Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5MhUhNLThbshjTrWbXdyZBARCN8.roa
File: 5MhUhNLThbshjTrWbXdyZBARCN8.roa (raw, json)
Hash identifier: t3pzrWGdAZvNhWgeeq4+pM/1+ekql1aFEXO1iY2qH5g=
Subject key identifier: E4:C8:54:84:D2:D3:85:BB:21:8D:3A:D6:6D:77:72:64:10:11:08:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01900112C8917C61E8A6214F4304744DDE6F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5MhUhNLThbshjTrWbXdyZBARCN8.roa
Signing time: Mon 10 Jun 2024 07:35:26 +0000
ROA not before: Mon 10 Jun 2024 07:35:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216178
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:12:c8:91:7c:61:e8:a6:21:4f:43:04:74:4d:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 10 07:35:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4c85484d2d385bb218d3ad66d777264101108df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:96:65:88:12:c1:83:6f:54:d0:b3:b6:eb:
e0:5a:db:a8:92:86:78:9c:12:d4:cb:03:5b:33:d2:
7c:9d:1c:ba:55:f1:ae:52:4f:16:5f:fc:97:0a:e9:
75:51:4f:4a:52:2b:07:ab:3b:bc:fa:aa:87:b7:a8:
4f:fa:ed:b1:e7:5b:a8:e0:fd:5c:f4:fc:f4:cf:9c:
b4:25:d2:79:c2:28:b0:9e:f8:fe:c7:18:63:99:95:
06:e8:91:13:71:e0:66:19:3f:39:0b:8d:a9:7a:66:
47:b1:ac:b7:8e:94:9f:08:47:5c:f2:ad:d6:b1:32:
bc:42:b2:7a:da:d7:b8:60:5c:f0:2a:59:af:b2:65:
7e:08:e7:37:00:0b:09:c8:c8:55:3f:e9:a1:ba:15:
fe:74:b3:df:7e:cc:47:9c:d6:52:66:c0:ba:38:40:
f4:4f:e0:7c:e9:fa:97:2b:bf:96:64:3e:56:df:93:
ad:63:04:1f:87:e9:33:22:60:bc:98:1e:96:a9:b0:
dc:8d:93:71:91:e9:0e:48:40:2b:a2:16:21:9e:4a:
5a:70:60:9e:06:e1:54:b3:e9:e4:58:60:d2:38:4e:
e7:03:26:85:d8:a9:c5:63:72:69:34:73:ee:b4:fa:
85:cb:91:ec:08:b3:95:bc:47:32:fe:68:29:96:c4:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:54:84:D2:D3:85:BB:21:8D:3A:D6:6D:77:72:64:10:11:08:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5MhUhNLThbshjTrWbXdyZBARCN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:00:0e:bb:a8:6b:d3:14:dc:ed:3f:80:75:b9:d9:43:b8:
45:b5:31:b4:b9:74:cf:85:9a:8d:ea:55:f2:48:1c:50:14:8c:
8c:bf:e3:aa:b5:50:5d:a3:4e:41:ee:0f:c9:14:e6:47:ee:5f:
16:23:06:52:3b:5f:6a:2e:fa:76:e0:10:a0:29:07:33:74:42:
27:88:cf:d8:6b:50:76:67:ba:62:37:39:98:d4:71:66:36:e3:
78:04:9d:53:f7:f0:02:f3:c2:43:1d:a7:9f:f4:61:6d:b1:b5:
64:64:83:43:8b:f0:c6:25:4a:ae:61:00:d0:7d:cf:0e:80:68:
f6:49:06:ef:8b:ac:04:01:93:28:58:06:b5:4e:8e:69:6e:b4:
0c:40:6c:2d:65:f1:ae:b0:2d:e1:b8:de:0e:4d:9e:fe:dd:79:
90:b0:84:66:ad:a2:4e:40:5f:31:07:ea:df:32:0d:71:33:c5:
23:46:11:c3:f4:38:95:49:43:0a:2f:36:e0:ac:94:28:36:28:
a6:e7:ef:c6:90:25:3d:81:91:8a:37:bc:4d:64:2f:86:9a:0b:
68:ac:db:13:8b:00:41:34:e8:9b:8a:39:37:a4:3d:ed:00:1a:
8a:6d:b4:82:4b:cf:08:ac:a7:8a:1f:19:35:3d:82:3c:eb:0b:
1f:af:72:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZABEsiRfGHopiFPQwR0Td5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjEwMDczNTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGM4NTQ4NGQyZDM4NWJiMjE4ZDNhZDY2ZDc3NzI2NDEwMTEwOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/KWZYgSwYNvVNCztuvgWtuokoZ4
nBLUywNbM9J8nRy6VfGuUk8WX/yXCul1UU9KUisHqzu8+qqHt6hP+u2x51uo4P1c
9Pz0z5y0JdJ5wiiwnvj+xxhjmZUG6JETceBmGT85C42pemZHsay3jpSfCEdc8q3W
sTK8QrJ62te4YFzwKlmvsmV+COc3AAsJyMhVP+mhuhX+dLPffsxHnNZSZsC6OED0
T+B86fqXK7+WZD5W35OtYwQfh+kzImC8mB6WqbDcjZNxkekOSEArohYhnkpacGCe
BuFUs+nkWGDSOE7nAyaF2KnFY3JpNHPutPqFy5HsCLOVvEcy/mgplsRAgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTIVITS04W7IY061m13cmQQEQjfMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNU1oVWhOTFRoYnNoalRyV2JYZHlaQkFSQ044LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhdMA0G
CSqGSIb3DQEBCwUAA4IBAQAwDQAOu6hr0xTc7T+AdbnZQ7hFtTG0uXTPhZqN6lXy
SBxQFIyMv+OqtVBdo05B7g/JFOZH7l8WIwZSO19qLvp24BCgKQczdEIniM/Ya1B2
Z7piNzmY1HFmNuN4BJ1T9/AC88JDHaef9GFtsbVkZINDi/DGJUquYQDQfc8OgGj2
SQbvi6wEAZMoWAa1To5pbrQMQGwtZfGusC3huN4OTZ7+3XmQsIRmraJOQF8xB+rf
Mg1xM8UjRhHD9DiVSUMKLzbgrJQoNiim5+/GkCU9gZGKN7xNZC+GmgtorNsTiwBB
NOibijk3pD3tABqKbbSCS88IrKeKHxk1PYI86wsfr3Iv
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:09:40 2024 by rpki-client on console-ams.rpki-client.org