Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2KHSAjzG4_USa5jyrklJozpHVBU.roa
File: 2KHSAjzG4_USa5jyrklJozpHVBU.roa (raw, json)
Hash identifier: f9IXwslWpKrPRO1IumYczXYxNlIzyFqZo2bN/B8dudg=
Subject key identifier: D8:A1:D2:02:3C:C6:E3:F5:12:6B:98:F2:AE:49:49:A3:3A:47:54:15
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0191BB76603DAA2C136A728B626049BD8B7C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2KHSAjzG4_USa5jyrklJozpHVBU.roa
Signing time: Wed 04 Sep 2024 05:16:22 +0000
ROA not before: Wed 04 Sep 2024 05:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 45.91.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:76:60:3d:aa:2c:13:6a:72:8b:62:60:49:bd:8b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 4 05:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a1d2023cc6e3f5126b98f2ae4949a33a475415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:0b:91:71:03:39:b2:34:36:bf:37:c8:d8:
df:6d:ae:cd:45:00:3e:96:c8:64:b4:6f:a1:1c:2c:
5d:0f:03:66:d0:9b:44:19:df:2e:bd:4d:1c:2c:f7:
ca:34:3e:a3:63:fb:39:62:e7:15:31:7d:e0:21:84:
36:b1:bc:78:5c:0e:18:f0:4f:31:97:1b:e0:98:03:
e5:d7:4e:33:8e:cf:61:d7:b9:f6:2b:ee:5a:31:6e:
b0:b0:27:8b:2e:b0:b4:3b:7f:b8:a0:31:35:ed:88:
e1:db:b3:c6:97:48:09:f1:53:c0:17:5c:7a:cd:f9:
a8:63:06:ff:bd:c4:bf:e1:ec:92:99:06:f2:90:12:
bd:a6:7a:c9:e5:ad:b5:0d:bb:61:55:e2:16:f9:2f:
76:e0:de:df:84:4a:10:78:e3:de:43:fd:34:f2:dc:
f7:2a:f7:aa:7b:57:1c:25:59:20:3e:37:5d:92:c9:
82:d4:cc:ae:9e:90:c1:4a:7c:ed:25:58:08:0b:4b:
ca:82:97:8b:a7:97:1c:12:9e:d3:78:90:c2:14:f6:
b1:92:08:5a:d5:fe:93:dc:2a:09:35:7b:ec:59:06:
f0:d6:f1:a3:c8:78:fa:d0:3d:76:ef:6d:2a:6e:7f:
da:20:11:cc:5d:72:d0:6a:84:a3:89:14:94:15:81:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A1:D2:02:3C:C6:E3:F5:12:6B:98:F2:AE:49:49:A3:3A:47:54:15
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2KHSAjzG4_USa5jyrklJozpHVBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e2:82:0c:ed:46:60:8b:40:60:da:76:3b:5b:e5:0e:11:67:
06:87:34:0c:49:53:87:42:43:7b:84:a0:48:8b:7f:74:e9:af:
9d:49:ab:a3:e4:32:43:cc:3a:6b:40:ba:6e:1c:c3:3d:a9:50:
16:0a:51:43:c1:7c:13:c7:11:dc:b9:39:b1:42:38:d8:9f:80:
39:38:73:89:21:df:86:57:2e:6f:8f:44:29:fa:0a:c8:41:77:
a1:1f:80:3b:bf:86:25:f0:bc:8c:22:40:03:c6:69:80:32:c3:
ec:58:a7:18:87:09:60:dd:9b:0c:f0:96:d3:91:29:6a:bd:45:
bc:db:32:3f:c7:58:32:e2:c8:be:c7:86:80:98:ac:d7:33:31:
07:75:3b:a1:4d:b1:f3:a1:76:0b:71:70:75:85:84:7c:3d:fc:
c8:db:aa:4a:43:c2:8e:df:90:f7:63:ef:d1:56:da:a1:cb:25:
96:74:1e:87:90:d2:78:cb:5c:17:a0:0b:07:b8:3d:8c:91:81:
17:76:47:51:e7:7f:f9:09:38:38:f1:c0:72:a3:7f:ed:69:9e:
a5:b2:73:fa:3b:bc:10:1a:6a:d4:70:c9:4b:7b:ea:92:92:6a:
af:af:34:54:a3:d1:c1:1a:70:b9:d4:f4:2b:18:bf:56:34:60:
4d:f8:81:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG7dmA9qiwTanKLYmBJvYt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwOTA0MDUxNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGExZDIwMjNjYzZlM2Y1MTI2Yjk4ZjJhZTQ5NDlhMzNhNDc1NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrYLkXEDObI0Nr83yNjfba7NRQA+
lshktG+hHCxdDwNm0JtEGd8uvU0cLPfKND6jY/s5YucVMX3gIYQ2sbx4XA4Y8E8x
lxvgmAPl104zjs9h17n2K+5aMW6wsCeLLrC0O3+4oDE17Yjh27PGl0gJ8VPAF1x6
zfmoYwb/vcS/4eySmQbykBK9pnrJ5a21DbthVeIW+S924N7fhEoQeOPeQ/008tz3
Kveqe1ccJVkgPjddksmC1MyunpDBSnztJVgIC0vKgpeLp5ccEp7TeJDCFPaxkgha
1f6T3CoJNXvsWQbw1vGjyHj60D12720qbn/aIBHMXXLQaoSjiRSUFYEYowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNih0gI8xuP1EmuY8q5JSaM6R1QVMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvMktIU0Fqekc0X1VTYTVqeXJrbEpvenBIVkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsXMA0G
CSqGSIb3DQEBCwUAA4IBAQCh4oIM7UZgi0Bg2nY7W+UOEWcGhzQMSVOHQkN7hKBI
i3906a+dSauj5DJDzDprQLpuHMM9qVAWClFDwXwTxxHcuTmxQjjYn4A5OHOJId+G
Vy5vj0Qp+grIQXehH4A7v4Yl8LyMIkADxmmAMsPsWKcYhwlg3ZsM8JbTkSlqvUW8
2zI/x1gy4si+x4aAmKzXMzEHdTuhTbHzoXYLcXB1hYR8PfzI26pKQ8KO35D3Y+/R
VtqhyyWWdB6HkNJ4y1wXoAsHuD2MkYEXdkdR53/5CTg48cByo3/taZ6lsnP6O7wQ
GmrUcMlLe+qSkmqvrzRUo9HBGnC51PQrGL9WNGBN+IF3
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:26:31 2024 by rpki-client on console-fra.rpki-client.org