Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/KXJgFn7inCF7vZBGE2zeP95gNck.roa
File: KXJgFn7inCF7vZBGE2zeP95gNck.roa (raw, json)
Hash identifier: 7id01i5NUMSq7deoS0ZEQUNdosWWPt0v0JAIjQDbDVs=
Subject key identifier: 29:72:60:16:7E:E2:9C:21:7B:BD:90:46:13:6C:DE:3F:DE:60:35:C9
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 018CC2DB37122A8D861383976CA2CD820518
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/KXJgFn7inCF7vZBGE2zeP95gNck.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197931
IP address blocks: 45.128.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:37:12:2a:8d:86:13:83:97:6c:a2:cd:82:05:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297260167ee29c217bbd9046136cde3fde6035c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:65:13:9f:e7:c9:1c:4c:0e:36:d3:61:ea:
dd:29:89:59:c1:65:a0:83:7d:18:8c:a1:97:ce:b1:
93:42:b7:ea:3a:fd:81:37:60:51:56:33:ff:a9:f4:
5d:f6:02:02:69:32:fb:49:05:88:ce:92:74:3a:d6:
d8:bd:ec:42:41:e7:f8:ee:35:4c:f2:97:b0:39:68:
4c:e8:b2:f4:1a:7c:fc:96:1f:a1:e4:33:94:5f:d0:
59:73:4e:ee:09:95:37:21:64:37:2c:6d:58:5a:df:
dd:1f:5e:17:d3:ca:ca:0f:e9:41:35:86:d9:fb:40:
56:a5:63:c3:a8:b4:1b:54:5d:e1:d7:d4:17:91:e5:
d3:58:34:8a:b1:2b:51:9b:c8:f9:fd:4b:77:bb:06:
54:74:79:76:82:61:99:c7:59:b3:2c:79:eb:0e:c4:
19:b3:6a:ba:b9:2f:22:16:47:a6:fe:08:be:15:3f:
88:4c:9f:b4:ba:62:94:c2:20:ff:37:63:b3:dd:4d:
cc:11:fd:07:41:62:83:65:32:07:bf:46:5d:e4:ec:
81:7c:64:f6:fa:f2:37:88:4f:88:d1:ed:71:bb:51:
f1:93:8d:11:8d:b6:a4:77:3e:b9:32:c6:7c:02:3a:
09:97:78:9e:c8:ea:58:20:86:c7:a4:39:50:a9:c9:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:60:16:7E:E2:9C:21:7B:BD:90:46:13:6C:DE:3F:DE:60:35:C9
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/KXJgFn7inCF7vZBGE2zeP95gNck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7a:aa:9d:19:94:15:ac:1e:99:7e:5d:ec:44:f9:38:52:44:
df:70:2f:6e:4d:1d:42:3b:53:aa:25:45:f3:84:37:ff:a9:a9:
b5:dc:ae:50:31:d7:ab:65:c8:5d:b6:83:47:51:f7:0b:d3:ac:
1c:dc:14:1a:8a:a7:d6:ec:72:a6:46:67:1a:53:51:a5:2f:d1:
f6:1e:e9:fa:b4:b3:8a:9c:f6:16:63:c5:a6:96:c2:ce:38:34:
3e:7b:cc:67:2c:e8:98:5e:9e:06:89:0e:40:41:ad:d9:ce:8c:
a8:42:f1:3d:d8:f1:7b:d9:5c:a8:f7:f3:eb:71:0e:84:ed:03:
77:26:55:c8:d2:c8:71:0f:b4:3b:fa:f5:a9:c7:f0:a7:87:4b:
09:57:c9:f8:56:4c:26:c4:25:32:60:49:e0:7e:41:8d:c3:5e:
3d:e2:10:10:d3:ba:b4:c5:aa:35:fa:b1:0e:03:86:96:0a:5c:
02:41:38:b2:27:21:6b:0d:2d:2a:b7:7e:fb:e9:89:86:76:2c:
03:ee:bc:b6:82:34:3d:6b:e4:f8:94:df:1c:b1:9d:a5:8d:9a:
ee:e5:c6:fe:38:2d:85:40:11:ed:4b:98:ea:a0:e4:4e:67:c1:
94:cf:43:67:91:23:22:e8:50:ea:9c:4d:cb:aa:cf:7a:98:75:
cc:c3:59:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zcSKo2GE4OXbKLNggUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz
ODkxY2MwHhcNMjQwMTAxMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTcyNjAxNjdlZTI5YzIxN2JiZDkwNDYxMzZjZGUzZmRlNjAzNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJlE5/nyRxMDjbTYerdKYlZwWWg
g30YjKGXzrGTQrfqOv2BN2BRVjP/qfRd9gICaTL7SQWIzpJ0OtbYvexCQef47jVM
8pewOWhM6LL0Gnz8lh+h5DOUX9BZc07uCZU3IWQ3LG1YWt/dH14X08rKD+lBNYbZ
+0BWpWPDqLQbVF3h19QXkeXTWDSKsStRm8j5/Ut3uwZUdHl2gmGZx1mzLHnrDsQZ
s2q6uS8iFkem/gi+FT+ITJ+0umKUwiD/N2Oz3U3MEf0HQWKDZTIHv0Zd5OyBfGT2
+vI3iE+I0e1xu1Hxk40Rjbakdz65MsZ8AjoJl3ieyOpYIIbHpDlQqckMqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClyYBZ+4pwhe72QRhNs3j/eYDXJMB8GA1UdIwQY
MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt
YjcwNGVlMjdjNjVjLzEvS1hKZ0ZuN2luQ0Y3dlpCR0UyemVQOTVnTmNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj
LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYBiMA0G
CSqGSIb3DQEBCwUAA4IBAQAqeqqdGZQVrB6Zfl3sRPk4UkTfcC9uTR1CO1OqJUXz
hDf/qam13K5QMderZchdtoNHUfcL06wc3BQaiqfW7HKmRmcaU1GlL9H2Hun6tLOK
nPYWY8WmlsLOODQ+e8xnLOiYXp4GiQ5AQa3ZzoyoQvE92PF72Vyo9/PrcQ6E7QN3
JlXI0shxD7Q7+vWpx/Cnh0sJV8n4VkwmxCUyYEngfkGNw1494hAQ07q0xao1+rEO
A4aWClwCQTiyJyFrDS0qt3776YmGdiwD7ry2gjQ9a+T4lN8csZ2ljZru5cb+OC2F
QBHtS5jqoOROZ8GUz0NnkSMi6FDqnE3Lqs96mHXMw1mj
-----END CERTIFICATE-----
Generated at Wed Jun 19 16:06:45 2024 by rpki-client on console-ams.rpki-client.org