Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kJ-5Qmhw6HgdrYGcHgK0emi6ZyI.roa
File: kJ-5Qmhw6HgdrYGcHgK0emi6ZyI.roa (raw, json)
Hash identifier: G0vMKphDR8wBV8yycwylUZ8aS1uMX5pV5EQa4aBUo9s=
Subject key identifier: 90:9F:B9:42:68:70:E8:78:1D:AD:81:9C:1E:02:B4:7A:68:BA:67:22
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB8924461E741C049FAE6C0A7A852
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kJ-5Qmhw6HgdrYGcHgK0emi6ZyI.roa
Signing time: Tue 02 Jan 2024 08:29:26 +0000
ROA not before: Tue 02 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 45.156.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b8:92:44:61:e7:41:c0:49:fa:e6:c0:a7:a8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909fb9426870e8781dad819c1e02b47a68ba6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:8b:57:34:18:73:cb:77:96:2b:ad:01:06:
c6:91:cb:56:37:33:9b:f9:8a:b4:65:3f:d6:84:77:
9b:5e:6a:42:16:76:82:eb:6b:f8:5e:16:d3:1c:91:
9a:99:85:88:0e:00:c5:08:b5:66:69:00:0a:77:50:
15:e4:05:38:2f:5a:8e:ff:8e:59:3b:48:16:37:a4:
de:07:9a:fd:d4:6a:70:ca:7f:b6:f6:94:df:36:c1:
b2:c0:b6:f1:29:3f:b0:ea:02:79:8f:20:22:66:4d:
76:78:8a:52:71:cd:3e:08:24:53:c8:0b:d8:a3:cb:
8b:2c:09:05:31:8b:d1:44:1f:80:08:3e:e6:1b:cc:
8c:29:7a:18:68:83:2d:51:fb:18:a1:f7:84:32:e3:
a4:30:d9:7a:40:17:f1:d3:99:87:fd:12:ee:3b:3a:
6c:9b:f2:4e:4f:27:b4:65:8f:e9:32:69:87:d7:39:
9f:ea:00:6b:67:ad:09:99:86:bd:8e:ee:65:78:f7:
b1:0d:e0:f7:dd:c4:18:25:d3:d2:c3:a3:20:4a:a5:
e1:07:c3:35:c8:9a:52:62:69:33:1b:ac:b5:48:72:
a7:08:aa:df:87:39:b9:ee:8a:d5:f6:c6:5e:4f:14:
12:7d:2b:4f:75:14:db:63:47:6d:0b:d8:ed:e3:2f:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9F:B9:42:68:70:E8:78:1D:AD:81:9C:1E:02:B4:7A:68:BA:67:22
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kJ-5Qmhw6HgdrYGcHgK0emi6ZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:cf:6e:25:15:87:5c:27:08:58:75:ec:79:bd:e6:da:11:1a:
a6:72:53:5e:4e:bb:6f:81:3b:c7:3d:26:f4:a5:97:d5:54:1c:
1a:53:87:d5:2f:f0:be:a2:01:37:a2:86:37:8a:d5:60:53:2a:
8f:b8:9b:ca:c2:cb:85:2d:c2:95:39:bb:12:18:25:22:a7:32:
cd:15:03:21:b1:32:a5:6a:62:1d:85:e6:c3:b6:91:70:64:34:
16:6d:bd:45:01:71:9a:41:c0:c1:f2:b4:67:ab:82:10:3c:40:
e4:6b:62:8e:82:7a:66:5a:ec:d4:a6:af:fd:a8:b1:cb:1e:1f:
09:cb:c5:bb:e5:89:16:16:23:4d:71:ec:94:9e:5a:a2:69:e8:
57:72:c8:3b:4d:fc:72:6b:33:42:e8:ee:08:fa:69:27:b0:03:
1a:ac:a8:00:09:82:bf:c1:bb:90:e1:2d:94:8c:da:a6:8d:61:
01:e3:18:c9:a3:13:54:e9:97:42:9d:dd:93:c0:a4:fa:fa:2f:
29:35:68:df:22:7f:67:cf:0a:aa:b7:a1:0f:d2:47:2d:3b:5a:
29:e7:94:c0:4a:e0:ad:4a:15:bd:d9:7b:1f:d5:85:56:cd:02:
16:14:77:25:18:ba:3d:27:3f:0e:71:d7:c4:4d:cb:62:3d:19:
9a:76:32:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJSriSRGHnQcBJ+ubAp6hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjQwMTAyMDgyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDlmYjk0MjY4NzBlODc4MWRhZDgxOWMxZTAyYjQ3YTY4YmE2NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH6LVzQYc8t3liutAQbGkctWNzOb
+Yq0ZT/WhHebXmpCFnaC62v4XhbTHJGamYWIDgDFCLVmaQAKd1AV5AU4L1qO/45Z
O0gWN6TeB5r91Gpwyn+29pTfNsGywLbxKT+w6gJ5jyAiZk12eIpScc0+CCRTyAvY
o8uLLAkFMYvRRB+ACD7mG8yMKXoYaIMtUfsYofeEMuOkMNl6QBfx05mH/RLuOzps
m/JOTye0ZY/pMmmH1zmf6gBrZ60JmYa9ju5lePexDeD33cQYJdPSw6MgSqXhB8M1
yJpSYmkzG6y1SHKnCKrfhzm57orV9sZeTxQSfStPdRTbY0dtC9jt4y84bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJCfuUJocOh4Ha2BnB4CtHpoumciMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEva0otNVFtaHc2SGdkcllHY0hnSzBlbWk2WnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZw6MA0G
CSqGSIb3DQEBCwUAA4IBAQBdz24lFYdcJwhYdex5vebaERqmclNeTrtvgTvHPSb0
pZfVVBwaU4fVL/C+ogE3ooY3itVgUyqPuJvKwsuFLcKVObsSGCUipzLNFQMhsTKl
amIdhebDtpFwZDQWbb1FAXGaQcDB8rRnq4IQPEDka2KOgnpmWuzUpq/9qLHLHh8J
y8W75YkWFiNNceyUnlqiaehXcsg7TfxyazNC6O4I+mknsAMarKgACYK/wbuQ4S2U
jNqmjWEB4xjJoxNU6ZdCnd2TwKT6+i8pNWjfIn9nzwqqt6EP0kctO1op55TASuCt
ShW92Xsf1YVWzQIWFHclGLo9Jz8OcdfETctiPRmadjLT
-----END CERTIFICATE-----
Generated at Sun May 19 18:35:11 2024 by rpki-client on console-fra.rpki-client.org