Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OY1RJ88wRzu6VI8rxJT0PLKtlOc.roa
File: OY1RJ88wRzu6VI8rxJT0PLKtlOc.roa (raw, json)
Hash identifier: Z/gHHm2l+pegO4ucvS69xif3vumJMaBN6woBL1JFbHY=
Subject key identifier: 39:8D:51:27:CF:30:47:3B:BA:54:8F:2B:C4:94:F4:3C:B2:AD:94:E7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E40CC65B3C8551D968019AEABDD45
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OY1RJ88wRzu6VI8rxJT0PLKtlOc.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208751
IP address blocks: 45.135.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:40:cc:65:b3:c8:55:1d:96:80:19:ae:ab:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398d5127cf30473bba548f2bc494f43cb2ad94e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:cc:d6:a8:a4:5d:6e:4d:3a:3d:0e:1e:4f:
4d:26:5d:14:60:8b:64:47:76:4d:20:b1:25:ea:a5:
63:1b:74:34:2f:2d:2e:63:cd:e4:63:1b:34:17:ee:
57:96:30:cf:2f:e0:fb:d0:12:8c:42:21:8d:21:d9:
ea:5b:cb:db:93:ad:1f:b9:9f:ef:1f:ed:b5:d9:19:
cc:c8:f4:5a:d3:f2:39:d0:fa:ce:e7:57:d4:c3:87:
98:b3:3d:ee:ca:a3:8f:ef:63:ec:d3:1c:95:a6:56:
4d:81:97:d2:fe:c2:b9:16:b3:4d:21:76:e2:5d:10:
6c:f6:87:e7:a6:e5:6b:5d:3e:a2:fa:fb:b5:8b:62:
29:c1:48:71:16:66:a4:ea:59:bb:75:4b:11:f9:87:
76:cf:52:32:91:a7:e0:fc:43:ad:a2:d4:cd:08:2c:
7d:63:b0:bb:44:7c:6c:66:98:73:2c:9b:37:94:44:
45:99:22:b4:1d:d9:39:ed:02:91:e7:ce:c9:80:06:
a3:6c:6a:72:11:7d:26:7f:e6:bf:d8:58:71:6d:5b:
f3:b9:c1:00:0d:f0:9f:93:96:07:40:b8:c1:f2:44:
26:17:56:c1:d1:54:ea:75:af:28:59:bc:89:80:c3:
7e:e0:4a:4a:a9:69:6f:91:d8:55:8e:d9:78:e3:77:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:51:27:CF:30:47:3B:BA:54:8F:2B:C4:94:F4:3C:B2:AD:94:E7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OY1RJ88wRzu6VI8rxJT0PLKtlOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.151.0/24
Signature Algorithm: sha256WithRSAEncryption
65:81:11:c0:a0:85:ac:a0:d2:29:02:81:93:55:bd:23:47:2f:
1e:77:14:66:d9:95:ec:f0:ca:a4:6e:ad:23:90:38:f9:8d:60:
5d:04:bd:cc:3b:62:fb:37:f2:6d:6f:1a:fe:ab:1f:64:2c:15:
ec:88:fb:8c:25:4f:de:dd:6c:db:52:b0:00:ff:71:f2:ca:66:
63:3d:7e:b5:46:cb:82:00:5f:e3:1a:d3:e6:b6:b1:13:6b:06:
58:c7:3b:d3:f0:ba:b9:ee:96:68:f5:4e:78:4d:13:62:6c:81:
6b:6a:0b:7a:c6:15:cd:dd:08:fa:ed:13:44:b4:72:80:47:b0:
82:86:99:66:ac:c5:41:9d:b3:60:fc:b4:08:2c:a9:ae:26:ea:
46:4f:41:bb:3c:5c:99:a4:a3:3f:3d:d8:97:91:32:aa:4e:3d:
5b:d3:40:a9:be:b7:9a:b3:ea:f1:ba:0b:23:08:f1:78:23:1d:
39:94:ad:f8:cc:0f:fe:cf:db:2c:52:dc:19:98:32:1a:e9:49:
52:be:7c:1e:00:a3:86:62:cd:f5:b9:70:b3:f8:16:45:5d:8f:
ea:e6:8a:73:e4:37:38:f4:c9:c3:f7:b7:5b:bd:0a:09:53:8a:
20:cd:82:1b:79:81:68:60:32:0c:e3:42:a8:ef:8e:2c:93:81:
eb:f2:cf:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTkDMZbPIVR2WgBmuq91FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOThkNTEyN2NmMzA0NzNiYmE1NDhmMmJjNDk0ZjQzY2IyYWQ5NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo83M1qikXW5NOj0OHk9NJl0UYItk
R3ZNILEl6qVjG3Q0Ly0uY83kYxs0F+5XljDPL+D70BKMQiGNIdnqW8vbk60fuZ/v
H+212RnMyPRa0/I50PrO51fUw4eYsz3uyqOP72Ps0xyVplZNgZfS/sK5FrNNIXbi
XRBs9ofnpuVrXT6i+vu1i2IpwUhxFmak6lm7dUsR+Yd2z1Iykafg/EOtotTNCCx9
Y7C7RHxsZphzLJs3lERFmSK0Hdk57QKR587JgAajbGpyEX0mf+a/2FhxbVvzucEA
DfCfk5YHQLjB8kQmF1bB0VTqda8oWbyJgMN+4EpKqWlvkdhVjtl443cxEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmNUSfPMEc7ulSPK8SU9DyyrZTnMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvT1kxUko4OHdSenU2Vkk4cnhKVDBQTEt0bE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeXMA0G
CSqGSIb3DQEBCwUAA4IBAQBlgRHAoIWsoNIpAoGTVb0jRy8edxRm2ZXs8Mqkbq0j
kDj5jWBdBL3MO2L7N/Jtbxr+qx9kLBXsiPuMJU/e3WzbUrAA/3HyymZjPX61RsuC
AF/jGtPmtrETawZYxzvT8Lq57pZo9U54TRNibIFragt6xhXN3Qj67RNEtHKAR7CC
hplmrMVBnbNg/LQILKmuJupGT0G7PFyZpKM/PdiXkTKqTj1b00Cpvreas+rxugsj
CPF4Ix05lK34zA/+z9ssUtwZmDIa6UlSvnweAKOGYs31uXCz+BZFXY/q5opz5Dc4
9MnD97dbvQoJU4ogzYIbeYFoYDIM40Ko744sk4Hr8s/u
-----END CERTIFICATE-----
Generated at Sun Sep 29 01:36:42 2024 by rpki-client on console-ams.rpki-client.org