Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/kvER4cAX9lwrzdIDZNbDRL12AAU.roa
File: kvER4cAX9lwrzdIDZNbDRL12AAU.roa (raw, json)
Hash identifier: VD9UJwcaQpCu1bLN79dPojCf3XKLHYvKRsgkHg3VjqU=
Subject key identifier: 92:F1:11:E1:C0:17:F6:5C:2B:CD:D2:03:64:D6:C3:44:BD:76:00:05
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 018EE1F61EEDF627985924167E73A80C74C1
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/kvER4cAX9lwrzdIDZNbDRL12AAU.roa
Signing time: Mon 15 Apr 2024 13:33:06 +0000
ROA not before: Mon 15 Apr 2024 13:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/24 maxlen: 24
45.157.54.0/24 maxlen: 24
45.157.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:f6:1e:ed:f6:27:98:59:24:16:7e:73:a8:0c:74:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Apr 15 13:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f111e1c017f65c2bcdd20364d6c344bd760005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fe:4f:a5:d3:4a:d2:84:7e:3d:1b:94:84:8f:
3c:c0:bc:22:ae:49:2e:20:07:4c:d3:d7:9b:67:b3:
1b:2a:31:eb:e4:8b:9c:b9:75:d7:1b:14:df:ae:64:
8b:24:36:76:14:ee:ea:b3:4d:cb:18:f5:90:38:e2:
d4:a5:9f:cc:3f:c1:60:ae:55:c4:d0:66:49:61:08:
e7:1e:b9:e8:d0:80:9d:26:7b:63:2e:ad:65:9e:ea:
71:45:4d:95:aa:66:60:10:c0:dc:f1:50:1a:63:9b:
b9:82:41:b5:c3:07:06:9a:04:b4:4d:b9:20:7c:59:
28:91:d3:05:f7:71:49:f3:ee:db:bb:83:33:50:e6:
ab:fe:da:b9:7f:00:eb:a7:59:d1:71:61:b0:ab:ce:
07:cc:5d:8f:f9:c7:53:cc:e2:09:cf:dd:bd:47:e5:
ba:67:71:cd:b3:f1:a0:19:12:55:2c:27:7b:3c:17:
6b:42:80:60:35:b3:78:af:de:49:34:89:92:15:bd:
17:2d:28:91:16:b6:39:99:04:22:8a:78:d9:93:f6:
6d:c6:2c:15:ff:f3:93:92:2a:8b:85:9b:97:23:ba:
6a:a2:57:98:ed:e3:27:47:c1:d0:0d:ad:98:ea:a5:
59:27:5d:bf:c0:8b:6e:a9:47:d7:c4:da:06:76:3d:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:11:E1:C0:17:F6:5C:2B:CD:D2:03:64:D6:C3:44:BD:76:00:05
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/kvER4cAX9lwrzdIDZNbDRL12AAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/24
45.157.54.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:30:1d:88:c1:cf:33:e1:bd:50:a7:5e:89:37:ab:31:e2:86:
91:1e:b1:4e:3b:03:ad:55:02:73:78:e4:c7:aa:4c:8d:c0:05:
9c:1b:bd:02:07:4d:32:b7:06:3a:83:a8:ec:fe:bb:8e:dd:bf:
5d:22:36:e8:a4:30:df:23:1a:6c:14:0c:6f:42:66:ba:a1:9b:
25:6d:dd:bb:78:49:ad:20:1d:b3:e4:78:00:23:c7:4a:88:ea:
f6:9e:d8:fc:21:10:b0:6c:43:f2:9c:58:59:dc:94:22:a9:95:
61:3c:95:04:ad:bf:e3:7b:fa:35:49:f8:21:a8:d6:95:5d:bb:
c4:f3:f9:0e:3b:10:fe:3f:45:d2:01:e1:6a:59:b8:66:52:df:
64:76:1b:44:7a:c1:70:8d:e1:38:06:33:c4:5e:29:8a:34:3e:
7a:2c:e5:e4:df:db:3c:fb:2e:9d:09:d6:d6:57:55:db:52:9b:
eb:04:c1:88:a3:d6:ff:a1:08:26:94:36:c9:bb:92:3f:15:32:
e3:95:3b:92:51:66:f2:99:ec:b0:a1:ea:98:bd:42:0a:8c:60:
eb:75:55:c1:33:63:6a:cd:c9:81:13:65:0b:ff:6d:67:5c:55:
82:c4:2e:f8:17:39:fc:dd:40:8f:c7:b3:86:09:2d:ab:13:c4:
9f:4d:d7:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7h9h7t9ieYWSQWfnOoDHTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OThhZTVkNWYxMjgyNWE4NGU2YzQwMWMwMTNjYTVlNWRj
ZDllYzkwHhcNMjQwNDE1MTMzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmYxMTFlMWMwMTdmNjVjMmJjZGQyMDM2NGQ2YzM0NGJkNzYwMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP5PpdNK0oR+PRuUhI88wLwirkku
IAdM09ebZ7MbKjHr5IucuXXXGxTfrmSLJDZ2FO7qs03LGPWQOOLUpZ/MP8FgrlXE
0GZJYQjnHrno0ICdJntjLq1lnupxRU2VqmZgEMDc8VAaY5u5gkG1wwcGmgS0Tbkg
fFkokdMF93FJ8+7bu4MzUOar/tq5fwDrp1nRcWGwq84HzF2P+cdTzOIJz929R+W6
Z3HNs/GgGRJVLCd7PBdrQoBgNbN4r95JNImSFb0XLSiRFrY5mQQiinjZk/ZtxiwV
//OTkiqLhZuXI7pqoleY7eMnR8HQDa2Y6qVZJ12/wItuqUfXxNoGdj22pwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJLxEeHAF/ZcK83SA2TWw0S9dgAFMB8GA1UdIwQY
MBaAFFWYrl1fEoJahObEAcATyl5dzZ7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjct
NWMzZGI5OGJmODY0LzEva3ZFUjRjQVg5bHdyemRJRFpOYkRSTDEyQUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xZjYwNzMtODdiMi00YmIzLWFjYjctNWMzZGI5OGJmODY0
LzEvVlppdVhWOFNnbHFFNXNRQndCUEtYbDNObnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ00AwQB
LZ02MA0GCSqGSIb3DQEBCwUAA4IBAQCrMB2Iwc8z4b1Qp16JN6sx4oaRHrFOOwOt
VQJzeOTHqkyNwAWcG70CB00ytwY6g6js/ruO3b9dIjbopDDfIxpsFAxvQma6oZsl
bd27eEmtIB2z5HgAI8dKiOr2ntj8IRCwbEPynFhZ3JQiqZVhPJUErb/je/o1Sfgh
qNaVXbvE8/kOOxD+P0XSAeFqWbhmUt9kdhtEesFwjeE4BjPEXimKND56LOXk39s8
+y6dCdbWV1XbUpvrBMGIo9b/oQgmlDbJu5I/FTLjlTuSUWbymeywoeqYvUIKjGDr
dVXBM2NqzcmBE2UL/21nXFWCxC74Fzn83UCPx7OGCS2rE8SfTdfq
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:58:28 2024 by rpki-client on console-ams.rpki-client.org