Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JkkOSbauj7cK3FfkP1s1P5USZPw.roa
File: JkkOSbauj7cK3FfkP1s1P5USZPw.roa (raw, json)
Hash identifier: 1/7YDXtwJ6T8avcEC2rjtx9L/hx09ZYytKlMac+oQhc=
Subject key identifier: 26:49:0E:49:B6:AE:8F:B7:0A:DC:57:E4:3F:5B:35:3F:95:12:64:FC
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018CC56E1146613B2500E13AD2B21D9C9BB0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JkkOSbauj7cK3FfkP1s1P5USZPw.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264409
IP address blocks: 45.149.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:11:46:61:3b:25:00:e1:3a:d2:b2:1d:9c:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26490e49b6ae8fb70adc57e43f5b353f951264fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:c4:cd:b3:14:1d:8f:63:a8:b6:f5:62:47:
e1:5c:a6:0f:06:30:4c:fd:6a:fc:ce:8f:eb:81:37:
82:9e:e7:40:5e:fd:99:e3:8b:6e:f7:99:d9:3e:5b:
fb:9e:24:38:46:48:55:12:d6:96:e8:28:14:3d:24:
31:6c:f2:1e:3f:a7:03:9f:d6:70:cc:4b:cc:79:2b:
89:34:1b:6b:c2:84:56:dc:d7:dd:a7:39:f0:ed:c4:
48:a9:50:27:6e:10:27:63:ae:97:94:85:ba:19:8c:
ce:f5:31:f5:1d:88:63:bf:43:c3:79:dc:85:43:76:
de:7d:f7:03:af:ca:47:85:ad:64:06:e8:bc:f9:40:
6e:87:d4:13:b7:5b:90:b1:ed:a2:0b:ca:6b:c8:bb:
e7:f1:09:87:21:dc:63:08:b5:57:da:2c:b5:58:25:
8d:0f:2a:7a:cf:08:c0:d1:f9:76:4d:1c:1c:1d:41:
41:e8:2b:a4:41:73:cc:40:60:09:c8:d6:38:06:23:
6e:f1:07:52:1f:fd:10:ac:e8:17:00:be:87:d3:46:
36:17:98:14:92:65:5a:69:8f:0d:bf:72:a0:1f:c2:
cc:75:d7:69:95:38:07:93:07:3d:cc:0f:90:c7:07:
f4:13:5a:24:1a:6a:76:bb:94:35:54:b1:55:3a:6c:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:0E:49:B6:AE:8F:B7:0A:DC:57:E4:3F:5B:35:3F:95:12:64:FC
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/JkkOSbauj7cK3FfkP1s1P5USZPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.95.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fe:bb:60:37:94:15:1b:75:ad:96:6f:ad:6e:1f:f5:25:11:
76:c9:a0:6d:39:04:83:4b:ed:8a:44:cf:85:db:27:12:63:2a:
a4:31:2c:2f:2d:7c:5f:17:44:6c:86:cd:c7:d9:39:aa:78:3c:
15:3d:e1:a0:68:10:83:8b:ed:5a:83:0b:6a:ff:1d:85:00:19:
f8:77:91:8f:12:ba:7f:22:45:42:ea:65:4d:cd:aa:31:4f:4f:
1d:a1:c8:e6:8b:e8:e7:34:34:f8:0c:0c:3b:ff:d4:bb:1c:92:
d6:c2:2c:f9:79:f2:ed:b9:74:70:0f:cd:32:96:58:df:da:5c:
32:ca:05:b4:06:f1:06:cd:16:d8:b6:37:22:8b:f5:5e:b1:be:
70:67:93:b1:c0:25:ad:69:c4:b1:78:00:93:17:2d:be:f5:15:
d2:66:9c:5f:9f:a7:24:f1:b4:94:f4:5c:fc:4c:12:26:ae:e6:
83:ba:63:86:52:72:3f:7a:54:ac:df:1b:44:b4:9b:5f:09:9c:
f9:31:3e:1b:88:6b:b1:d7:96:04:c4:e7:3a:33:aa:89:c5:8f:
bb:16:c2:74:63:db:72:70:c7:15:86:55:f4:20:26:05:19:92:
50:81:4d:52:e8:c1:13:59:eb:7c:90:65:cf:5f:e9:ec:c0:0a:
38:fa:c0:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbhFGYTslAOE60rIdnJuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwMTAxMTQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjQ5MGU0OWI2YWU4ZmI3MGFkYzU3ZTQzZjViMzUzZjk1MTI2NGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX7EzbMUHY9jqLb1YkfhXKYPBjBM
/Wr8zo/rgTeCnudAXv2Z44tu95nZPlv7niQ4RkhVEtaW6CgUPSQxbPIeP6cDn9Zw
zEvMeSuJNBtrwoRW3Nfdpznw7cRIqVAnbhAnY66XlIW6GYzO9TH1HYhjv0PDedyF
Q3beffcDr8pHha1kBui8+UBuh9QTt1uQse2iC8pryLvn8QmHIdxjCLVX2iy1WCWN
Dyp6zwjA0fl2TRwcHUFB6CukQXPMQGAJyNY4BiNu8QdSH/0QrOgXAL6H00Y2F5gU
kmVaaY8Nv3KgH8LMdddplTgHkwc9zA+Qxwf0E1okGmp2u5Q1VLFVOmx99wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCZJDkm2ro+3CtxX5D9bNT+VEmT8MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvSmtrT1NiYXVqN2NLM0Zma1AxczFQNVVTWlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVfMA0G
CSqGSIb3DQEBCwUAA4IBAQBG/rtgN5QVG3Wtlm+tbh/1JRF2yaBtOQSDS+2KRM+F
2ycSYyqkMSwvLXxfF0Rshs3H2TmqeDwVPeGgaBCDi+1agwtq/x2FABn4d5GPErp/
IkVC6mVNzaoxT08docjmi+jnNDT4DAw7/9S7HJLWwiz5efLtuXRwD80ylljf2lwy
ygW0BvEGzRbYtjcii/Vesb5wZ5OxwCWtacSxeACTFy2+9RXSZpxfn6ck8bSU9Fz8
TBImruaDumOGUnI/elSs3xtEtJtfCZz5MT4biGux15YExOc6M6qJxY+7FsJ0Y9ty
cMcVhlX0ICYFGZJQgU1S6METWet8kGXPX+nswAo4+sBY
-----END CERTIFICATE-----
Generated at Sun May 19 15:34:58 2024 by rpki-client on console-ams.rpki-client.org