Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L48DomMqUNHOfF5KusUrgKNg-7k.roa
File: L48DomMqUNHOfF5KusUrgKNg-7k.roa (raw, json)
Hash identifier: fdTI+B8JXz5ZcFDuQ34NvzcvGSyyenZ21Hx94/6HZIE=
Subject key identifier: 2F:8F:03:A2:63:2A:50:D1:CE:7C:5E:4A:BA:C5:2B:80:A3:60:FB:B9
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018CC56E642F17D7395D9D9851C7B75FD69C
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L48DomMqUNHOfF5KusUrgKNg-7k.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211409
IP address blocks: 45.15.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:64:2f:17:d7:39:5d:9d:98:51:c7:b7:5f:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f8f03a2632a50d1ce7c5e4abac52b80a360fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:cd:0a:c1:52:83:d7:56:5a:8c:6e:f3:d8:
04:06:29:d8:1d:34:71:3a:cb:24:53:1d:04:89:bf:
23:bc:2a:a5:f0:6d:0d:6d:d0:e8:a7:4b:57:0e:f3:
6c:cc:0d:72:cb:36:00:e2:a3:1f:2e:b9:13:63:2d:
80:dc:70:3f:77:5b:0f:83:f0:15:82:65:09:ab:ea:
60:93:e1:76:e8:95:68:99:f9:49:a4:74:9d:44:1a:
aa:a2:9c:88:ed:7c:ad:a5:7b:1f:b2:86:4d:8e:0f:
95:ec:c5:68:e6:91:1f:52:35:d0:86:f0:56:77:d1:
52:c5:1d:fd:c3:f2:8e:b7:4c:c8:64:f2:9f:e9:db:
c0:b4:06:36:af:74:18:7d:1d:ac:02:5d:b1:2a:f9:
bc:46:3d:b1:99:49:7d:3a:a2:1c:81:a5:51:c8:36:
09:7e:1e:f1:e6:b6:ed:6d:e6:f9:c0:c8:e5:1d:0b:
c7:5d:ae:d9:b4:ef:d8:7b:28:76:6f:b3:4e:36:a7:
6b:37:bc:ec:12:9e:54:41:8d:af:18:1a:89:f7:ad:
d8:9a:0d:45:70:a9:51:2e:14:13:f2:e8:5f:4b:d8:
ca:0a:c8:55:d5:97:ed:ab:3e:d8:1f:79:f6:19:7f:
c3:17:db:c8:90:e0:34:ba:09:73:55:50:5d:35:18:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:03:A2:63:2A:50:D1:CE:7C:5E:4A:BA:C5:2B:80:A3:60:FB:B9
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/L48DomMqUNHOfF5KusUrgKNg-7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:06:8e:3f:72:50:08:4d:fe:d0:bb:10:c5:0e:8a:35:5d:3b:
37:a9:29:4d:9f:f7:0b:92:50:1a:37:60:05:7c:72:2d:fa:6c:
56:b7:93:9b:de:20:cf:0d:04:f1:01:ec:2d:ac:cf:94:fb:14:
55:a9:cd:98:aa:f0:95:7c:5e:72:ed:fa:d3:bb:3e:a6:ca:76:
d8:79:c5:20:5b:e3:91:6a:db:e5:51:d0:70:73:c1:8d:55:57:
01:d2:86:09:a4:ce:0e:2d:ba:26:48:72:f0:e9:c1:e5:74:f1:
87:f4:dd:20:fd:37:3e:5f:01:c1:21:51:d2:9b:ad:f4:ba:e7:
bc:77:ca:bf:70:12:9c:0e:5b:44:fd:8a:4b:91:bf:79:4c:c5:
b8:3b:11:cc:86:21:dd:30:0a:a8:92:80:ce:d5:58:c0:50:8b:
d0:59:77:02:32:06:50:5b:c4:5d:8f:7f:05:5e:c7:34:14:a7:
0b:02:5f:dc:51:65:ed:f8:da:8f:df:c9:c1:45:d5:17:98:01:
32:68:31:80:16:47:48:7a:cf:db:3a:04:af:f3:63:fe:53:57:
c3:f7:8f:f9:d8:9c:60:3b:7d:68:15:dc:88:0f:f5:be:c7:51:
21:4b:25:ce:af:0e:0c:97:de:bd:40:fd:2e:6d:bc:19:3b:e2:
c8:0e:dd:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbmQvF9c5XZ2YUce3X9acMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjQwMTAxMTQyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjhmMDNhMjYzMmE1MGQxY2U3YzVlNGFiYWM1MmI4MGEzNjBmYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfzNCsFSg9dWWoxu89gEBinYHTRx
OsskUx0Eib8jvCql8G0NbdDop0tXDvNszA1yyzYA4qMfLrkTYy2A3HA/d1sPg/AV
gmUJq+pgk+F26JVomflJpHSdRBqqopyI7XytpXsfsoZNjg+V7MVo5pEfUjXQhvBW
d9FSxR39w/KOt0zIZPKf6dvAtAY2r3QYfR2sAl2xKvm8Rj2xmUl9OqIcgaVRyDYJ
fh7x5rbtbeb5wMjlHQvHXa7ZtO/Yeyh2b7NONqdrN7zsEp5UQY2vGBqJ963Ymg1F
cKlRLhQT8uhfS9jKCshV1Zftqz7YH3n2GX/DF9vIkOA0uglzVVBdNRhjVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+PA6JjKlDRznxeSrrFK4CjYPu5MB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvTDQ4RG9tTXFVTkhPZkY1S3VzVXJnS05nLTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ+cMA0G
CSqGSIb3DQEBCwUAA4IBAQBrBo4/clAITf7QuxDFDoo1XTs3qSlNn/cLklAaN2AF
fHIt+mxWt5Ob3iDPDQTxAewtrM+U+xRVqc2YqvCVfF5y7frTuz6mynbYecUgW+OR
atvlUdBwc8GNVVcB0oYJpM4OLbomSHLw6cHldPGH9N0g/Tc+XwHBIVHSm630uue8
d8q/cBKcDltE/YpLkb95TMW4OxHMhiHdMAqokoDO1VjAUIvQWXcCMgZQW8Rdj38F
Xsc0FKcLAl/cUWXt+NqP38nBRdUXmAEyaDGAFkdIes/bOgSv82P+U1fD94/52Jxg
O31oFdyID/W+x1EhSyXOrw4Ml969QP0ubbwZO+LIDt1Z
-----END CERTIFICATE-----
Generated at Tue Jul 2 16:42:36 2024 by rpki-client on console-ams.rpki-client.org