:17:d5:28:e7:75:43:74:71:c1:e4:5c:ad:47:37:fb:1a:
1c:12:75:2c:9a:4d:5e:74:17:72:59:5d:01:f2:8b:d5:0c:19:
8e:37:30:47:4c:9e:57:a5:49:33:5a:4b:ea:f2:c7:05:2d:35:
a3:96:e8:70:c3:14:88:37:a6:1d:ea:3f:ff:4f:9d:b7:05:10:
dd:46:5a:35:af:6b:7f:46:20:cc:7b:18:0a:72:e1:e4:06:9d:
11:d1:58:c7:e5:56:cb:9c:91:48:d9:4d:62:76:e3:16:8b:fd:
c9:f5:99:8d:e4:8e:5d:bd:ea:7a:05:89:c1:39:35:a9:6d:73:
8f:b0:ab:c7:a1:3e:66:22:1d:da:22:81:20:1c:60:47:1d:47:
7f:30:69:b5:e4:92:99:39:2a:87:d0:c3:40:a9:6e:90:e4:49:
d2:d0:f0:74:bd:58:72:60:e8:6e:f8:5e:42:c4:3c:21:1b:d0:
01:7c:aa:19:22:55:74:be:76:d8:19:c8:55:1b:b4:f7:45:db:
84:c0:18:52:99:c8:3b:a6:e4:c6:d7:03:d7:22:df:41:64:78:
70:01:e8:a7:01:0a:ac:aa:39:e3:02:06:b9:bf:56:2e:66:51:
2a:9b:67:97:79:99:36:ed:b4:98:c0:e4:47:70:9e:00:5f:91:
b7:8a:76:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzIAWffcxY0OLDC/LixzcroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjYxMzYwZDY5ZDhlNGViMGFjZDY3MTlmZDM5MTZkZDgzODlmMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN5xKaKW5mLb945gYVRSUs8zDh3s
afMo9U+5fQzI2Kmvoxus3sm0zCKI8BqwNFZjiRg0Sxtrv+hKdjSfLJhHtWwev447
AEEa84WdyNWAwzpFGPyE58js8grGGoFaQTLaoZ0HCCZoumsWZasClfxHJlp/vjeJ
3c5W8uI72f8yp/sS3f/qXYpsf3w447K6zpSBKNDrPXg0YIfWlLcOC6suZJuyLvqK
aKsRoxJn5UPFX7piOO7t6NstFRQFbrkgftQucsSIlAA5oSOTYYMMySEFZ7uGx1Ch
cKc7nBG2M4r09Q+RkR3XxiPrIX15ONW0PUokOlJ/Wq/dgSqtSCeWd0HAVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM9hNg1p2OTrCs1nGf05Ft2DifHcMB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvejJFMkRXblk1T3NLeldjWl9Ua1czWU9KOGR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALVwrMA8E
AgACMAkDBwAqDhzAAAAwDQYJKoZIhvcNAQELBQADggEBABhYF9Uo53VDdHHB5Fyt
Rzf7GhwSdSyaTV50F3JZXQHyi9UMGY43MEdMnlelSTNaS+ryxwUtNaOW6HDDFIg3
ph3qP/9PnbcFEN1GWjWva39GIMx7GApy4eQGnRHRWMflVsuckUjZTWJ24xaL/cn1
mY3kjl296noFicE5Naltc4+wq8ehPmYiHdoigSAcYEcdR38wabXkkpk5KofQw0Cp
bpDkSdLQ8HS9WHJg6G74XkLEPCEb0AF8qhkiVXS+dtgZyFUbtPdF24TAGFKZyDum
5MbXA9ci30FkeHAB6KcBCqyqOeMCBrm/Vi5mUSqbZ5d5mTbttJjA5EdwngBfkbeK
dng=
-----END CERTIFICATE-----
Generated at Fri May 24 09:17:39 2024 by rpki-client on console-ams.rpki-client.org