Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa
File: CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa (raw, json)
Hash identifier: sAnhKZ0A/ayG/Eb2hV/3xCgSIsCbOguMXddp2081HdM=
Subject key identifier: 0A:42:07:2B:4C:00:D1:42:66:D1:D6:23:38:F4:0D:37:21:55:CE:C5
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 018CC3495D14803857EC928A5BCC7A6A2AB3
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50019
IP address blocks: 45.131.197.0/24 maxlen: 24
45.131.198.0/24 maxlen: 24
45.131.199.0/24 maxlen: 24
45.131.196.0/24 maxlen: 24
185.128.112.0/24 maxlen: 24
185.128.113.0/24 maxlen: 24
185.128.114.0/24 maxlen: 24
185.128.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5d:14:80:38:57:ec:92:8a:5b:cc:7a:6a:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a42072b4c00d14266d1d62338f40d372155cec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:3a:1e:5a:ea:fe:e8:20:41:05:67:7b:70:
42:32:3d:b0:e5:22:c8:4f:f3:b0:a1:a3:72:38:f9:
01:c9:fe:c6:58:e5:c3:d4:f5:26:b5:fe:ec:8d:35:
78:9e:2d:21:43:39:55:50:4e:73:63:e2:2f:ce:7a:
41:8c:d2:96:48:00:cb:ca:82:45:0d:b6:00:53:24:
8d:ca:3e:a4:31:8c:ed:42:29:f0:0c:42:75:b0:08:
1a:99:cc:ed:3a:e5:6d:da:f1:e6:df:1f:98:f0:bb:
2e:e6:7d:a9:97:5b:db:8f:04:68:37:96:1b:e8:d3:
66:cb:f9:2f:e1:84:6b:ac:ba:67:99:80:5c:48:8a:
49:7e:40:41:68:78:8a:c8:09:3d:99:98:dd:05:29:
4b:31:8f:08:4a:a0:0c:e3:e7:ab:36:27:4f:69:08:
d2:d1:4b:22:99:62:10:69:c1:19:a6:11:92:5a:6b:
29:0f:35:79:4d:6d:66:ec:16:78:6d:46:89:d4:2e:
7c:a0:fa:ab:64:de:dd:3c:e0:f8:8e:af:7c:9f:a4:
7a:c3:b0:d3:fa:28:48:ec:3f:30:57:3f:04:1c:c6:
04:75:59:55:db:0e:73:8a:da:7c:0d:63:b9:ca:6f:
2d:ae:8d:0e:f6:d5:90:8f:1a:4f:fb:d1:50:1c:53:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:07:2B:4C:00:D1:42:66:D1:D6:23:38:F4:0D:37:21:55:CE:C5
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/CkIHK0wA0UJm0dYjOPQNNyFVzsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.196.0/22
185.128.112.0/22
Signature Algorithm: sha256WithRSAEncryption
95:6c:06:b9:ee:f0:8c:e2:98:23:ab:a7:7a:23:9c:e2:11:1c:
13:02:83:59:9b:46:b6:8b:87:e9:51:a6:ff:2a:de:12:9a:cd:
4c:79:3f:49:d5:e0:10:4a:07:c2:0a:15:e5:99:23:1e:55:6c:
b7:6d:c5:a8:bb:3b:b7:73:c4:da:66:a5:ad:19:1c:af:d4:cc:
c0:7e:a5:0f:71:82:69:39:ec:11:36:06:3a:37:46:24:61:0b:
5a:09:b8:73:02:0f:ee:13:e3:24:b3:5c:5a:bb:32:47:23:40:
8b:35:67:92:03:d7:c9:34:da:c7:68:6b:bb:5c:b1:56:77:18:
97:8f:e2:cc:97:6b:eb:d5:bd:98:25:99:ec:37:c0:36:42:06:
97:88:7b:43:3a:10:f5:d0:1c:9e:33:fd:a5:8e:f1:5c:70:c8:
4f:a9:20:3f:64:ce:fc:76:8b:4c:e7:ce:9a:f2:ac:72:ed:d0:
b6:c4:c6:7a:3d:2e:b6:ba:1e:b5:8a:e6:05:7e:00:79:2d:e1:
d5:d2:b0:fd:51:a7:e4:bd:4e:64:c4:2f:19:b8:35:51:a6:ec:
9b:1f:66:ee:29:7c:25:0e:b3:3f:71:12:e2:64:ec:37:c8:4a:
40:62:99:ca:31:34:e2:26:8c:af:c6:6e:43:39:df:ee:7b:60:
e0:aa:44:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSV0UgDhX7JKKW8x6aiqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjVjMjJiZjUzYjcwNWM3YTJiYjI3M2JhNzNlM2YwYzA1
OTViN2IwHhcNMjQwMTAxMDQzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTQyMDcyYjRjMDBkMTQyNjZkMWQ2MjMzOGY0MGQzNzIxNTVjZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpQ6Hlrq/uggQQVne3BCMj2w5SLI
T/OwoaNyOPkByf7GWOXD1PUmtf7sjTV4ni0hQzlVUE5zY+IvznpBjNKWSADLyoJF
DbYAUySNyj6kMYztQinwDEJ1sAgamcztOuVt2vHm3x+Y8Lsu5n2pl1vbjwRoN5Yb
6NNmy/kv4YRrrLpnmYBcSIpJfkBBaHiKyAk9mZjdBSlLMY8ISqAM4+erNidPaQjS
0UsimWIQacEZphGSWmspDzV5TW1m7BZ4bUaJ1C58oPqrZN7dPOD4jq98n6R6w7DT
+ihI7D8wVz8EHMYEdVlV2w5zitp8DWO5ym8tro0O9tWQjxpP+9FQHFN8SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFApCBytMANFCZtHWIzj0DTchVc7FMB8GA1UdIwQY
MBaAFBq1wiv1O3Bceiuyc7pz4/DAWVt7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTct
YjRiMWY2Zjk4YTkwLzEvQ2tJSEswd0EwVUptMGRZak9QUU5OeUZWenNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi83YzhiZjQtNmFiNi00MTk5LWIzYTctYjRiMWY2Zjk4YTkw
LzEvR3JYQ0tfVTdjRng2SzdKenVuUGo4TUJaVzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYPEAwQC
uYBwMA0GCSqGSIb3DQEBCwUAA4IBAQCVbAa57vCM4pgjq6d6I5ziERwTAoNZm0a2
i4fpUab/Kt4Sms1MeT9J1eAQSgfCChXlmSMeVWy3bcWouzu3c8TaZqWtGRyv1MzA
fqUPcYJpOewRNgY6N0YkYQtaCbhzAg/uE+Mks1xauzJHI0CLNWeSA9fJNNrHaGu7
XLFWdxiXj+LMl2vr1b2YJZnsN8A2QgaXiHtDOhD10ByeM/2ljvFccMhPqSA/ZM78
dotM586a8qxy7dC2xMZ6PS62uh61iuYFfgB5LeHV0rD9UafkvU5kxC8ZuDVRpuyb
H2buKXwlDrM/cRLiZOw3yEpAYpnKMTTiJoyvxm5DOd/ue2DgqkT8
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:12:59 2024 by rpki-client on console-ams.rpki-client.org