Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/44YSwqdsyKtc7GGvYcJFjcCvPpc.roa
File: 44YSwqdsyKtc7GGvYcJFjcCvPpc.roa (raw, json)
Hash identifier: g3g30tilO4oE3hC+X7dWr6L8Ary9Ap2/UojHBsxaPKE=
Subject key identifier: E3:86:12:C2:A7:6C:C8:AB:5C:EC:61:AF:61:C2:45:8D:C0:AF:3E:97
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018CC86F85433C86F1473FC33908B9521B50
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/44YSwqdsyKtc7GGvYcJFjcCvPpc.roa
Signing time: Tue 02 Jan 2024 04:30:00 +0000
ROA not before: Tue 02 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 45.132.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:85:43:3c:86:f1:47:3f:c3:39:08:b9:52:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 2 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e38612c2a76cc8ab5cec61af61c2458dc0af3e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:cd:0a:f0:60:9a:3d:e2:d5:98:ea:3c:61:
61:ba:37:a7:b5:1a:25:a2:f2:54:44:59:b6:c9:19:
68:8a:f3:06:9a:5d:2b:9d:a2:4c:19:b5:cf:2d:1b:
ab:40:1d:64:0b:e5:e7:74:3f:82:d3:53:13:5e:89:
22:af:25:9b:a1:29:1b:a2:c3:9a:a0:8e:14:da:a7:
3a:c0:3e:fc:9f:63:b5:27:b2:a6:af:ed:57:38:54:
d3:e4:ef:12:a8:f2:ea:b8:61:52:3d:be:63:46:83:
87:a0:5f:4e:6b:44:94:5d:a1:b9:1d:d1:b6:a4:33:
34:c3:b8:a6:97:e3:1c:e8:47:b7:db:b8:bc:fd:3a:
e8:c2:22:d9:03:f6:86:07:2c:20:94:01:74:58:82:
7a:83:7f:be:f8:83:4e:b0:84:d8:28:f1:c7:b9:12:
52:ed:42:c2:61:0e:b5:3e:59:3f:4d:aa:62:c9:28:
ef:dc:55:b6:cf:92:a4:e5:4d:2e:18:09:20:70:56:
83:8a:a8:47:99:71:c1:37:6c:ac:e9:11:b1:50:5d:
ec:cd:d8:f5:ad:b0:4d:20:1e:64:0d:38:c2:23:78:
46:53:92:17:ea:08:67:5f:4d:f0:25:1f:cb:80:be:
6b:b8:d2:d2:e9:6f:a4:94:6a:7a:4b:13:59:29:29:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:12:C2:A7:6C:C8:AB:5C:EC:61:AF:61:C2:45:8D:C0:AF:3E:97
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/44YSwqdsyKtc7GGvYcJFjcCvPpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.115.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f8:34:db:b2:81:28:78:5d:92:e8:1a:93:67:73:09:b3:59:
56:6a:87:92:57:bd:e9:eb:0c:00:48:9a:7f:13:38:62:30:6a:
e2:5c:6d:ec:d9:32:67:24:de:b9:11:29:12:f9:e3:7b:9c:9d:
bc:a8:b5:b7:31:0c:20:5c:d0:10:c5:a7:e2:29:ae:c5:15:d6:
25:f2:e0:f9:ea:89:be:44:25:b7:dc:0f:41:7f:39:86:d8:ae:
7f:b5:ed:01:17:69:49:cf:08:62:34:2e:f0:90:87:cc:87:4a:
6e:e8:c1:69:cc:27:a9:2d:1d:28:b1:7d:fc:4a:bb:45:af:4e:
f6:81:db:4c:9c:41:35:2b:f1:91:97:6f:24:0e:80:6a:43:bd:
86:55:23:9c:98:8d:3a:22:af:62:27:fc:8f:2e:0b:fa:21:1d:
a8:74:60:ef:db:e3:50:7c:d5:f8:fe:3a:a6:1e:95:84:0f:4d:
5e:c9:27:dc:e0:1d:9d:84:e6:7d:90:3b:f5:66:84:cc:b3:8c:
40:83:14:09:ae:88:c3:e3:5a:b5:0f:bb:b4:63:68:55:f4:c4:
08:6c:72:ce:37:dd:ae:49:b1:8e:82:e5:48:68:4f:4d:01:5c:
9d:e3:1f:17:d8:a0:c9:3b:dc:17:2f:5d:14:56:2e:3c:3b:2f:
4e:48:81:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb4VDPIbxRz/DOQi5UhtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjQwMTAyMDQzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzg2MTJjMmE3NmNjOGFiNWNlYzYxYWY2MWMyNDU4ZGMwYWYzZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg3NCvBgmj3i1ZjqPGFhujentRol
ovJURFm2yRloivMGml0rnaJMGbXPLRurQB1kC+XndD+C01MTXokiryWboSkbosOa
oI4U2qc6wD78n2O1J7Kmr+1XOFTT5O8SqPLquGFSPb5jRoOHoF9Oa0SUXaG5HdG2
pDM0w7iml+Mc6Ee327i8/TrowiLZA/aGBywglAF0WIJ6g3+++INOsITYKPHHuRJS
7ULCYQ61Plk/TapiySjv3FW2z5Kk5U0uGAkgcFaDiqhHmXHBN2ys6RGxUF3szdj1
rbBNIB5kDTjCI3hGU5IX6ghnX03wJR/LgL5ruNLS6W+klGp6SxNZKSktFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOGEsKnbMirXOxhr2HCRY3Arz6XMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvNDRZU3dxZHN5S3RjN0dHdlljSkZqY0N2UHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRzMA0G
CSqGSIb3DQEBCwUAA4IBAQCH+DTbsoEoeF2S6BqTZ3MJs1lWaoeSV73p6wwASJp/
EzhiMGriXG3s2TJnJN65ESkS+eN7nJ28qLW3MQwgXNAQxafiKa7FFdYl8uD56om+
RCW33A9BfzmG2K5/te0BF2lJzwhiNC7wkIfMh0pu6MFpzCepLR0osX38SrtFr072
gdtMnEE1K/GRl28kDoBqQ72GVSOcmI06Iq9iJ/yPLgv6IR2odGDv2+NQfNX4/jqm
HpWED01eySfc4B2dhOZ9kDv1ZoTMs4xAgxQJrojD41q1D7u0Y2hV9MQIbHLON92u
SbGOguVIaE9NAVyd4x8X2KDJO9wXL10UVi48Oy9OSIGU
-----END CERTIFICATE-----
Generated at Thu May 2 18:03:48 2024 by rpki-client on console-ams.rpki-client.org