Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/e1-vgKZOyogscSelSReWvk0khEM.roa
File: e1-vgKZOyogscSelSReWvk0khEM.roa (raw, json)
Hash identifier: eAgrh+fgoPno0qzyd3w0KJ2amJBxYOPgfhOrc7UIq1s=
Subject key identifier: 7B:5F:AF:80:A6:4E:CA:88:2C:71:27:A5:49:17:96:BE:4D:24:84:43
Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73
Certificate serial: 01924C61C5C25FC2C5B49056EED1EAC9B107
Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/e1-vgKZOyogscSelSReWvk0khEM.roa
Signing time: Wed 02 Oct 2024 08:38:48 +0000
ROA not before: Wed 02 Oct 2024 08:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 559
IP address blocks: 185.133.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:61:c5:c2:5f:c2:c5:b4:90:56:ee:d1:ea:c9:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73
Validity
Not Before: Oct 2 08:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b5faf80a64eca882c7127a5491796be4d248443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:5d:62:82:46:7a:77:1c:cf:8b:4c:07:eb:
f6:20:3b:ed:58:9b:bb:e6:22:4b:4a:42:91:2e:f2:
8a:34:e0:9f:90:5e:31:04:9b:1d:91:36:00:dd:52:
23:fe:fb:78:95:f2:06:50:96:0d:a1:27:a1:77:c3:
41:f0:a9:d3:10:25:47:d7:db:26:42:14:d3:9e:20:
a3:8b:7c:e9:dc:0f:ea:fd:4f:6d:99:a7:62:9f:0a:
0d:84:03:15:76:cf:67:9a:f1:fc:55:e3:79:50:ad:
c9:24:91:60:e2:36:d5:54:fe:37:01:ed:55:d3:6a:
d9:76:2f:7b:6a:52:04:0d:8b:a1:42:36:2b:b2:8f:
c4:f9:52:87:38:5c:01:4a:a8:78:17:e1:a2:c6:61:
63:41:e4:ff:16:e3:13:73:ca:ad:7e:a6:20:e9:d7:
13:83:28:d5:43:ff:dc:b6:65:c3:18:1b:5d:ad:c1:
18:74:4a:97:48:8e:b0:9f:53:69:13:9b:bf:6a:47:
14:43:cf:65:ac:52:72:59:ef:10:80:6f:52:df:4a:
81:d9:f3:d7:9d:f4:c9:c0:2f:db:2d:97:2e:ab:89:
8b:3e:ec:8a:9b:02:de:d7:52:43:83:12:f0:1f:f1:
5f:b8:5c:33:2a:05:08:23:3b:ec:46:65:7e:a3:a3:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:AF:80:A6:4E:CA:88:2C:71:27:A5:49:17:96:BE:4D:24:84:43
X509v3 Authority Key Identifier:
keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/e1-vgKZOyogscSelSReWvk0khEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.44.0/22
Signature Algorithm: sha256WithRSAEncryption
59:07:3a:87:3d:b3:96:87:4a:b5:9e:c8:49:d1:c1:84:ca:93:
bc:d4:7a:2f:04:27:24:31:94:91:58:9c:af:06:2b:d4:94:c7:
75:c5:dd:f4:4b:e9:ab:54:a0:7e:e3:d1:b2:73:f4:fb:0f:17:
07:f0:2e:c2:1b:94:d1:9d:b8:41:63:62:8f:2b:14:f3:23:9f:
a0:0f:79:19:65:4d:e4:34:91:bc:bf:19:c9:42:3e:4c:44:d9:
39:9d:78:0f:30:ab:73:08:93:6a:3b:84:9a:98:c6:16:64:ae:
c7:7e:29:06:33:53:fd:53:fc:7c:05:ac:f5:2c:87:68:f5:94:
e0:a8:12:20:b7:80:60:a3:43:5a:1d:db:d5:82:47:a7:7a:8a:
68:2e:1d:9e:0d:3e:d8:a4:6b:67:51:04:4f:d2:81:f3:7c:8e:
f1:43:b0:55:62:29:d0:5e:10:51:4f:8b:d3:7d:a4:7d:2b:9b:
ac:20:6b:83:b9:7f:aa:00:02:14:85:b0:4f:ab:44:82:aa:2d:
66:47:bf:ed:32:6b:44:14:18:b7:3d:62:f6:01:c5:97:bd:99:
7a:dd:c2:70:17:38:f7:04:e3:e8:6b:fe:a9:16:63:07:67:56:
b7:88:cb:06:2f:29:6f:c1:7e:4a:1a:b2:ba:16:10:77:b4:96:
b3:2e:df:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJMYcXCX8LFtJBW7tHqybEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx
OGRlNzMwHhcNMjQxMDAyMDgzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjVmYWY4MGE2NGVjYTg4MmM3MTI3YTU0OTE3OTZiZTRkMjQ4NDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA121dYoJGenccz4tMB+v2IDvtWJu7
5iJLSkKRLvKKNOCfkF4xBJsdkTYA3VIj/vt4lfIGUJYNoSehd8NB8KnTECVH19sm
QhTTniCji3zp3A/q/U9tmadinwoNhAMVds9nmvH8VeN5UK3JJJFg4jbVVP43Ae1V
02rZdi97alIEDYuhQjYrso/E+VKHOFwBSqh4F+GixmFjQeT/FuMTc8qtfqYg6dcT
gyjVQ//ctmXDGBtdrcEYdEqXSI6wn1NpE5u/akcUQ89lrFJyWe8QgG9S30qB2fPX
nfTJwC/bLZcuq4mLPuyKmwLe11JDgxLwH/FfuFwzKgUIIzvsRmV+o6PHUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtfr4CmTsqILHEnpUkXlr5NJIRDMB8GA1UdIwQY
MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt
Njc1ZTA3MjM1NjU3LzEvZTEtdmdLWk95b2dzY1NlbFNSZVd2azBraEVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3
LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYUsMA0G
CSqGSIb3DQEBCwUAA4IBAQBZBzqHPbOWh0q1nshJ0cGEypO81HovBCckMZSRWJyv
BivUlMd1xd30S+mrVKB+49Gyc/T7DxcH8C7CG5TRnbhBY2KPKxTzI5+gD3kZZU3k
NJG8vxnJQj5MRNk5nXgPMKtzCJNqO4SamMYWZK7HfikGM1P9U/x8Baz1LIdo9ZTg
qBIgt4Bgo0NaHdvVgkeneopoLh2eDT7YpGtnUQRP0oHzfI7xQ7BVYinQXhBRT4vT
faR9K5usIGuDuX+qAAIUhbBPq0SCqi1mR7/tMmtEFBi3PWL2AcWXvZl63cJwFzj3
BOPoa/6pFmMHZ1a3iMsGLylvwX5KGrK6FhB3tJazLt8X
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:01:13 2024 by rpki-client on console-ams.rpki-client.org