Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pXJOlhv9zZYCd5LrmfyJ6C12daA.roa
File: pXJOlhv9zZYCd5LrmfyJ6C12daA.roa (raw, json)
Hash identifier: BysxWph7l3Y6HsVVVfdukxlo1YYagsJx3rFBwhuWLFM=
Subject key identifier: A5:72:4E:96:1B:FD:CD:96:02:77:92:EB:99:FC:89:E8:2D:76:75:A0
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018CC2DB5C940006C580EA32A7E1DC910405
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pXJOlhv9zZYCd5LrmfyJ6C12daA.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49999
IP address blocks: 45.140.192.0/24 maxlen: 24
45.140.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5c:94:00:06:c5:80:ea:32:a7:e1:dc:91:04:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5724e961bfdcd96027792eb99fc89e82d7675a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:c8:9a:57:69:34:ef:17:fc:f4:cf:31:be:
ea:de:67:0b:b8:90:41:93:db:36:13:6c:75:f1:33:
2a:be:20:20:a8:fb:05:1f:a1:ac:e0:f4:e6:72:1b:
b0:98:ee:36:6f:86:f8:e9:4c:65:db:d8:63:36:9e:
43:07:f2:62:8b:65:76:72:8d:15:4f:c2:0d:b4:32:
30:e4:49:90:a4:72:f5:ef:48:35:fd:e5:97:6b:41:
fa:fe:e8:b9:7d:39:e6:51:50:46:2f:1b:50:8c:1c:
cf:25:06:9c:77:7f:c2:58:d6:52:44:8f:f7:4a:d5:
4e:e2:47:38:df:9f:b7:8b:ab:de:71:eb:bd:89:d2:
28:c4:d3:a2:f5:9c:c0:1c:22:18:eb:53:cf:ab:e4:
41:58:c7:0e:dc:70:17:f7:9e:66:8c:44:e1:b5:3e:
f9:6a:59:53:10:3d:e6:33:a5:74:6d:fe:44:1e:24:
d5:e7:d7:b2:de:1a:af:7a:f8:85:e3:2a:f9:4b:e7:
9c:4a:7f:46:4d:23:1d:3d:65:7b:a1:5e:d9:c7:7e:
99:69:44:35:fd:36:c2:34:a4:f2:4d:40:ef:48:a0:
03:be:d0:e1:11:fb:fc:69:91:05:88:c5:c8:d7:7c:
5d:56:0d:1e:13:d0:9e:79:f6:31:7a:17:95:88:d9:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:4E:96:1B:FD:CD:96:02:77:92:EB:99:FC:89:E8:2D:76:75:A0
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/pXJOlhv9zZYCd5LrmfyJ6C12daA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.192.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:fb:bd:27:7d:7c:03:5d:11:c4:0f:b3:ee:53:e4:c9:af:7b:
ed:ee:62:d8:24:77:c4:07:c2:51:c4:62:eb:92:fa:9a:e3:04:
ee:7b:a5:74:e8:cf:bb:44:96:21:6f:3a:af:6b:63:28:50:2d:
b5:12:94:31:ab:de:fb:d6:df:92:4b:f8:a4:33:46:de:79:a8:
7d:a8:16:26:31:2c:ed:6d:3e:62:1b:2e:93:21:6a:07:d5:7e:
ce:0f:55:ff:80:c5:6e:b3:27:83:64:2c:6f:db:cb:e9:49:3e:
4d:34:d6:7b:a6:d8:84:ff:68:d2:79:58:2e:00:ee:28:4e:4f:
b9:4f:5c:da:f5:87:ce:f1:34:4b:b8:1b:bf:1e:c7:22:8b:04:
13:eb:e5:66:9f:35:7e:9a:e1:09:08:08:01:2f:32:b2:bb:d6:
56:20:7a:b3:d9:e4:67:ee:67:08:38:6c:68:e2:07:bb:2d:d1:
f5:66:64:b6:36:59:62:1c:6e:6e:70:4a:5d:88:7e:d6:dd:cd:
d7:03:9e:1b:3d:b6:a5:09:8d:74:80:65:15:98:0e:d2:d8:3f:
e6:64:91:09:9d:c3:85:73:c1:9c:8e:c2:e9:43:f0:b8:81:9b:
7f:a9:55:19:8b:16:d4:3a:49:c1:ad:df:d4:6c:b4:8f:6f:f2:
d3:9a:7a:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC21yUAAbFgOoyp+HckQQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz
NmUwNTUwHhcNMjQwMTAxMDIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTcyNGU5NjFiZmRjZDk2MDI3NzkyZWI5OWZjODllODJkNzY3NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyPImldpNO8X/PTPMb7q3mcLuJBB
k9s2E2x18TMqviAgqPsFH6Gs4PTmchuwmO42b4b46Uxl29hjNp5DB/Jii2V2co0V
T8INtDIw5EmQpHL170g1/eWXa0H6/ui5fTnmUVBGLxtQjBzPJQacd3/CWNZSRI/3
StVO4kc435+3i6veceu9idIoxNOi9ZzAHCIY61PPq+RBWMcO3HAX955mjEThtT75
allTED3mM6V0bf5EHiTV59ey3hqveviF4yr5S+ecSn9GTSMdPWV7oV7Zx36ZaUQ1
/TbCNKTyTUDvSKADvtDhEfv8aZEFiMXI13xdVg0eE9CeefYxeheViNmR6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVyTpYb/c2WAneS65n8iegtdnWgMB8GA1UdIwQY
MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt
ZDM3ZGY2MzRhOTI5LzEvcFhKT2xodjl6WllDZDVMcm1meUo2QzEyZGFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5
LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYzAMA0G
CSqGSIb3DQEBCwUAA4IBAQCq+70nfXwDXRHED7PuU+TJr3vt7mLYJHfEB8JRxGLr
kvqa4wTue6V06M+7RJYhbzqva2MoUC21EpQxq9771t+SS/ikM0beeah9qBYmMSzt
bT5iGy6TIWoH1X7OD1X/gMVusyeDZCxv28vpST5NNNZ7ptiE/2jSeVguAO4oTk+5
T1za9YfO8TRLuBu/HsciiwQT6+VmnzV+muEJCAgBLzKyu9ZWIHqz2eRn7mcIOGxo
4ge7LdH1ZmS2NlliHG5ucEpdiH7W3c3XA54bPbalCY10gGUVmA7S2D/mZJEJncOF
c8GcjsLpQ/C4gZt/qVUZixbUOknBrd/UbLSPb/LTmnox
-----END CERTIFICATE-----
Generated at Thu May 2 21:24:26 2024 by rpki-client on console-ams.rpki-client.org