Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sWS58xWP-enxzt6gzoY8xRrBA68.roa
File: sWS58xWP-enxzt6gzoY8xRrBA68.roa (raw, json)
Hash identifier: RGp9qpFsEP0gOvyzC7eskK0R7nDB/tUPiAdLLKorOXg=
Subject key identifier: B1:64:B9:F3:15:8F:F9:E9:F1:CE:DE:A0:CE:86:3C:C5:1A:C1:03:AF
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018FD7461E423AB50AEED0B83ABECE6FBC0C
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sWS58xWP-enxzt6gzoY8xRrBA68.roa
Signing time: Sun 02 Jun 2024 04:47:27 +0000
ROA not before: Sun 02 Jun 2024 04:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39782
IP address blocks: 45.82.220.0/24 maxlen: 24
45.82.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d7:46:1e:42:3a:b5:0a:ee:d0:b8:3a:be:ce:6f:bc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jun 2 04:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b164b9f3158ff9e9f1cedea0ce863cc51ac103af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:c2:29:10:82:89:73:a8:72:37:cf:a6:3e:
a9:fd:c2:c6:7f:02:0f:97:95:d6:3f:54:56:e3:e2:
d3:0d:95:21:97:70:fd:bf:5d:e8:50:ee:04:63:a7:
6f:87:27:b0:5c:1c:26:fe:dd:8c:22:09:fe:43:ed:
ef:5b:68:02:f5:81:e7:31:57:39:6b:6b:6c:96:72:
46:32:10:07:d8:4b:fc:75:f8:5b:0d:b8:92:4a:f3:
c9:09:d0:a8:fe:97:1d:a0:35:08:c4:a3:01:e2:28:
94:06:0b:ac:73:a0:42:66:52:f9:50:d1:9c:e8:bc:
e9:79:07:1b:6f:9b:dd:3a:05:8b:71:d2:c2:ec:05:
07:ba:82:7d:fa:ec:e6:a1:4a:8d:f9:58:a8:8b:7c:
ef:49:b4:38:95:9b:e3:07:68:21:21:4a:80:ef:a4:
90:ff:ea:13:49:f8:0f:00:58:67:86:b0:ce:5a:d2:
8f:67:b5:b7:23:c8:73:28:af:9b:7a:16:c2:8e:69:
3a:ea:13:82:b8:de:42:d2:38:86:0e:02:93:b2:ff:
1a:e0:a0:88:74:ed:3d:b8:d6:21:87:9b:1d:fd:ee:
3b:a8:27:d0:63:ff:ed:00:51:60:96:77:0f:78:cc:
b7:34:04:15:f8:e3:06:cc:6e:fb:2d:ac:48:5f:fa:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:B9:F3:15:8F:F9:E9:F1:CE:DE:A0:CE:86:3C:C5:1A:C1:03:AF
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/sWS58xWP-enxzt6gzoY8xRrBA68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:05:4e:73:70:6d:bb:2f:e8:75:62:6a:d2:32:07:de:d3:d2:
7f:37:5a:c3:62:cb:2f:38:17:2b:e0:7e:c2:a1:2f:dd:eb:74:
4c:e7:a8:25:3b:50:b4:c9:80:6d:90:15:8a:a2:3b:33:ab:46:
0c:d3:91:93:7c:c5:1d:08:c7:91:9a:bb:8b:52:b2:74:f2:b3:
f4:3b:96:e4:64:c5:e9:fd:73:5b:ce:74:ff:ac:95:09:4f:4c:
24:89:e2:20:13:62:b7:11:2d:f1:09:dc:fd:c3:5b:73:0e:dc:
bf:db:b8:b1:92:0e:18:b7:55:1d:6e:d8:48:77:95:ab:9e:e6:
02:f0:98:5c:9d:e2:79:b1:86:08:f2:06:be:05:8e:ae:29:5a:
c0:bc:a6:9d:1d:a3:84:04:9e:68:79:2f:d9:80:c2:6d:d5:17:
45:d4:87:b0:66:3a:73:3e:d7:45:f3:02:c1:d8:90:ef:c0:c8:
7d:b8:02:f2:68:15:07:17:89:3d:28:c1:f9:d5:5d:43:a8:fb:
a6:ff:3d:ef:03:5a:a4:38:bf:0d:d9:54:98:8f:0d:72:6d:7c:
9f:4c:6c:c8:79:d3:74:b8:66:13:c2:ed:f4:c4:e9:b1:77:7d:
88:ff:4b:77:e6:38:d1:a2:bf:62:50:f5:94:6d:ec:a0:9d:c5:
ce:aa:12:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/XRh5COrUK7tC4Or7Ob7wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjQwNjAyMDQ0NzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTY0YjlmMzE1OGZmOWU5ZjFjZWRlYTBjZTg2M2NjNTFhYzEwM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2TCKRCCiXOocjfPpj6p/cLGfwIP
l5XWP1RW4+LTDZUhl3D9v13oUO4EY6dvhyewXBwm/t2MIgn+Q+3vW2gC9YHnMVc5
a2tslnJGMhAH2Ev8dfhbDbiSSvPJCdCo/pcdoDUIxKMB4iiUBgusc6BCZlL5UNGc
6LzpeQcbb5vdOgWLcdLC7AUHuoJ9+uzmoUqN+Vioi3zvSbQ4lZvjB2ghIUqA76SQ
/+oTSfgPAFhnhrDOWtKPZ7W3I8hzKK+behbCjmk66hOCuN5C0jiGDgKTsv8a4KCI
dO09uNYhh5sd/e47qCfQY//tAFFglncPeMy3NAQV+OMGzG77LaxIX/pS5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFkufMVj/np8c7eoM6GPMUawQOvMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvc1dTNTh4V1AtZW54enQ2Z3pvWTh4UnJCQTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVLcMA0G
CSqGSIb3DQEBCwUAA4IBAQAqBU5zcG27L+h1YmrSMgfe09J/N1rDYssvOBcr4H7C
oS/d63RM56glO1C0yYBtkBWKojszq0YM05GTfMUdCMeRmruLUrJ08rP0O5bkZMXp
/XNbznT/rJUJT0wkieIgE2K3ES3xCdz9w1tzDty/27ixkg4Yt1UdbthId5WrnuYC
8JhcneJ5sYYI8ga+BY6uKVrAvKadHaOEBJ5oeS/ZgMJt1RdF1IewZjpzPtdF8wLB
2JDvwMh9uALyaBUHF4k9KMH51V1DqPum/z3vA1qkOL8N2VSYjw1ybXyfTGzIedN0
uGYTwu30xOmxd32I/0t35jjRor9iUPWUbeygncXOqhJg
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:50:06 2024 by rpki-client on console-ams.rpki-client.org