Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/PV_plfgYTDC4x-lVEYY6LRYvZcY.roa
File: PV_plfgYTDC4x-lVEYY6LRYvZcY.roa (raw, json)
Hash identifier: EEBmPbRpPalJaTbQRDHKPpOaiABhsjvMKbRirUFMquI=
Subject key identifier: 3D:5F:E9:95:F8:18:4C:30:B8:C7:E9:55:11:86:3A:2D:16:2F:65:C6
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018F7833B516DE7E13ED6191B8BA7245B812
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/PV_plfgYTDC4x-lVEYY6LRYvZcY.roa
Signing time: Tue 14 May 2024 17:43:25 +0000
ROA not before: Tue 14 May 2024 17:43:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 45.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:78:33:b5:16:de:7e:13:ed:61:91:b8:ba:72:45:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: May 14 17:43:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d5fe995f8184c30b8c7e95511863a2d162f65c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:44:17:68:ba:85:9f:95:ee:97:a4:e2:cd:
ac:3d:44:25:c1:af:eb:6c:05:6e:fd:af:e7:8c:1c:
67:67:87:99:c1:e2:8f:59:f5:f1:8a:f0:05:1e:84:
3a:cd:67:8f:1e:db:d1:50:0b:13:34:90:b7:42:a2:
49:bf:5a:e5:e2:da:8c:5a:74:8a:50:10:9d:0b:2a:
70:10:83:f5:7b:5a:47:20:e5:9f:d9:e7:0f:24:c4:
c9:2f:a7:a2:da:09:6d:56:a6:02:11:97:3c:8a:2a:
4f:6b:41:59:a0:47:02:9b:df:a8:fd:2b:53:18:42:
86:a6:04:51:16:e8:5b:7a:6e:62:88:73:d4:e4:3a:
96:8e:88:fa:c6:98:1f:a7:39:33:80:f8:dd:d9:87:
31:c1:2d:1a:80:c2:d2:d1:4b:62:ea:50:31:bc:60:
15:85:a0:c9:cb:56:97:1b:c3:59:9d:19:f1:12:8b:
13:b9:21:89:5d:2f:ef:18:c8:74:9d:cd:b2:5d:6f:
f5:17:55:c4:eb:8f:aa:86:fa:45:5c:f9:1e:82:57:
e3:62:a6:40:c2:02:ad:af:0e:3f:4f:bb:62:54:30:
a2:04:3a:7e:7f:f7:5b:93:0f:6a:42:cc:b5:cc:99:
99:aa:20:d3:fd:f3:cb:04:be:b7:42:72:91:6e:83:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:E9:95:F8:18:4C:30:B8:C7:E9:55:11:86:3A:2D:16:2F:65:C6
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/PV_plfgYTDC4x-lVEYY6LRYvZcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1a:e7:c8:28:3a:56:74:b2:81:d7:c5:ef:6f:dd:95:63:31:
4a:f5:a8:06:f3:78:3f:c5:d7:7b:f7:7c:6e:95:0e:2c:7b:a7:
a3:35:e2:26:a6:26:db:46:bc:bf:83:7b:29:97:c9:8b:d7:98:
f5:bd:e3:d7:9d:d2:94:68:7d:71:70:bf:32:52:1c:35:84:55:
53:85:ba:12:38:4b:d4:96:54:28:f1:81:6d:cc:7d:74:2a:32:
f4:34:07:a6:83:3f:ee:14:f8:e1:f4:63:c2:51:c1:0f:81:01:
19:77:57:8c:bc:64:f4:67:00:9b:b4:fb:0d:08:3a:21:36:4a:
85:5b:0e:52:05:b8:0a:94:9a:4b:6b:b1:53:9c:b2:cf:f5:10:
32:4e:32:70:de:3b:49:b2:bb:40:e6:62:37:66:32:f9:5e:3b:
ab:83:cd:8e:7c:aa:31:8c:b4:88:ff:93:6a:44:87:ee:ed:b1:
e0:55:a1:57:5b:87:c9:32:95:5e:5a:c6:09:54:89:ae:31:fd:
cc:f1:dc:6f:3c:a6:8e:88:38:94:cc:a9:aa:1d:e9:45:cb:18:
5a:02:22:e4:14:f8:ad:33:ea:08:fd:78:f3:44:8c:3e:7f:0b:
1f:38:1f:c6:cd:1e:b8:d6:08:42:a3:5d:a9:df:c0:b4:92:6d:
e9:f6:17:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY94M7UW3n4T7WGRuLpyRbgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjQwNTE0MTc0MzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDVmZTk5NWY4MTg0YzMwYjhjN2U5NTUxMTg2M2EyZDE2MmY2NWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmZEF2i6hZ+V7pek4s2sPUQlwa/r
bAVu/a/njBxnZ4eZweKPWfXxivAFHoQ6zWePHtvRUAsTNJC3QqJJv1rl4tqMWnSK
UBCdCypwEIP1e1pHIOWf2ecPJMTJL6ei2gltVqYCEZc8iipPa0FZoEcCm9+o/StT
GEKGpgRRFuhbem5iiHPU5DqWjoj6xpgfpzkzgPjd2YcxwS0agMLS0Uti6lAxvGAV
haDJy1aXG8NZnRnxEosTuSGJXS/vGMh0nc2yXW/1F1XE64+qhvpFXPkeglfjYqZA
wgKtrw4/T7tiVDCiBDp+f/dbkw9qQsy1zJmZqiDT/fPLBL63QnKRboNRPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1f6ZX4GEwwuMfpVRGGOi0WL2XGMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvUFZfcGxmZ1lUREM0eC1sVkVZWTZMUll2WmNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZt+MA0G
CSqGSIb3DQEBCwUAA4IBAQBQGufIKDpWdLKB18Xvb92VYzFK9agG83g/xdd793xu
lQ4se6ejNeImpibbRry/g3spl8mL15j1vePXndKUaH1xcL8yUhw1hFVThboSOEvU
llQo8YFtzH10KjL0NAemgz/uFPjh9GPCUcEPgQEZd1eMvGT0ZwCbtPsNCDohNkqF
Ww5SBbgKlJpLa7FTnLLP9RAyTjJw3jtJsrtA5mI3ZjL5Xjurg82OfKoxjLSI/5Nq
RIfu7bHgVaFXW4fJMpVeWsYJVImuMf3M8dxvPKaOiDiUzKmqHelFyxhaAiLkFPit
M+oI/XjzRIw+fwsfOB/GzR641ghCo12p38C0km3p9hcN
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:34:15 2024 by rpki-client on console-ams.rpki-client.org