Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/elsYXoN-_NUkhoDbRWpr12iMQ9U.roa
File: elsYXoN-_NUkhoDbRWpr12iMQ9U.roa (raw, json)
Hash identifier: GnHtVQZb9O9nAMS67UKlMEANGQorGOdw6z4ovktsTaE=
Subject key identifier: 7A:5B:18:5E:83:7E:FC:D5:24:86:80:DB:45:6A:6B:D7:68:8C:43:D5
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 018E6612172279DE3CA6151AAADC8F9AE209
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/elsYXoN-_NUkhoDbRWpr12iMQ9U.roa
Signing time: Fri 22 Mar 2024 12:10:45 +0000
ROA not before: Fri 22 Mar 2024 12:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 45.94.24.0/24 maxlen: 24
45.94.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:12:17:22:79:de:3c:a6:15:1a:aa:dc:8f:9a:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Mar 22 12:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a5b185e837efcd5248680db456a6bd7688c43d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:47:9b:e9:6c:db:f3:1f:6c:d2:d3:42:31:
7b:8e:cc:30:43:13:b6:99:6e:bd:9e:2e:c5:fd:59:
4e:87:9a:0b:d3:b9:b8:62:20:8f:40:7b:62:27:fa:
ac:f6:f2:d4:16:46:9b:5d:58:85:8e:02:2d:ab:57:
fc:fb:0f:ae:82:ca:9a:49:52:ec:50:26:41:e5:c7:
8d:cd:7f:d9:ae:e7:b3:38:3b:2c:1f:80:0f:79:57:
40:cc:f1:73:f5:ca:0d:b6:07:a3:38:6e:4b:62:23:
86:b7:eb:c9:c6:68:f3:f7:1d:2c:1b:8f:a5:ca:40:
cb:46:31:2b:10:bb:32:3b:0a:d4:9b:2f:8a:1f:f5:
e6:04:4c:d2:0f:22:ab:d3:37:f2:8b:ec:7f:b2:49:
5c:ee:a7:1d:ae:4a:9e:68:dc:fc:bc:ff:2e:01:f4:
c8:aa:c1:7d:d6:ee:97:d3:f4:74:61:4b:01:f8:a6:
20:2a:7b:96:77:1e:cb:fd:25:d4:56:b7:eb:0c:58:
49:09:d8:a2:b3:6e:20:07:d9:6f:34:51:f2:0e:55:
00:01:84:c3:d6:f8:5b:bc:9d:be:4b:47:c5:4f:22:
70:99:5a:35:b7:d5:c2:f3:ca:e1:a0:ec:2a:6f:c6:
e6:1c:27:e9:d7:e5:12:5c:e2:76:1f:eb:42:b0:9c:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:18:5E:83:7E:FC:D5:24:86:80:DB:45:6A:6B:D7:68:8C:43:D5
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/elsYXoN-_NUkhoDbRWpr12iMQ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.24.0/24
45.94.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:78:9a:66:25:22:0d:ad:05:91:0f:41:5a:6f:68:11:38:d7:
6b:e5:79:a2:13:17:b8:4e:25:66:96:78:f0:42:55:99:e5:a1:
ea:25:6e:26:c7:86:68:0d:a8:e4:07:b1:b1:99:b5:2f:7a:20:
5e:a4:38:ed:8e:0d:61:a7:31:d7:f0:fe:99:e9:65:8f:27:a6:
84:09:97:e6:9a:19:d7:8f:62:48:21:05:09:a4:b1:ca:2a:87:
8e:cd:d4:e9:23:2f:83:9b:51:1a:cd:cd:c1:91:62:f6:5d:81:
79:31:03:b3:92:4b:99:0f:12:b6:8e:19:2d:92:c8:70:07:d8:
33:41:e9:bb:61:34:56:a2:01:64:91:f0:df:97:57:13:32:3d:
72:ae:07:d0:dc:36:74:00:0b:ef:26:06:51:df:b2:88:19:67:
76:fd:da:2a:cb:17:75:cf:97:79:2e:3f:4e:28:1a:f9:a6:de:
d0:70:ec:7f:cc:bf:d8:84:1a:9a:00:80:8d:6e:1a:47:75:8e:
e2:92:96:a2:60:f1:b7:16:fb:ff:77:e8:26:9e:8b:41:c4:47:
f9:3d:99:f2:db:6c:83:f0:91:e5:c0:8a:73:e2:13:38:43:6e:
16:66:a1:a6:f3:c9:ba:86:73:ba:91:76:c0:47:b1:8e:07:ab:
1b:b6:14:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY5mEhcied48phUaqtyPmuIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjQwMzIyMTIxMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTViMTg1ZTgzN2VmY2Q1MjQ4NjgwZGI0NTZhNmJkNzY4OGM0M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4xHm+ls2/MfbNLTQjF7jswwQxO2
mW69ni7F/VlOh5oL07m4YiCPQHtiJ/qs9vLUFkabXViFjgItq1f8+w+ugsqaSVLs
UCZB5ceNzX/ZruezODssH4APeVdAzPFz9coNtgejOG5LYiOGt+vJxmjz9x0sG4+l
ykDLRjErELsyOwrUmy+KH/XmBEzSDyKr0zfyi+x/sklc7qcdrkqeaNz8vP8uAfTI
qsF91u6X0/R0YUsB+KYgKnuWdx7L/SXUVrfrDFhJCdiis24gB9lvNFHyDlUAAYTD
1vhbvJ2+S0fFTyJwmVo1t9XC88rhoOwqb8bmHCfp1+USXOJ2H+tCsJwCSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHpbGF6DfvzVJIaA20Vqa9dojEPVMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvZWxzWVhvTi1fTlVraG9EYlJXcHIxMmlNUTlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV4YAwQA
LV4bMA0GCSqGSIb3DQEBCwUAA4IBAQBKeJpmJSINrQWRD0Fab2gRONdr5XmiExe4
TiVmlnjwQlWZ5aHqJW4mx4ZoDajkB7GxmbUveiBepDjtjg1hpzHX8P6Z6WWPJ6aE
CZfmmhnXj2JIIQUJpLHKKoeOzdTpIy+Dm1Eazc3BkWL2XYF5MQOzkkuZDxK2jhkt
kshwB9gzQem7YTRWogFkkfDfl1cTMj1yrgfQ3DZ0AAvvJgZR37KIGWd2/doqyxd1
z5d5Lj9OKBr5pt7QcOx/zL/YhBqaAICNbhpHdY7ikpaiYPG3Fvv/d+gmnotBxEf5
PZny22yD8JHlwIpz4hM4Q24WZqGm88m6hnO6kXbAR7GOB6sbthR9
-----END CERTIFICATE-----
Generated at Wed May 8 19:11:08 2024 by rpki-client on console-fra.rpki-client.org