Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa
File: PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa (raw, json)
Hash identifier: XHMY7zQy6wr71DLBIZA9qFAsJDYs54tGUJpVNoTHa5A=
Subject key identifier: 3E:DB:17:5F:1D:A5:B3:B8:42:6C:B0:4F:01:2E:0C:35:31:B6:F1:9A
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018CC49357948DD086EEB5ABE182A0841974
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60985
IP address blocks: 45.10.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 13:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:94:8d:d0:86:ee:b5:ab:e1:82:a0:84:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3edb175f1da5b3b8426cb04f012e0c3531b6f19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:84:00:06:9c:a3:ec:40:31:8f:58:ae:63:
53:78:1a:b7:e3:c4:07:2e:c1:13:d9:ee:91:f0:00:
1c:ed:53:7f:30:03:83:0c:0f:36:b0:97:5f:6a:b2:
78:cf:0f:15:50:61:48:25:33:6f:4a:b5:9f:27:6c:
c2:a5:99:da:b1:b6:d6:a0:29:66:96:73:e3:e5:d4:
94:3f:cb:2f:38:0e:77:4d:44:b0:79:18:ed:83:19:
7f:bf:8d:0f:73:cd:b6:9f:65:18:c3:e0:a0:7d:ce:
55:bf:17:28:4a:cf:c3:09:f1:f3:2f:1a:18:02:0f:
c0:e6:c5:6a:80:ed:46:bb:c5:0e:42:e0:3c:f5:30:
94:49:6b:9c:d3:59:7f:3f:7d:5a:57:e4:82:2b:38:
f6:93:25:ff:97:7e:06:23:ba:60:47:bb:60:3c:a0:
e6:4e:a4:c0:f2:43:d3:fb:db:d0:a7:e9:95:ea:7c:
30:ba:35:59:e9:63:85:1f:0d:e3:66:88:00:2f:9c:
67:4f:3a:ad:9a:1c:83:92:a7:f8:5d:35:33:8a:03:
c6:3e:6b:62:ef:d4:6c:7f:a5:f8:a6:ea:50:a9:95:
21:77:56:82:50:1f:b4:dc:e4:97:8f:73:0a:d8:9c:
6c:3c:31:7f:be:14:62:d9:4d:e1:d7:c6:0e:e4:2a:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:17:5F:1D:A5:B3:B8:42:6C:B0:4F:01:2E:0C:35:31:B6:F1:9A
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.96.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b7:61:5d:50:25:9a:62:d3:96:1e:6d:83:bb:f2:c3:16:f0:
42:c9:3c:76:01:a9:2c:19:35:dc:5f:bf:83:d7:d2:41:86:25:
a7:d8:b0:32:b9:fc:f3:3b:a3:ff:79:43:73:bc:3b:aa:5c:55:
12:11:c2:d3:81:77:9f:49:54:5a:99:f4:c2:a7:24:59:60:7e:
11:8b:ea:ec:e1:23:a4:fb:e8:32:51:3e:42:47:0b:e9:21:03:
ad:79:45:5e:19:47:12:05:b5:77:bc:08:1c:93:b1:a5:23:a7:
29:f3:64:ec:52:fc:48:94:6e:62:d2:7b:9c:a5:b4:66:f5:e8:
d7:8c:e0:63:e4:33:79:4b:a2:bb:30:28:cd:36:29:46:7c:39:
f6:df:86:5a:d7:ff:b2:6d:5c:40:90:38:1b:69:8a:40:fe:b6:
db:af:9b:1c:70:b4:e9:54:4f:28:0c:1d:dc:87:be:de:1e:d0:
3b:b7:a0:e0:f5:96:69:d4:20:1d:ba:74:78:b8:81:53:bd:68:
31:a1:54:c4:6b:f7:43:5f:db:2e:81:6e:61:69:3a:56:31:ee:
26:10:36:95:7d:0e:3c:57:1c:51:60:fd:3d:83:7b:70:7a:c5:
16:09:f2:0d:f3:e2:db:92:49:4b:ff:79:ba:b6:a6:8f:3d:ed:
4c:af:b5:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk1eUjdCG7rWr4YKghBl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjQwMTAxMTAzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWRiMTc1ZjFkYTViM2I4NDI2Y2IwNGYwMTJlMGMzNTMxYjZmMTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+EAAaco+xAMY9YrmNTeBq348QH
LsET2e6R8AAc7VN/MAODDA82sJdfarJ4zw8VUGFIJTNvSrWfJ2zCpZnasbbWoClm
lnPj5dSUP8svOA53TUSweRjtgxl/v40Pc822n2UYw+Cgfc5VvxcoSs/DCfHzLxoY
Ag/A5sVqgO1Gu8UOQuA89TCUSWuc01l/P31aV+SCKzj2kyX/l34GI7pgR7tgPKDm
TqTA8kPT+9vQp+mV6nwwujVZ6WOFHw3jZogAL5xnTzqtmhyDkqf4XTUzigPGPmti
79Rsf6X4pupQqZUhd1aCUB+03OSXj3MK2JxsPDF/vhRi2U3h18YO5Cq1VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7bF18dpbO4QmywTwEuDDUxtvGaMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvUHRzWFh4MmxzN2hDYkxCUEFTNE1OVEcyOFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQpgMA0G
CSqGSIb3DQEBCwUAA4IBAQAHt2FdUCWaYtOWHm2Du/LDFvBCyTx2AaksGTXcX7+D
19JBhiWn2LAyufzzO6P/eUNzvDuqXFUSEcLTgXefSVRamfTCpyRZYH4Ri+rs4SOk
++gyUT5CRwvpIQOteUVeGUcSBbV3vAgck7GlI6cp82TsUvxIlG5i0nucpbRm9ejX
jOBj5DN5S6K7MCjNNilGfDn234Za1/+ybVxAkDgbaYpA/rbbr5sccLTpVE8oDB3c
h77eHtA7t6Dg9ZZp1CAdunR4uIFTvWgxoVTEa/dDX9sugW5haTpWMe4mEDaVfQ48
VxxRYP09g3twesUWCfIN8+LbkklL/3m6tqaPPe1Mr7WQ
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:04:56 2024 by rpki-client on console-ams.rpki-client.org