Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/IbJ5cKKTgiF3tQ-UUmdecceQisY.roa
File: IbJ5cKKTgiF3tQ-UUmdecceQisY.roa (raw, json)
Hash identifier: 3o3EzflhKd57Mh1ckNdk/97I5sgEdwUMSQ0CHt4ECBk=
Subject key identifier: 21:B2:79:70:A2:93:82:21:77:B5:0F:94:52:67:5E:71:C7:90:8A:C6
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936ECEB2AC4AC485D8477AAC674942
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/IbJ5cKKTgiF3tQ-UUmdecceQisY.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 141.98.47.0/24 maxlen: 24
45.133.158.0/24 maxlen: 24
45.133.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:ce:b2:ac:4a:c4:85:d8:47:7a:ac:67:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b27970a293822177b50f9452675e71c7908ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:a9:0a:03:a4:71:c8:95:9b:32:90:28:94:
b7:9f:53:fc:23:6f:57:03:bc:65:49:fc:9a:62:e1:
2b:d3:8b:8e:ad:d2:6f:52:1c:73:f5:91:4c:e9:c8:
75:33:f7:e8:b4:4c:c5:f3:df:cc:2c:8f:15:8e:84:
ef:42:97:c8:98:f5:1f:33:b3:4d:4f:50:80:81:dc:
22:5f:22:87:fc:18:5a:44:2d:24:22:ca:06:7d:ca:
29:75:25:01:cc:a0:2f:a5:be:28:57:88:56:91:58:
5b:e1:27:c6:57:c6:95:e1:1d:aa:46:6c:ed:81:51:
f9:2b:85:c3:58:f7:d0:98:c4:99:99:24:ab:38:56:
fd:c6:8b:49:35:22:64:7c:ae:7b:98:9d:77:7c:90:
cb:df:15:12:b0:8f:bf:6b:fa:9c:ce:a2:79:11:e1:
51:91:5c:29:1c:b4:11:65:37:e3:f3:84:71:30:9a:
16:b2:83:00:18:c2:42:1f:d9:a6:74:f3:95:61:99:
92:36:df:ec:44:c8:2a:9c:23:93:82:a0:b4:37:39:
d1:70:86:9e:d4:88:99:6e:ec:7f:8c:53:17:92:8c:
06:e9:82:0e:3e:f5:35:d9:1b:e7:0b:2f:67:3a:11:
f6:42:32:9c:28:58:66:1b:d4:ed:64:2a:a0:0e:5e:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:79:70:A2:93:82:21:77:B5:0F:94:52:67:5E:71:C7:90:8A:C6
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/IbJ5cKKTgiF3tQ-UUmdecceQisY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.158.0/23
141.98.47.0/24
Signature Algorithm: sha256WithRSAEncryption
90:fc:16:e2:c8:be:f4:43:bf:3f:56:29:4e:43:7d:d2:3c:60:
c8:30:1c:11:2c:60:95:9d:e6:94:e2:0d:87:b2:b2:ca:47:fa:
b4:ee:50:f4:14:82:00:50:37:b8:33:d3:d5:8e:c7:fc:1d:ef:
e8:de:52:f7:9f:e7:e4:65:dd:7b:ee:19:6c:a8:d1:f0:09:c8:
b7:e6:b1:6b:45:6f:9c:2f:3f:56:cb:50:24:10:98:c1:b7:02:
e6:fd:72:21:e1:77:55:fb:5b:dd:c0:d7:dd:f9:61:57:5a:9e:
29:ca:e1:0d:9d:8a:c8:ae:58:91:62:c4:56:03:07:44:be:1b:
9c:42:be:28:7e:8f:39:55:f3:8b:e4:14:14:2d:e5:6f:bc:fc:
5f:b5:c0:a7:9e:93:cb:83:70:07:8b:50:e6:6a:d3:fd:3d:c0:
eb:35:d3:13:00:ba:74:6c:65:cd:ac:58:02:28:ff:10:46:0d:
ec:0f:d8:2f:dc:af:51:79:a2:d3:37:e8:9e:5c:b4:60:e7:f8:
82:75:da:ee:6c:bd:b0:d2:be:a3:e2:bd:cc:f2:4e:79:25:c1:
96:52:2d:a7:83:5e:97:df:74:c0:0e:85:4c:78:79:7d:4b:3a:
3b:18:fd:66:6d:60:77:fc:32:c4:f0:20:4f:5e:8e:93:a5:88:
1a:3a:80:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEk27OsqxKxIXYR3qsZ0lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjQwMTAxMTAzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWIyNzk3MGEyOTM4MjIxNzdiNTBmOTQ1MjY3NWU3MWM3OTA4YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse6pCgOkcciVmzKQKJS3n1P8I29X
A7xlSfyaYuEr04uOrdJvUhxz9ZFM6ch1M/fotEzF89/MLI8VjoTvQpfImPUfM7NN
T1CAgdwiXyKH/BhaRC0kIsoGfcopdSUBzKAvpb4oV4hWkVhb4SfGV8aV4R2qRmzt
gVH5K4XDWPfQmMSZmSSrOFb9xotJNSJkfK57mJ13fJDL3xUSsI+/a/qczqJ5EeFR
kVwpHLQRZTfj84RxMJoWsoMAGMJCH9mmdPOVYZmSNt/sRMgqnCOTgqC0NznRcIae
1IiZbux/jFMXkowG6YIOPvU12RvnCy9nOhH2QjKcKFhmG9TtZCqgDl4w/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCGyeXCik4Ihd7UPlFJnXnHHkIrGMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvSWJKNWNLS1RnaUYzdFEtVVVtZGVjY2VRaXNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYWeAwQA
jWIvMA0GCSqGSIb3DQEBCwUAA4IBAQCQ/BbiyL70Q78/VilOQ33SPGDIMBwRLGCV
neaU4g2HsrLKR/q07lD0FIIAUDe4M9PVjsf8He/o3lL3n+fkZd177hlsqNHwCci3
5rFrRW+cLz9Wy1AkEJjBtwLm/XIh4XdV+1vdwNfd+WFXWp4pyuENnYrIrliRYsRW
AwdEvhucQr4ofo85VfOL5BQULeVvvPxftcCnnpPLg3AHi1DmatP9PcDrNdMTALp0
bGXNrFgCKP8QRg3sD9gv3K9ReaLTN+ieXLRg5/iCddrubL2w0r6j4r3M8k55JcGW
Ui2ng16X33TADoVMeHl9Szo7GP1mbWB3/DLE8CBPXo6TpYgaOoBQ
-----END CERTIFICATE-----
Generated at Sun May 5 19:02:30 2024 by rpki-client on console-fra.rpki-client.org