Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NAAsMCJQDypx36hkmtkFtnBPsx4.roa
File: NAAsMCJQDypx36hkmtkFtnBPsx4.roa (raw, json)
Hash identifier: d/hlJSdz3Lhjl4AVmDEHCL9QeV5k6eqQTO7cmYb3OZ4=
Subject key identifier: 34:00:2C:30:22:50:0F:2A:71:DF:A8:64:9A:D9:05:B6:70:4F:B3:1E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01922EFC22ACB64A2DCCD4B19CE11EF7820D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NAAsMCJQDypx36hkmtkFtnBPsx4.roa
Signing time: Thu 26 Sep 2024 15:38:48 +0000
ROA not before: Thu 26 Sep 2024 15:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 45.151.140.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2e:fc:22:ac:b6:4a:2d:cc:d4:b1:9c:e1:1e:f7:82:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 26 15:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34002c3022500f2a71dfa8649ad905b6704fb31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:bc:33:4c:69:77:01:b8:bc:5c:21:03:97:
40:72:31:29:44:6f:14:c9:36:f9:80:f1:75:af:12:
f4:b3:39:08:05:42:99:62:ad:01:00:2d:85:71:e6:
99:18:26:dd:ed:c1:85:24:50:3e:a0:47:a8:44:f0:
17:8c:e0:a6:f3:fc:31:82:58:4f:1f:67:53:ae:cf:
b0:57:04:f1:dd:11:bf:36:6f:6c:83:a6:8e:5e:89:
e9:21:6a:94:fd:a4:b0:25:26:13:3b:33:6c:45:27:
08:05:19:36:4c:46:e7:9f:d6:47:30:3d:6c:72:ff:
ba:88:36:19:78:35:8a:94:7e:d7:0d:3c:ea:e8:af:
47:13:a9:f2:ac:15:dd:57:54:e2:47:db:e3:35:aa:
97:96:68:39:bd:04:00:92:cf:9e:f3:d1:71:9f:0d:
fa:b9:cf:07:ae:83:bb:e9:ad:5a:fa:66:b0:af:17:
fc:8b:23:5c:6e:6e:1c:b2:16:06:4b:b7:0f:ec:c6:
47:d2:64:b6:a8:ce:4b:f3:6d:2c:20:09:23:9e:de:
30:8a:9f:bf:81:9a:84:fe:27:00:4f:b4:52:8b:27:
7e:63:ee:27:41:82:62:2f:58:6d:3e:cc:fd:cc:c8:
8d:67:04:e0:74:bc:f9:70:fa:46:2b:8c:45:77:15:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:2C:30:22:50:0F:2A:71:DF:A8:64:9A:D9:05:B6:70:4F:B3:1E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NAAsMCJQDypx36hkmtkFtnBPsx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:12:31:f8:6d:bd:ec:b4:7e:6b:a9:91:08:d7:27:a7:af:04:
89:93:12:95:7b:86:1e:cd:e7:59:ae:d1:4c:9e:d4:4d:74:84:
24:99:8d:16:66:0f:4a:1d:76:fa:71:a9:1f:17:a0:7e:1a:99:
6a:f3:d2:9c:3a:49:61:80:1d:fa:19:a9:68:d4:d4:11:8a:5c:
a0:dd:17:7a:e4:ff:48:25:65:7c:91:4f:32:c8:58:7b:aa:95:
3e:51:a2:74:8d:97:a1:45:ff:50:52:26:3d:2d:07:2f:3e:85:
db:34:37:0f:45:6a:17:2d:bf:a8:0c:dc:56:1d:93:05:dd:b3:
2a:70:c8:53:7e:c8:fe:54:2f:65:16:36:45:9b:6f:ae:a0:5b:
03:11:60:f5:e6:df:d1:47:9f:d2:3e:39:35:c7:b2:ed:9f:88:
41:bd:b9:21:d7:31:1f:c1:04:a9:a1:34:84:6e:bb:13:5c:88:
08:ba:86:4f:4e:73:7e:38:da:4f:21:e6:a1:7e:32:ec:f3:2b:
02:f6:a3:84:10:dd:47:6d:d0:c2:93:b0:48:2b:5a:6e:d4:a6:
66:77:52:84:9c:27:b9:10:65:d3:41:d5:2d:b2:4f:34:43:7f:
b1:2a:e5:22:02:c9:2b:cc:f7:3c:d0:34:c8:e8:88:99:55:06:
e3:48:1b:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIu/CKstkotzNSxnOEe94INMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwOTI2MTUzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDAwMmMzMDIyNTAwZjJhNzFkZmE4NjQ5YWQ5MDViNjcwNGZiMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pi8M0xpdwG4vFwhA5dAcjEpRG8U
yTb5gPF1rxL0szkIBUKZYq0BAC2FceaZGCbd7cGFJFA+oEeoRPAXjOCm8/wxglhP
H2dTrs+wVwTx3RG/Nm9sg6aOXonpIWqU/aSwJSYTOzNsRScIBRk2TEbnn9ZHMD1s
cv+6iDYZeDWKlH7XDTzq6K9HE6nyrBXdV1TiR9vjNaqXlmg5vQQAks+e89Fxnw36
uc8HroO76a1a+mawrxf8iyNcbm4cshYGS7cP7MZH0mS2qM5L820sIAkjnt4wip+/
gZqE/icAT7RSiyd+Y+4nQYJiL1htPsz9zMiNZwTgdLz5cPpGK4xFdxUSfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQALDAiUA8qcd+oZJrZBbZwT7MeMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvTkFBc01DSlFEeXB4MzZoa210a0Z0bkJQc3g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZeMMA0G
CSqGSIb3DQEBCwUAA4IBAQCMEjH4bb3stH5rqZEI1yenrwSJkxKVe4YezedZrtFM
ntRNdIQkmY0WZg9KHXb6cakfF6B+Gplq89KcOklhgB36Galo1NQRilyg3Rd65P9I
JWV8kU8yyFh7qpU+UaJ0jZehRf9QUiY9LQcvPoXbNDcPRWoXLb+oDNxWHZMF3bMq
cMhTfsj+VC9lFjZFm2+uoFsDEWD15t/RR5/SPjk1x7Ltn4hBvbkh1zEfwQSpoTSE
brsTXIgIuoZPTnN+ONpPIeahfjLs8ysC9qOEEN1HbdDCk7BIK1pu1KZmd1KEnCe5
EGXTQdUtsk80Q3+xKuUiAskrzPc80DTI6IiZVQbjSBs7
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:18 2024 by rpki-client on console-fra.rpki-client.org