Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tf46ZcyYf611WSnhUuiE0Mu6mbE.roa
File: tf46ZcyYf611WSnhUuiE0Mu6mbE.roa (raw, json)
Hash identifier: ZKxDVlem7auwXFxfPzGAQZmm/60X8uh4nxr8BVN4F6E=
Subject key identifier: B5:FE:3A:65:CC:98:7F:AD:75:59:29:E1:52:E8:84:D0:CB:BA:99:B1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D9D698A341805AB8B1F602BE870E455B1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tf46ZcyYf611WSnhUuiE0Mu6mbE.roa
Signing time: Mon 12 Feb 2024 13:02:36 +0000
ROA not before: Mon 12 Feb 2024 13:02:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
194.120.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:69:8a:34:18:05:ab:8b:1f:60:2b:e8:70:e4:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 12 13:02:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5fe3a65cc987fad755929e152e884d0cbba99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:9f:70:10:1b:2a:8e:53:96:5c:8e:b1:03:
fc:3b:25:bb:6a:35:9f:5c:e6:9d:07:f4:9c:18:2f:
57:f9:84:05:df:f2:f8:bc:1c:ca:3a:20:0d:64:1f:
fa:c2:2c:28:56:6d:61:f0:b6:eb:50:ea:75:69:0f:
c4:ef:32:3f:35:87:2f:e5:9a:41:04:07:da:20:df:
33:4e:cc:05:55:e8:22:50:4f:20:d4:33:2e:ae:36:
9e:a2:e2:92:55:3c:ea:a5:98:c3:7a:2c:ab:d0:23:
6f:36:15:0f:b6:c7:f4:a6:d1:27:5b:c4:72:e4:2e:
e2:02:b9:3f:67:a0:00:8d:56:49:fe:75:ee:7a:b2:
5f:66:50:d0:3a:a4:12:8f:59:0e:5f:21:49:7c:12:
51:ee:c2:9a:10:f4:aa:96:a6:15:7e:8b:57:f7:7e:
91:e0:4e:07:16:d9:05:cf:88:64:8a:98:e8:ec:47:
0f:06:a7:5d:6b:c3:8d:73:27:9b:7d:5c:38:f1:e4:
a0:08:2a:41:63:3b:3a:8e:02:b4:cd:a5:4c:a3:87:
eb:0b:1c:96:84:a9:8b:11:23:4b:8a:af:20:4a:33:
f7:ac:ab:a2:71:d1:a0:be:20:c9:5d:f1:5a:1d:59:
ed:18:4e:16:82:d0:4b:1b:6f:b7:8d:17:bf:79:3f:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FE:3A:65:CC:98:7F:AD:75:59:29:E1:52:E8:84:D0:CB:BA:99:B1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tf46ZcyYf611WSnhUuiE0Mu6mbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
194.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
85:16:17:24:d4:4a:d5:39:47:e8:9f:f1:cc:80:1a:15:10:13:
56:2a:5b:1b:a6:1b:8f:f0:f2:b6:d9:25:88:77:bb:1e:e4:12:
75:f3:74:04:14:dd:0f:62:f6:91:e9:bd:dc:5e:ff:5e:19:77:
49:27:38:ea:f0:c5:16:4c:54:8c:38:01:3d:9b:1b:1f:eb:9b:
b5:d4:83:fe:3e:e1:dc:d3:03:75:b2:b6:40:17:fd:f6:67:f3:
67:33:ca:6e:91:7c:a1:56:a2:07:ff:6d:7d:d8:cd:ce:63:2f:
a5:4c:95:7c:19:81:f8:51:46:67:5e:97:a7:a3:99:0b:cd:51:
1e:c7:1e:75:9c:e5:17:0f:1c:fd:2b:b4:84:01:da:2b:2f:11:
cd:10:cf:9b:a8:33:d1:5a:cc:73:42:3d:47:bd:9f:2d:ad:0b:
91:ad:ac:cd:17:0d:11:81:0d:85:7b:49:e8:27:26:7f:94:e9:
82:46:77:4f:90:6d:e6:ac:f7:2d:49:00:e7:46:a1:92:e9:13:
08:4b:5b:9a:ca:d7:b4:ca:26:b5:94:14:8c:d2:93:ba:44:41:
80:56:15:af:2e:3e:c6:fc:88:29:dd:8f:b0:bd:d3:6c:a8:5d:
b6:0a:98:c9:4b:a1:3d:81:a8:95:cc:56:cd:1b:f6:cd:76:e5:
d5:39:39:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2daYo0GAWrix9gK+hw5FWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMjEyMTMwMjM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWZlM2E2NWNjOTg3ZmFkNzU1OTI5ZTE1MmU4ODRkMGNiYmE5OWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+afcBAbKo5TllyOsQP8OyW7ajWf
XOadB/ScGC9X+YQF3/L4vBzKOiANZB/6wiwoVm1h8LbrUOp1aQ/E7zI/NYcv5ZpB
BAfaIN8zTswFVegiUE8g1DMurjaeouKSVTzqpZjDeiyr0CNvNhUPtsf0ptEnW8Ry
5C7iArk/Z6AAjVZJ/nXuerJfZlDQOqQSj1kOXyFJfBJR7sKaEPSqlqYVfotX936R
4E4HFtkFz4hkipjo7EcPBqdda8ONcyebfVw48eSgCCpBYzs6jgK0zaVMo4frCxyW
hKmLESNLiq8gSjP3rKuicdGgviDJXfFaHVntGE4WgtBLG2+3jRe/eT89IwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLX+OmXMmH+tdVkp4VLohNDLupmxMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvdGY0NlpjeVlmNjExV1NuaFV1aUUwTXU2bWJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvjAwQA
wnirMA0GCSqGSIb3DQEBCwUAA4IBAQCFFhck1ErVOUfon/HMgBoVEBNWKlsbphuP
8PK22SWId7se5BJ183QEFN0PYvaR6b3cXv9eGXdJJzjq8MUWTFSMOAE9mxsf65u1
1IP+PuHc0wN1srZAF/32Z/NnM8pukXyhVqIH/2192M3OYy+lTJV8GYH4UUZnXpen
o5kLzVEexx51nOUXDxz9K7SEAdorLxHNEM+bqDPRWsxzQj1HvZ8trQuRrazNFw0R
gQ2Fe0noJyZ/lOmCRndPkG3mrPctSQDnRqGS6RMIS1uayte0yia1lBSM0pO6REGA
VhWvLj7G/Igp3Y+wvdNsqF22CpjJS6E9gaiVzFbNG/bNduXVOTlO
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:58 2024 by rpki-client on console-ams.rpki-client.org