Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/pXTgqGNGWmmle8rA4Iv8FxKpWlc.roa
File: pXTgqGNGWmmle8rA4Iv8FxKpWlc.roa (raw, json)
Hash identifier: se76uUTmFhrWw+ikcMh7IcIPvG/iwjNgVWexCnStRjY=
Subject key identifier: A5:74:E0:A8:63:46:5A:69:A5:7B:CA:C0:E0:8B:FC:17:12:A9:5A:57
Certificate issuer: /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial: 018CC794EFCB03283AE26A047E21DD9834D3
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/pXTgqGNGWmmle8rA4Iv8FxKpWlc.roa
Signing time: Tue 02 Jan 2024 00:31:15 +0000
ROA not before: Tue 02 Jan 2024 00:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50474
IP address blocks: 45.143.168.0/24 maxlen: 24
45.143.169.0/24 maxlen: 24
45.143.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ef:cb:03:28:3a:e2:6a:04:7e:21:dd:98:34:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
Validity
Not Before: Jan 2 00:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a574e0a863465a69a57bcac0e08bfc1712a95a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:27:c4:28:be:db:76:d5:87:53:9f:10:4d:
9f:92:dc:5d:57:e6:4e:1a:be:4b:54:eb:00:39:ef:
ed:d4:b9:23:ef:a2:c5:32:de:31:67:46:d5:fb:22:
07:07:e5:ee:29:ea:5e:2c:61:8c:cf:fe:f1:d0:0f:
f5:08:2e:ba:1a:62:93:23:4f:c8:1f:b4:c7:66:81:
cd:38:8c:1f:91:ae:0c:f2:f0:c1:d2:03:02:0c:b0:
e7:39:ae:fc:71:83:e6:a6:32:6e:f2:c4:ba:19:59:
42:d9:52:07:72:3a:6a:35:dc:da:66:c5:e9:e2:9f:
db:37:98:a2:97:b1:98:e4:83:e5:c6:e6:20:a4:c7:
fa:4a:4c:b2:55:e2:2a:7a:6d:ae:79:68:15:a2:6c:
05:19:dc:fd:28:a7:9e:19:7c:17:d1:f1:ee:20:01:
ba:a4:06:ec:0d:b5:9e:f2:aa:e8:1a:f3:51:60:3e:
af:47:fc:11:fc:b7:f1:49:9d:3e:dc:99:68:34:58:
05:09:5a:d2:95:dd:ad:01:08:3f:fa:b3:17:e8:23:
2b:d3:70:db:16:2e:11:1f:b3:4d:0d:68:61:e2:d8:
7b:24:0c:d4:d3:b4:74:6d:37:5d:e6:df:b2:41:36:
ea:a5:09:f9:63:de:f4:ca:63:23:74:6e:a1:63:25:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:E0:A8:63:46:5A:69:A5:7B:CA:C0:E0:8B:FC:17:12:A9:5A:57
X509v3 Authority Key Identifier:
keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/pXTgqGNGWmmle8rA4Iv8FxKpWlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.168.0/22
Signature Algorithm: sha256WithRSAEncryption
10:37:4f:20:d6:1b:b3:52:10:dc:79:da:88:e9:2b:e4:c2:b0:
c1:3d:62:92:85:0c:33:32:d9:4f:dd:31:a2:b9:f5:52:cd:b2:
a0:db:92:59:82:ac:eb:14:a5:45:71:6d:f3:08:9a:b6:20:c4:
d3:1b:19:4b:48:a2:97:15:2c:91:7c:46:c8:2f:12:e8:46:87:
d2:f3:78:5f:e3:f7:91:c4:f2:d8:d6:69:6e:b9:9c:9c:35:94:
cd:75:25:45:0a:bc:c3:31:59:97:dc:34:bd:cb:d8:0f:95:c9:
0c:f8:61:16:a1:cd:9f:56:bf:88:db:c1:bb:e0:ca:62:4f:d6:
ac:c4:67:f9:7f:8a:62:08:64:0f:21:27:fe:a7:b1:1b:de:81:
f4:3f:75:d5:a8:93:6d:ce:9d:fa:c7:87:db:5a:03:31:5a:23:
82:e2:fc:8c:7a:e3:ea:7a:6f:f3:69:8d:ee:6b:4a:12:f2:45:
e3:f8:2c:c1:90:47:9a:33:b1:47:47:ca:8d:1a:8f:ca:71:5e:
6d:9c:1f:90:f7:00:b1:15:cc:dc:2b:47:b9:55:92:d7:7e:ce:
9a:40:66:ac:b1:2d:41:25:c0:b9:7d:c6:a7:01:80:71:71:c7:
0e:24:3e:81:07:24:4e:c8:91:38:21:bd:b2:94:e6:57:9b:ff:
39:f2:ce:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlO/LAyg64moEfiHdmDTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNTU4NTA5ZTFjMGVjMTYwZGUyZTA3NDE3NzIxM2RlMzA2
MTVkNmYwHhcNMjQwMTAyMDAzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc0ZTBhODYzNDY1YTY5YTU3YmNhYzBlMDhiZmMxNzEyYTk1YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLQnxCi+23bVh1OfEE2fktxdV+ZO
Gr5LVOsAOe/t1Lkj76LFMt4xZ0bV+yIHB+XuKepeLGGMz/7x0A/1CC66GmKTI0/I
H7THZoHNOIwfka4M8vDB0gMCDLDnOa78cYPmpjJu8sS6GVlC2VIHcjpqNdzaZsXp
4p/bN5iil7GY5IPlxuYgpMf6SkyyVeIqem2ueWgVomwFGdz9KKeeGXwX0fHuIAG6
pAbsDbWe8qroGvNRYD6vR/wR/LfxSZ0+3JloNFgFCVrSld2tAQg/+rMX6CMr03Db
Fi4RH7NNDWhh4th7JAzU07R0bTdd5t+yQTbqpQn5Y970ymMjdG6hYyVrOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKV04KhjRlpppXvKwOCL/BcSqVpXMB8GA1UdIwQY
MBaAFAJVhQnhwOwWDeLgdBdyE94wYV1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEt
N2FlNjkxMWNhMTI2LzEvcFhUZ3FHTkdXbW1sZThyQTRJdjhGeEtwV2xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hODYwYmYtMWEyNy00ZjBmLWJkOTEtN2FlNjkxMWNhMTI2
LzEvQWxXRkNlSEE3QllONHVCMEYzSVQzakJoWFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+oMA0G
CSqGSIb3DQEBCwUAA4IBAQAQN08g1huzUhDcedqI6SvkwrDBPWKShQwzMtlP3TGi
ufVSzbKg25JZgqzrFKVFcW3zCJq2IMTTGxlLSKKXFSyRfEbILxLoRofS83hf4/eR
xPLY1mluuZycNZTNdSVFCrzDMVmX3DS9y9gPlckM+GEWoc2fVr+I28G74MpiT9as
xGf5f4piCGQPISf+p7Eb3oH0P3XVqJNtzp36x4fbWgMxWiOC4vyMeuPqem/zaY3u
a0oS8kXj+CzBkEeaM7FHR8qNGo/KcV5tnB+Q9wCxFczcK0e5VZLXfs6aQGassS1B
JcC5fcanAYBxcccOJD6BByROyJE4Ib2ylOZXm/858s4t
-----END CERTIFICATE-----
Generated at Tue May 28 23:38:06 2024 by rpki-client on console-fra.rpki-client.org