Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SrCEw9OcFgcCBJM_vWefTdeui9k.roa
File: SrCEw9OcFgcCBJM_vWefTdeui9k.roa (raw, json)
Hash identifier: WYZIrwnKfO/jvjpsoirpzwhwhvIcDBwaYfE8bgnBc0I=
Subject key identifier: 4A:B0:84:C3:D3:9C:16:07:02:04:93:3F:BD:67:9F:4D:D7:AE:8B:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01933EEE5AE7061ADAEE8E03524FE260C10D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SrCEw9OcFgcCBJM_vWefTdeui9k.roa
Signing time: Mon 18 Nov 2024 11:00:28 +0000
ROA not before: Mon 18 Nov 2024 11:00:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 45.128.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:ee:5a:e7:06:1a:da:ee:8e:03:52:4f:e2:60:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 18 11:00:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ab084c3d39c16070204933fbd679f4dd7ae8bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f0:3f:20:dd:41:b6:20:9b:42:5b:c1:43:49:
cf:1f:99:ed:ac:64:65:d4:d7:a7:8b:b8:8d:68:1a:
db:57:4c:12:ef:86:51:bd:af:f0:44:74:96:3b:76:
92:e4:81:1a:ac:63:1b:85:0f:30:f3:a8:79:5f:87:
8a:64:60:d8:f3:a5:46:e8:7c:0a:33:1c:85:61:14:
03:f0:3e:30:f9:55:f9:9a:2c:06:c2:b9:4e:0e:ef:
f3:d7:04:5f:d2:85:fa:10:b6:95:43:36:86:e5:61:
0e:35:27:b9:a6:b0:25:1c:44:aa:8c:cc:ce:2b:ad:
ac:97:18:b1:85:b1:21:51:6f:46:9c:07:60:a1:00:
f0:a8:f3:3b:bd:19:d2:ac:f3:d4:b0:12:bc:0a:2d:
eb:e6:72:0e:18:83:f5:16:ce:1b:07:70:36:6e:c4:
2c:56:0a:bf:fa:4c:3d:af:ad:54:f8:25:15:31:af:
8a:ab:54:d3:19:2f:2a:f2:18:9f:a7:50:d1:86:41:
3e:0e:0f:94:9a:da:16:1f:ec:c8:20:52:9c:c0:6c:
f3:a6:ec:31:31:e2:b8:3a:07:44:f0:fe:62:d5:41:
8c:ab:02:84:11:d5:e7:2d:5e:65:bd:c1:7b:95:a4:
4e:70:5f:af:23:4b:13:df:89:f2:b8:96:d0:f6:09:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:84:C3:D3:9C:16:07:02:04:93:3F:BD:67:9F:4D:D7:AE:8B:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SrCEw9OcFgcCBJM_vWefTdeui9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.78.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f1:b9:5b:df:25:c3:49:d8:43:e6:ec:74:be:ba:e5:db:43:
ff:06:f6:26:fe:98:58:a6:88:f1:82:14:70:3b:aa:22:2d:32:
04:12:c0:0d:70:1e:ed:15:6f:11:87:b2:ea:73:13:46:9e:11:
25:df:51:0d:54:b2:78:29:2d:8e:07:ae:51:23:98:c7:17:60:
5f:e2:a5:b8:0d:bd:ac:2e:29:48:a1:88:70:06:37:90:98:99:
99:91:52:0c:c8:f1:f5:74:df:ef:59:00:21:dc:a3:b8:e7:56:
a6:04:65:0d:4d:42:9a:19:57:1a:65:7c:d7:f9:58:e2:f4:82:
e8:45:93:f0:e4:7f:e0:a2:65:93:5e:e2:38:69:52:cb:3e:a3:
b7:24:46:ce:62:61:e3:02:e7:3a:b3:c7:55:33:53:e4:06:ae:
8e:94:ab:e7:3b:07:50:cb:6c:58:72:54:35:a5:2c:4c:c3:76:
65:85:c3:e5:87:6a:c1:7f:a9:d5:eb:b7:5d:37:5d:0a:eb:93:
ce:b6:68:e4:a2:e0:40:b4:8c:7e:72:5c:c0:64:68:36:64:29:
af:ba:d7:bb:54:ff:3e:75:60:1e:1c:63:27:b7:89:c2:6c:6e:
b7:79:ae:8a:d4:c8:99:1d:1a:6c:47:42:86:ae:35:63:e8:23:
e3:22:cf:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM+7lrnBhra7o4DUk/iYMENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMTE4MTEwMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWIwODRjM2QzOWMxNjA3MDIwNDkzM2ZiZDY3OWY0ZGQ3YWU4YmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PA/IN1BtiCbQlvBQ0nPH5ntrGRl
1Neni7iNaBrbV0wS74ZRva/wRHSWO3aS5IEarGMbhQ8w86h5X4eKZGDY86VG6HwK
MxyFYRQD8D4w+VX5miwGwrlODu/z1wRf0oX6ELaVQzaG5WEONSe5prAlHESqjMzO
K62slxixhbEhUW9GnAdgoQDwqPM7vRnSrPPUsBK8Ci3r5nIOGIP1Fs4bB3A2bsQs
Vgq/+kw9r61U+CUVMa+Kq1TTGS8q8hifp1DRhkE+Dg+UmtoWH+zIIFKcwGzzpuwx
MeK4OgdE8P5i1UGMqwKEEdXnLV5lvcF7laROcF+vI0sT34nyuJbQ9glJFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqwhMPTnBYHAgSTP71nn03XrovZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU3JDRXc5T2NGZ2NDQkpNX3ZXZWZUZGV1aTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYBOMA0G
CSqGSIb3DQEBCwUAA4IBAQBw8blb3yXDSdhD5ux0vrrl20P/BvYm/phYpojxghRw
O6oiLTIEEsANcB7tFW8Rh7LqcxNGnhEl31ENVLJ4KS2OB65RI5jHF2Bf4qW4Db2s
LilIoYhwBjeQmJmZkVIMyPH1dN/vWQAh3KO451amBGUNTUKaGVcaZXzX+Vji9ILo
RZPw5H/gomWTXuI4aVLLPqO3JEbOYmHjAuc6s8dVM1PkBq6OlKvnOwdQy2xYclQ1
pSxMw3ZlhcPlh2rBf6nV67ddN10K65POtmjkouBAtIx+clzAZGg2ZCmvute7VP8+
dWAeHGMnt4nCbG63ea6K1MiZHRpsR0KGrjVj6CPjIs8j
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:30 2024 by rpki-client on console-fra.rpki-client.org