Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NMORd2Q8urRb36amO0hBuq3kvWE.roa
File: NMORd2Q8urRb36amO0hBuq3kvWE.roa (raw, json)
Hash identifier: Gag0VcUL9Lmym+MVc153zkI8Od+eW57ubUUbzQ2lLOs=
Subject key identifier: 34:C3:91:77:64:3C:BA:B4:5B:DF:A6:A6:3B:48:41:BA:AD:E4:BD:61
Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial: 01924E8541840C10FBAC64C854E189774CB6
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NMORd2Q8urRb36amO0hBuq3kvWE.roa
Signing time: Wed 02 Oct 2024 18:36:48 +0000
ROA not before: Wed 02 Oct 2024 18:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211141
IP address blocks: 45.80.13.0/24 maxlen: 24
45.80.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:85:41:84:0c:10:fb:ac:64:c8:54:e1:89:77:4c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
Validity
Not Before: Oct 2 18:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34c39177643cbab45bdfa6a63b4841baade4bd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f6:3a:95:15:50:9b:bd:0d:59:02:4e:bf:8f:
20:07:d3:99:d0:25:0e:2a:a2:9d:5c:17:1a:ed:83:
3b:2b:c3:f0:bc:54:54:7a:f2:de:db:1d:dd:3e:3e:
b8:12:03:65:54:51:a0:45:70:5c:ce:e7:20:6a:fa:
8f:6b:02:1e:bc:6b:4e:2e:23:ff:0c:ef:bd:02:ac:
5f:72:4b:ae:45:4d:4f:10:be:46:fe:b6:b7:0d:d2:
a7:0d:1d:49:b6:67:db:93:4d:43:74:aa:12:f7:33:
b2:3e:bc:2d:ff:33:29:ad:20:84:86:ce:26:bd:e6:
23:71:24:b2:24:9b:3d:9d:6e:5b:0a:d9:04:60:ac:
5f:a9:a1:54:7d:7f:c8:7b:56:30:d3:b9:31:01:f7:
d2:97:71:5a:44:93:55:f8:c2:1a:14:71:2c:df:c8:
35:72:ea:45:1c:42:2a:4e:ca:7a:06:77:45:a9:18:
aa:76:21:fc:4f:af:b8:a6:32:c0:37:97:cc:b3:37:
cf:d5:ce:ac:8d:76:cb:c0:76:fc:13:25:20:ba:eb:
18:70:2f:0f:57:ce:4a:1c:b7:52:f7:14:e7:2c:12:
a4:b2:1c:c5:c0:9b:a8:60:b2:88:aa:c3:e2:04:1b:
cb:6f:a2:a6:cc:75:79:6d:da:3a:4d:6c:ee:ca:bb:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:91:77:64:3C:BA:B4:5B:DF:A6:A6:3B:48:41:BA:AD:E4:BD:61
X509v3 Authority Key Identifier:
keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/NMORd2Q8urRb36amO0hBuq3kvWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.13.0/24
45.80.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:09:9b:2e:38:4c:63:22:fe:04:78:a4:bf:e4:1b:6f:62:9d:
78:6c:8d:d0:bd:18:78:9b:5b:ce:fb:2f:b0:db:ea:58:64:02:
04:aa:77:52:7b:75:4f:6d:fd:a6:55:3c:a8:6b:b5:fe:6d:3c:
f2:75:3b:d8:60:de:d2:a7:5b:a2:1a:72:41:bd:f2:dd:32:1e:
d7:0f:93:96:07:66:0d:f2:1f:a6:0e:00:b1:94:b0:c9:23:c6:
e1:c8:d2:83:ac:f2:51:bf:84:d5:0f:13:3d:cf:e6:93:a2:e9:
32:ee:26:c5:cd:70:8f:e2:17:aa:ac:c1:85:1c:0f:34:00:4e:
66:6f:2d:ac:89:75:1a:6b:ca:c8:47:e6:a0:5a:29:1d:f2:a6:
93:0d:df:8d:fc:71:8e:be:63:70:17:2a:31:8a:42:01:f6:af:
fb:b0:5a:d4:fd:b9:30:5e:f2:2d:f3:8f:35:9d:d2:e6:41:c4:
4a:3f:8d:86:1c:07:72:b0:68:d3:c7:a1:63:d7:ff:85:6a:fc:
d6:0d:41:73:73:f2:93:1f:fb:ab:02:d3:a8:b4:07:7b:9c:96:
d7:8b:79:58:20:27:3b:85:5e:e9:33:da:e6:ba:dc:ee:da:68:
f1:b0:d8:62:56:43:ae:4d:67:8e:29:d3:19:fe:a4:0f:3c:70:
22:e0:90:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJOhUGEDBD7rGTIVOGJd0y2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3
MTRlMmQwHhcNMjQxMDAyMTgzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGMzOTE3NzY0M2NiYWI0NWJkZmE2YTYzYjQ4NDFiYWFkZTRiZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fY6lRVQm70NWQJOv48gB9OZ0CUO
KqKdXBca7YM7K8PwvFRUevLe2x3dPj64EgNlVFGgRXBczucgavqPawIevGtOLiP/
DO+9AqxfckuuRU1PEL5G/ra3DdKnDR1Jtmfbk01DdKoS9zOyPrwt/zMprSCEhs4m
veYjcSSyJJs9nW5bCtkEYKxfqaFUfX/Ie1Yw07kxAffSl3FaRJNV+MIaFHEs38g1
cupFHEIqTsp6BndFqRiqdiH8T6+4pjLAN5fMszfP1c6sjXbLwHb8EyUguusYcC8P
V85KHLdS9xTnLBKkshzFwJuoYLKIqsPiBBvLb6KmzHV5bdo6TWzuyrvJ9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDTDkXdkPLq0W9+mpjtIQbqt5L1hMB8GA1UdIwQY
MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It
NjY0YjhmMDNkMTgwLzEvTk1PUmQyUTh1clJiMzZhbU8waEJ1cTNrdldFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw
LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVANAwQA
LVAPMA0GCSqGSIb3DQEBCwUAA4IBAQA7CZsuOExjIv4EeKS/5BtvYp14bI3QvRh4
m1vO+y+w2+pYZAIEqndSe3VPbf2mVTyoa7X+bTzydTvYYN7Sp1uiGnJBvfLdMh7X
D5OWB2YN8h+mDgCxlLDJI8bhyNKDrPJRv4TVDxM9z+aTouky7ibFzXCP4heqrMGF
HA80AE5mby2siXUaa8rIR+agWikd8qaTDd+N/HGOvmNwFyoxikIB9q/7sFrU/bkw
XvIt8481ndLmQcRKP42GHAdysGjTx6Fj1/+FavzWDUFzc/KTH/urAtOotAd7nJbX
i3lYICc7hV7pM9rmutzu2mjxsNhiVkOuTWeOKdMZ/qQPPHAi4JC9
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:28 2024 by rpki-client on console-fra.rpki-client.org