Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/iXRxskoqkvMot1QnXFzQA0_YMHM.roa
File: iXRxskoqkvMot1QnXFzQA0_YMHM.roa (raw, json)
Hash identifier: kqY2bQwEHiNToeXUlPXDuJpr75U0u5DxPaQgdoyT4Jk=
Subject key identifier: 89:74:71:B2:4A:2A:92:F3:28:B7:54:27:5C:5C:D0:03:4F:D8:30:73
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 018FE7D1593DCC9E15486D1B9A26F3322398
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/iXRxskoqkvMot1QnXFzQA0_YMHM.roa
Signing time: Wed 05 Jun 2024 09:53:27 +0000
ROA not before: Wed 05 Jun 2024 09:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:d1:59:3d:cc:9e:15:48:6d:1b:9a:26:f3:32:23:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jun 5 09:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=897471b24a2a92f328b754275c5cd0034fd83073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:1e:47:23:16:a1:68:b5:5b:da:f6:ba:47:
48:07:e4:9b:0a:74:c9:25:15:f0:ab:ab:10:fb:af:
6d:bd:90:92:aa:f1:33:86:d1:e4:fd:bb:ef:2a:10:
79:a2:78:d3:9c:a7:0e:b2:3e:b3:86:ba:2f:dd:2d:
ea:3a:02:0a:3e:0a:39:ce:94:e6:a9:d7:aa:da:69:
e3:09:20:98:3c:5b:bd:53:73:24:ab:f5:bb:29:7c:
e5:ad:64:5d:47:ee:a5:1f:84:28:d4:f4:8e:bc:30:
de:b7:9b:b2:47:e2:5a:c8:c8:e5:2d:bb:22:18:ac:
c7:b4:af:93:85:6b:b2:1a:60:a0:e7:4a:22:08:94:
33:7b:39:89:00:1b:45:ac:35:2d:e7:bf:68:a1:22:
e0:80:51:1c:e2:3a:c0:f1:10:9f:e7:7a:c7:14:d0:
35:52:12:d9:81:6b:81:e1:70:e5:d8:d5:af:8b:89:
eb:94:28:ee:00:d3:39:36:60:33:9b:59:1b:de:56:
eb:29:fa:05:41:80:4f:4b:34:55:8f:9d:30:be:01:
d4:0a:80:95:1c:e8:46:e2:74:6d:15:8a:ea:d7:b6:
f6:fb:57:c5:a3:92:10:e7:a2:39:5a:bb:61:d3:32:
e8:18:c2:26:03:06:d5:d2:9c:37:7e:dc:f8:32:d5:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:71:B2:4A:2A:92:F3:28:B7:54:27:5C:5C:D0:03:4F:D8:30:73
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/iXRxskoqkvMot1QnXFzQA0_YMHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:b5:1b:94:c2:66:6b:3f:2f:c3:f4:90:df:a4:b6:19:92:37:
2c:2c:b3:08:1f:5c:fd:3f:9f:a6:d1:bd:b1:39:f7:b0:0c:4c:
c1:87:91:2b:ad:f7:ca:3f:e6:ee:2a:12:e2:14:89:8a:bb:31:
dc:66:fa:d4:29:06:0d:20:a2:6a:48:2e:8f:90:3a:9a:19:5e:
52:0a:83:05:26:e5:9e:26:fe:54:36:f4:9d:77:6f:0e:a1:b1:
ed:15:33:60:44:79:1f:cb:91:e3:11:15:6e:dc:52:c0:34:8f:
00:ce:9d:2e:c8:6f:8e:ef:a2:cd:82:f8:d1:c3:dd:b8:5e:3e:
6d:9a:15:5d:6b:0f:66:d3:db:19:f1:3f:17:19:01:39:df:d2:
ad:81:f7:a8:18:57:4b:21:b9:83:27:84:9e:9c:27:6b:9a:10:
94:e5:c1:94:1b:78:1c:38:41:a9:31:36:69:26:1e:83:a3:e6:
a5:ea:cd:08:7f:d6:dd:3c:35:a5:c6:06:3e:a9:d4:e6:76:25:
00:25:3e:ff:fd:c2:32:e9:2d:63:ab:83:79:9e:bd:27:49:9a:
0a:9c:af:91:55:14:11:bd:26:53:19:4b:e3:be:ec:a1:e2:b3:
be:c7:a2:ab:74:cf:48:2d:2a:52:03:18:da:c3:d8:a1:b3:42:
b7:2b:23:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/n0Vk9zJ4VSG0bmibzMiOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDU0NzJiNTUwYjM0ZmRiMDFhZGNkNTEwYTlkY2Q4MjFj
OWQ5OTEwHhcNMjQwNjA1MDk1MzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTc0NzFiMjRhMmE5MmYzMjhiNzU0Mjc1YzVjZDAwMzRmZDgzMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ0eRyMWoWi1W9r2ukdIB+SbCnTJ
JRXwq6sQ+69tvZCSqvEzhtHk/bvvKhB5onjTnKcOsj6zhrov3S3qOgIKPgo5zpTm
qdeq2mnjCSCYPFu9U3Mkq/W7KXzlrWRdR+6lH4Qo1PSOvDDet5uyR+JayMjlLbsi
GKzHtK+ThWuyGmCg50oiCJQzezmJABtFrDUt579ooSLggFEc4jrA8RCf53rHFNA1
UhLZgWuB4XDl2NWvi4nrlCjuANM5NmAzm1kb3lbrKfoFQYBPSzRVj50wvgHUCoCV
HOhG4nRtFYrq17b2+1fFo5IQ56I5Wrth0zLoGMImAwbV0pw3ftz4MtUU0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIl0cbJKKpLzKLdUJ1xc0ANP2DBzMB8GA1UdIwQY
MBaAFEpFRytVCzT9sBrc1RCp3NghydmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgt
MTJjMDU4YmZhY2MxLzEvaVhSeHNrb3Frdk1vdDFRblhGelFBMF9ZTUhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZTU1ZDAtZmFmZC00OWMyLTljMDgtMTJjMDU4YmZhY2Mx
LzEvU2tWSEsxVUxOUDJ3R3R6VkVLbmMyQ0hKMlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZY4AwQC
bV98MA0GCSqGSIb3DQEBCwUAA4IBAQC1tRuUwmZrPy/D9JDfpLYZkjcsLLMIH1z9
P5+m0b2xOfewDEzBh5ErrffKP+buKhLiFImKuzHcZvrUKQYNIKJqSC6PkDqaGV5S
CoMFJuWeJv5UNvSdd28OobHtFTNgRHkfy5HjERVu3FLANI8Azp0uyG+O76LNgvjR
w924Xj5tmhVdaw9m09sZ8T8XGQE539KtgfeoGFdLIbmDJ4SenCdrmhCU5cGUG3gc
OEGpMTZpJh6Do+al6s0If9bdPDWlxgY+qdTmdiUAJT7//cIy6S1jq4N5nr0nSZoK
nK+RVRQRvSZTGUvjvuyh4rO+x6KrdM9ILSpSAxjaw9ihs0K3KyOr
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:53:35 2024 by rpki-client on console-fra.rpki-client.org