Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BiT2ML9jC1-ri_IEZHewLJIvxtY.roa
File: BiT2ML9jC1-ri_IEZHewLJIvxtY.roa (raw, json)
Hash identifier: fbl6vz14PorkcVnCgFq1Xc2ZKTUpONeQB5VhVqOuFKU=
Subject key identifier: 06:24:F6:30:BF:63:0B:5F:AB:8B:F2:04:64:77:B0:2C:92:2F:C6:D6
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0192B49E29A951307F4BBEBBE87D446ADC3C
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BiT2ML9jC1-ri_IEZHewLJIvxtY.roa
Signing time: Tue 22 Oct 2024 14:25:17 +0000
ROA not before: Tue 22 Oct 2024 14:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214192
IP address blocks: 45.11.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:9e:29:a9:51:30:7f:4b:be:bb:e8:7d:44:6a:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 22 14:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0624f630bf630b5fab8bf2046477b02c922fc6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:4a:c2:91:01:74:f1:58:ff:ed:98:71:78:
4e:86:72:b9:5b:4d:af:e4:4d:6d:32:36:1e:8b:45:
26:c2:c9:25:4b:6a:56:ed:93:85:b5:bb:2b:74:1c:
c7:54:38:7f:03:5e:99:31:f3:25:60:b7:22:2f:67:
2d:82:91:fb:7e:70:74:02:f9:33:13:8c:c5:db:14:
1f:1d:a3:ca:b3:26:4f:11:b6:e0:79:b2:e4:c0:31:
48:83:cd:5c:94:2e:36:99:ab:f3:27:1a:4c:d6:16:
1f:51:6f:15:de:ae:ee:f4:40:dd:19:81:09:71:5e:
7b:b3:3a:6a:18:93:79:6f:85:be:ef:b1:6e:a0:a3:
ea:01:1f:33:55:d3:b4:4a:d9:96:2c:75:2d:20:bb:
41:7c:89:c7:ce:9c:04:94:b7:8b:2c:d3:bd:23:4f:
58:f3:86:7c:42:5e:f4:ab:14:db:b9:d3:75:28:55:
5c:79:9b:f7:6d:f4:3f:86:44:cd:c6:a0:36:8e:00:
c5:63:90:d6:e4:8a:1f:ff:92:bc:f2:7d:dc:db:08:
aa:e9:e9:01:f2:b7:d7:e9:f9:a6:38:ef:75:c6:e7:
2a:41:7b:63:21:aa:78:89:27:5f:87:07:97:c0:5e:
13:e0:3e:f0:b9:6c:c4:21:8d:30:da:f7:9e:e3:55:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:F6:30:BF:63:0B:5F:AB:8B:F2:04:64:77:B0:2C:92:2F:C6:D6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BiT2ML9jC1-ri_IEZHewLJIvxtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6d:15:7d:db:59:ab:d5:a1:a4:ec:c0:c1:18:84:76:b7:4b:
9c:26:34:dd:e0:31:73:9c:19:8d:70:12:27:91:56:8f:a8:8a:
40:b2:63:8b:13:a0:8c:19:21:62:06:6f:22:b6:6f:9f:49:3d:
86:07:19:d3:46:83:37:f6:e7:a8:79:7d:4e:f2:4c:3b:3b:c4:
6e:c1:d0:cc:d9:e2:e6:d8:f3:83:59:e0:83:0b:12:28:67:b1:
9e:c8:44:c3:e8:33:d9:43:c9:96:d1:47:b5:a9:89:bd:37:f4:
ae:5f:4c:2a:1e:61:8b:85:e5:d0:06:99:18:21:79:c3:78:de:
0e:78:e7:a5:33:9d:bd:86:c3:78:8d:8a:4a:b6:59:bb:54:3a:
d4:8e:3e:e6:50:8e:b9:7c:c5:4c:72:3c:1d:1f:77:fa:01:c7:
c5:18:16:ea:6c:9a:db:08:67:6f:9d:a3:95:af:20:50:fb:a8:
ef:4f:59:80:10:4d:1d:a4:be:12:0c:b0:8b:fa:27:fd:2d:80:
6b:8b:60:bb:5e:85:08:ba:8f:33:8b:3a:09:28:3d:a6:14:31:
3f:cb:20:a8:f7:6d:f5:e5:7f:1f:e7:ee:31:1c:6d:af:43:f9:
e5:92:54:47:fc:1f:22:cd:ee:45:f8:15:c1:ee:0c:80:bc:08:
21:0f:ca:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK0nimpUTB/S7676H1Eatw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQxMDIyMTQyNTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjI0ZjYzMGJmNjMwYjVmYWI4YmYyMDQ2NDc3YjAyYzkyMmZjNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8xKwpEBdPFY/+2YcXhOhnK5W02v
5E1tMjYei0UmwsklS2pW7ZOFtbsrdBzHVDh/A16ZMfMlYLciL2ctgpH7fnB0Avkz
E4zF2xQfHaPKsyZPEbbgebLkwDFIg81clC42mavzJxpM1hYfUW8V3q7u9EDdGYEJ
cV57szpqGJN5b4W+77FuoKPqAR8zVdO0StmWLHUtILtBfInHzpwElLeLLNO9I09Y
84Z8Ql70qxTbudN1KFVceZv3bfQ/hkTNxqA2jgDFY5DW5Iof/5K88n3c2wiq6ekB
8rfX6fmmOO91xucqQXtjIap4iSdfhweXwF4T4D7wuWzEIY0w2vee41XNZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYk9jC/Ywtfq4vyBGR3sCySL8bWMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvQmlUMk1MOWpDMS1yaV9JRVpIZXdMSkl2eHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu5MA0G
CSqGSIb3DQEBCwUAA4IBAQCTbRV921mr1aGk7MDBGIR2t0ucJjTd4DFznBmNcBIn
kVaPqIpAsmOLE6CMGSFiBm8itm+fST2GBxnTRoM39ueoeX1O8kw7O8RuwdDM2eLm
2PODWeCDCxIoZ7GeyETD6DPZQ8mW0Ue1qYm9N/SuX0wqHmGLheXQBpkYIXnDeN4O
eOelM529hsN4jYpKtlm7VDrUjj7mUI65fMVMcjwdH3f6AcfFGBbqbJrbCGdvnaOV
ryBQ+6jvT1mAEE0dpL4SDLCL+if9LYBri2C7XoUIuo8zizoJKD2mFDE/yyCo9231
5X8f5+4xHG2vQ/nlklRH/B8ize5F+BXB7gyAvAghD8oI
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:03:58 2024 by rpki-client on console-ams.rpki-client.org