Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa
File: MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa (raw, json)
Hash identifier: nMkrejMTQudZWMPjWuiNB0rg0Bbk9m7eiUt5bCoHuXs=
Subject key identifier: 31:A2:5B:C5:7E:E5:BE:04:D2:7B:C5:58:AE:4B:87:10:31:23:27:57
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 018EBD2527FDBEEE698C2B8983A895300F0D
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa
Signing time: Mon 08 Apr 2024 09:58:32 +0000
ROA not before: Mon 08 Apr 2024 09:58:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210950
IP address blocks: 45.143.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:25:27:fd:be:ee:69:8c:2b:89:83:a8:95:30:0f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Apr 8 09:58:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31a25bc57ee5be04d27bc558ae4b871031232757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:e4:7d:dc:ec:cd:eb:e0:7e:54:2e:5d:88:
6c:b9:7c:b2:c8:34:e3:16:50:af:2a:a3:92:ea:ba:
fa:30:9a:d1:d5:56:39:2c:5b:1d:46:62:4e:cd:cb:
7a:6b:79:25:fa:1a:99:24:6f:ca:f3:1e:67:a7:ac:
9e:5b:b5:95:1a:a3:a0:7f:09:9f:f0:d3:db:0e:24:
c8:b6:83:15:c8:23:68:5d:de:a7:9b:ab:00:c2:77:
eb:b0:9c:b8:2d:34:f9:33:bc:b8:ee:a4:2c:2c:c0:
c9:b4:b3:c2:d9:03:93:c5:b6:16:e9:4c:fd:3b:33:
9b:43:2b:29:a3:80:29:97:8a:09:3f:99:c5:74:c8:
9b:65:aa:3d:8c:6f:2e:ed:d3:41:52:f9:77:12:e7:
26:17:a5:ff:a4:f3:c6:d8:f9:b2:e1:d1:b7:97:e3:
1b:03:e0:d3:d1:ec:42:b9:df:0d:32:88:c0:4d:e5:
d5:3e:f9:8c:ee:a1:b1:08:6e:56:0a:7b:cd:eb:cb:
4d:5a:71:24:15:5f:47:18:78:01:b3:b4:05:32:f5:
20:39:9f:d2:17:64:00:0b:90:bd:7f:c1:f7:0a:8c:
87:c6:40:d7:98:95:c1:a0:5f:d6:a2:d1:ec:36:37:
0c:8c:f1:b1:c2:21:ce:54:60:7b:20:79:64:cd:53:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:5B:C5:7E:E5:BE:04:D2:7B:C5:58:AE:4B:87:10:31:23:27:57
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:cf:8b:43:9f:bd:58:cd:14:96:71:00:b9:b9:2f:c4:72:8f:
7e:2e:dc:06:a8:a2:f8:0f:a7:ae:f8:2f:9a:1f:d4:6a:fa:15:
f7:e0:90:0d:77:5e:75:e4:f8:d0:c5:81:25:1b:04:9a:32:6c:
e5:49:d4:d1:e0:f2:e7:ed:96:4b:3f:d2:09:6f:05:58:5e:65:
74:40:85:d7:2c:8e:4e:c1:7c:22:0c:62:ed:7c:d4:d7:54:c6:
32:f1:8a:5d:f7:de:ba:c1:88:9d:80:6d:2c:86:82:42:2c:be:
88:18:72:86:45:f4:65:bb:55:c1:47:0e:ad:31:d6:59:fa:f6:
44:d7:ff:70:c1:e4:a0:47:c7:47:28:3d:1c:8e:d8:30:a2:6e:
13:94:64:a7:4f:70:66:e4:54:7e:9d:14:8e:c7:15:b3:6e:b9:
52:6f:15:31:aa:94:14:22:08:24:e2:75:1c:11:91:3f:be:da:
b2:cb:6b:b4:44:c4:fc:ee:09:25:df:a0:52:c2:7d:ef:a4:6d:
ec:dd:b2:37:2c:03:cb:3e:5d:b5:9c:10:e1:c7:a4:a7:3d:e1:
91:ce:25:2e:48:84:10:3b:0e:28:c4:51:1b:f3:ff:d3:be:52:
5f:71:02:31:ae:e0:83:1e:5a:e6:6d:61:8c:f7:3a:39:07:d1:
65:b0:5f:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY69JSf9vu5pjCuJg6iVMA8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz
N2Y0ZWQwHhcNMjQwNDA4MDk1ODMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWEyNWJjNTdlZTViZTA0ZDI3YmM1NThhZTRiODcxMDMxMjMyNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4zkfdzszevgflQuXYhsuXyyyDTj
FlCvKqOS6rr6MJrR1VY5LFsdRmJOzct6a3kl+hqZJG/K8x5np6yeW7WVGqOgfwmf
8NPbDiTItoMVyCNoXd6nm6sAwnfrsJy4LTT5M7y47qQsLMDJtLPC2QOTxbYW6Uz9
OzObQyspo4Apl4oJP5nFdMibZao9jG8u7dNBUvl3EucmF6X/pPPG2Pmy4dG3l+Mb
A+DT0exCud8NMojATeXVPvmM7qGxCG5WCnvN68tNWnEkFV9HGHgBs7QFMvUgOZ/S
F2QAC5C9f8H3CoyHxkDXmJXBoF/WotHsNjcMjPGxwiHOVGB7IHlkzVNGfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDGiW8V+5b4E0nvFWK5LhxAxIydXMB8GA1UdIwQY
MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt
NTc2MGVmYmNjNjU0LzEvTWFKYnhYN2x2Z1RTZThWWXJrdUhFREVqSjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0
LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY/JMA0G
CSqGSIb3DQEBCwUAA4IBAQCaz4tDn71YzRSWcQC5uS/Eco9+LtwGqKL4D6eu+C+a
H9Rq+hX34JANd1515PjQxYElGwSaMmzlSdTR4PLn7ZZLP9IJbwVYXmV0QIXXLI5O
wXwiDGLtfNTXVMYy8Ypd9966wYidgG0shoJCLL6IGHKGRfRlu1XBRw6tMdZZ+vZE
1/9wweSgR8dHKD0cjtgwom4TlGSnT3Bm5FR+nRSOxxWzbrlSbxUxqpQUIggk4nUc
EZE/vtqyy2u0RMT87gkl36BSwn3vpG3s3bI3LAPLPl21nBDhx6SnPeGRziUuSIQQ
Ow4oxFEb8//TvlJfcQIxruCDHlrmbWGM9zo5B9FlsF+b
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:25 2024 by rpki-client on console-ams.rpki-client.org