Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Nk9IfB2GCMWvUnZ8-lRoklJnths.roa
File: Nk9IfB2GCMWvUnZ8-lRoklJnths.roa (raw, json)
Hash identifier: jk7zV9Wg6A460lGn4FR7N+N556koueeQIC3z+3DkFCI=
Subject key identifier: 36:4F:48:7C:1D:86:08:C5:AF:52:76:7C:FA:54:68:92:52:67:B6:1B
Certificate issuer: /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial: 018CC79583FF35967B98077AC505E6F7ACC2
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Nk9IfB2GCMWvUnZ8-lRoklJnths.roa
Signing time: Tue 02 Jan 2024 00:31:53 +0000
ROA not before: Tue 02 Jan 2024 00:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56596
IP address blocks: 45.8.58.0/24 maxlen: 24
45.8.56.0/24 maxlen: 24
45.8.57.0/24 maxlen: 24
45.8.59.0/24 maxlen: 24
195.128.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:83:ff:35:96:7b:98:07:7a:c5:05:e6:f7:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Validity
Not Before: Jan 2 00:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=364f487c1d8608c5af52767cfa5468925267b61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:11:08:3d:bc:14:1a:42:08:8c:c8:70:2a:
05:ac:90:41:7c:34:0d:98:22:9c:72:3e:6a:73:bc:
0e:84:0f:a5:87:ee:d3:d8:53:44:6d:8a:8c:79:99:
b2:0a:2f:fe:4c:63:73:09:d4:20:b0:a9:10:1b:65:
51:da:ac:7e:2e:80:c2:63:74:ba:fa:48:4b:d4:bf:
bc:7b:36:67:0d:d8:e9:91:df:8a:e1:2b:aa:05:e0:
01:66:ae:34:9c:1c:6c:17:1b:15:dd:92:96:4d:43:
f4:5d:06:cb:e6:1a:1a:9c:cf:d6:b1:29:54:bf:37:
4d:eb:7b:c5:b4:de:c1:51:57:ae:94:e0:ff:90:7d:
61:b2:e6:a8:15:fc:06:ca:e5:6c:be:24:75:d8:36:
ca:fe:ad:88:d0:4c:5a:5e:4d:52:4e:45:ae:c4:8d:
b2:56:b7:50:73:54:8f:ab:56:62:64:2a:5a:09:e4:
92:00:86:d5:d2:24:bb:df:76:d5:74:23:f1:73:e9:
a9:6b:10:fc:07:0b:45:22:57:77:59:5b:07:ad:75:
0a:d2:f7:76:e7:55:30:60:b6:b8:82:a1:23:1b:3e:
de:24:a2:1b:dd:5d:8e:2b:94:7d:43:da:91:2b:ed:
03:6c:8a:b2:10:44:a1:88:2f:a3:4d:56:ae:11:ea:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4F:48:7C:1D:86:08:C5:AF:52:76:7C:FA:54:68:92:52:67:B6:1B
X509v3 Authority Key Identifier:
keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Nk9IfB2GCMWvUnZ8-lRoklJnths.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.56.0/22
195.128.145.0/24
Signature Algorithm: sha256WithRSAEncryption
27:46:c6:d1:a6:b0:e3:c6:ef:9b:cb:c2:00:30:da:15:1c:7e:
f7:bc:0a:56:6c:31:0d:56:95:92:73:20:cf:32:4e:8b:58:8d:
58:17:05:d4:72:1a:f8:e1:81:85:5c:a7:a6:75:f6:2b:59:67:
f3:e3:ee:7e:f0:2f:2d:a9:25:b0:84:b2:84:cc:91:57:14:c6:
cc:22:7e:6a:be:16:0a:2e:6f:f1:5c:b9:4a:5b:c9:4c:66:a5:
92:78:8f:2d:37:b4:d5:c4:e6:5a:7a:cc:23:7d:ea:7d:0d:27:
3e:fc:48:28:e9:1e:2d:b0:b9:bf:f7:b7:43:b0:74:2d:1b:ec:
e1:17:16:19:96:cc:69:44:24:b1:65:3c:38:78:6d:e2:92:e5:
30:5a:29:06:99:44:08:89:f6:74:b0:ba:fb:d7:09:64:f5:ec:
e6:6b:7f:f4:00:85:56:64:0a:6f:d8:54:f3:e6:65:07:f4:c5:
91:e3:8d:71:5b:06:7e:27:51:43:1b:8a:bf:f8:d1:49:1a:8f:
32:6d:cf:a0:04:d1:1e:b5:9b:74:34:01:69:b3:d3:93:9b:0c:
e2:ea:6b:d4:36:f7:18:3e:8a:a0:bc:81:8f:40:60:b2:01:cb:
65:c0:5e:80:de:d0:a3:f9:74:f1:eb:33:54:30:13:e4:52:b8:
98:a9:bf:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlYP/NZZ7mAd6xQXm96zCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGI3NmVmMGFiNTU1YmM4YjA3NjFmNjA2OGE0NGUxMGIy
YjMxZjcwHhcNMjQwMTAyMDAzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjRmNDg3YzFkODYwOGM1YWY1Mjc2N2NmYTU0Njg5MjUyNjdiNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRYRCD28FBpCCIzIcCoFrJBBfDQN
mCKccj5qc7wOhA+lh+7T2FNEbYqMeZmyCi/+TGNzCdQgsKkQG2VR2qx+LoDCY3S6
+khL1L+8ezZnDdjpkd+K4SuqBeABZq40nBxsFxsV3ZKWTUP0XQbL5hoanM/WsSlU
vzdN63vFtN7BUVeulOD/kH1hsuaoFfwGyuVsviR12DbK/q2I0ExaXk1STkWuxI2y
VrdQc1SPq1ZiZCpaCeSSAIbV0iS733bVdCPxc+mpaxD8BwtFIld3WVsHrXUK0vd2
51UwYLa4gqEjGz7eJKIb3V2OK5R9Q9qRK+0DbIqyEEShiC+jTVauEeoK1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDZPSHwdhgjFr1J2fPpUaJJSZ7YbMB8GA1UdIwQY
MBaAFFMLdu8KtVW8iwdh9gaKROELKzH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTct
YmZmZmM5MWZkZTNjLzEvTms5SWZCMkdDTVd2VW5aOC1sUm9rbEpudGhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTctYmZmZmM5MWZkZTNj
LzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQg4AwQA
w4CRMA0GCSqGSIb3DQEBCwUAA4IBAQAnRsbRprDjxu+by8IAMNoVHH73vApWbDEN
VpWScyDPMk6LWI1YFwXUchr44YGFXKemdfYrWWfz4+5+8C8tqSWwhLKEzJFXFMbM
In5qvhYKLm/xXLlKW8lMZqWSeI8tN7TVxOZaeswjfep9DSc+/Ego6R4tsLm/97dD
sHQtG+zhFxYZlsxpRCSxZTw4eG3ikuUwWikGmUQIifZ0sLr71wlk9ezma3/0AIVW
ZApv2FTz5mUH9MWR441xWwZ+J1FDG4q/+NFJGo8ybc+gBNEetZt0NAFps9OTmwzi
6mvUNvcYPoqgvIGPQGCyActlwF6A3tCj+XTx6zNUMBPkUriYqb/G
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:14 2024 by rpki-client on console-ams.rpki-client.org