Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/TGwpOWi-AJheGoPGrEc4BXQqHkw.roa
File: TGwpOWi-AJheGoPGrEc4BXQqHkw.roa (raw, json)
Hash identifier: 10AB8y1KmOv+A+cod240boMGbhvKEZ4R4VTxWH1/sYY=
Subject key identifier: 4C:6C:29:39:68:BE:00:98:5E:1A:83:C6:AC:47:38:05:74:2A:1E:4C
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 018CC8DFAD7E088DDFAFF72BF2BF6A542099
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/TGwpOWi-AJheGoPGrEc4BXQqHkw.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.132.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:ad:7e:08:8d:df:af:f7:2b:f2:bf:6a:54:20:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c6c293968be00985e1a83c6ac473805742a1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:88:5f:a8:28:fe:eb:50:1e:81:c2:34:20:
8a:21:3c:da:42:9e:fe:ee:47:d7:20:c7:1c:1a:f3:
e5:61:20:bc:83:2a:89:30:e0:9a:2e:88:71:bd:8f:
9a:10:75:99:5b:f0:21:46:4c:c6:ef:0a:df:18:ad:
71:9f:a4:7d:79:d3:fd:01:32:35:1a:10:d0:92:85:
7e:7f:c9:e3:09:15:67:94:f7:90:0b:5e:2f:7a:36:
e6:39:12:bb:fd:a5:b4:4d:85:c5:17:7e:78:6f:aa:
09:5b:d5:f8:5b:dd:6d:05:91:f9:3b:be:19:a1:c2:
6b:34:d5:e0:5d:3c:0a:b9:92:1b:1d:df:5d:c8:1d:
2f:9f:30:b9:1d:9c:cf:19:e4:cc:e2:54:5d:14:ef:
4b:9e:b1:f5:b7:85:e8:a2:ee:ee:9b:f9:bc:ac:25:
41:a9:1c:a9:99:41:39:cf:ef:45:10:14:f7:1f:98:
cb:cd:3b:0f:c1:6c:20:2d:61:98:63:4f:fc:b3:05:
ae:34:8b:cf:26:09:ad:94:9b:b4:aa:85:57:c0:e2:
a4:a7:1a:01:47:84:6b:4f:c2:6a:5d:c7:95:3b:9b:
af:5d:b7:9c:06:b7:35:9f:e9:86:aa:5b:22:5d:f5:
da:f5:4c:d7:78:fd:ef:d1:47:60:df:a5:e7:01:69:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:29:39:68:BE:00:98:5E:1A:83:C6:AC:47:38:05:74:2A:1E:4C
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/TGwpOWi-AJheGoPGrEc4BXQqHkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:06:cb:f4:c5:66:6d:90:60:b7:62:a1:31:a1:f3:0c:a5:6c:
6b:85:85:b5:6f:68:1f:05:21:9d:1b:5b:56:b3:ce:49:b8:96:
25:5e:0a:81:a9:48:36:13:ef:9a:15:c8:1a:51:fb:7d:fe:1b:
c9:62:67:88:db:fd:53:2f:8a:9a:14:ca:8b:5f:ec:ba:1f:48:
7b:5e:33:61:12:f0:22:43:a8:98:fc:c2:4d:ba:c4:45:d5:93:
dd:73:af:43:e2:f6:b5:af:c6:cb:8d:e7:f2:8a:64:92:70:0c:
a6:4f:26:4b:3c:f0:db:61:f8:f2:ea:dc:21:c6:27:23:0c:59:
e8:28:fe:84:26:7b:04:3f:de:b1:53:b6:bd:f3:70:30:8f:94:
7d:b1:2c:1e:7a:8e:95:8a:64:6e:43:c6:b9:58:d2:5b:ec:a9:
de:35:df:0b:9c:18:4b:f5:a0:21:98:3a:3a:fa:4e:c3:f7:7b:
10:de:29:d5:a6:9b:5b:53:6a:60:ae:44:c8:99:29:71:15:68:
ba:9d:52:9a:9a:52:48:10:4d:d0:58:32:84:87:87:82:b2:d4:
23:6f:6a:74:47:d9:5c:5f:10:ba:36:29:04:fa:ab:c6:4f:99:
ed:57:5a:77:51:59:87:fa:e3:a0:e5:4d:43:c6:f3:77:9b:ec:
53:9f:7f:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI361+CI3fr/cr8r9qVCCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTNjMDZjYTc5NzZkNzM3YjIzYmM3Mjc2OGEyMjhjMzk3
ZmFmMmYwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzZjMjkzOTY4YmUwMDk4NWUxYTgzYzZhYzQ3MzgwNTc0MmExZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyeIX6go/utQHoHCNCCKITzaQp7+
7kfXIMccGvPlYSC8gyqJMOCaLohxvY+aEHWZW/AhRkzG7wrfGK1xn6R9edP9ATI1
GhDQkoV+f8njCRVnlPeQC14vejbmORK7/aW0TYXFF354b6oJW9X4W91tBZH5O74Z
ocJrNNXgXTwKuZIbHd9dyB0vnzC5HZzPGeTM4lRdFO9LnrH1t4Xoou7um/m8rCVB
qRypmUE5z+9FEBT3H5jLzTsPwWwgLWGYY0/8swWuNIvPJgmtlJu0qoVXwOKkpxoB
R4RrT8JqXceVO5uvXbecBrc1n+mGqlsiXfXa9UzXeP3v0Udg36XnAWlpXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExsKTlovgCYXhqDxqxHOAV0Kh5MMB8GA1UdIwQY
MBaAFB9TwGynl21zeyO8cnaKIow5f68vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2Mt
YmNlZmE0NTY1OGNjLzEvVEd3cE9XaS1BSmhlR29QR3JFYzRCWFFxSGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2MtYmNlZmE0NTY1OGNj
LzEvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYRkMA0G
CSqGSIb3DQEBCwUAA4IBAQC1Bsv0xWZtkGC3YqExofMMpWxrhYW1b2gfBSGdG1tW
s85JuJYlXgqBqUg2E++aFcgaUft9/hvJYmeI2/1TL4qaFMqLX+y6H0h7XjNhEvAi
Q6iY/MJNusRF1ZPdc69D4va1r8bLjefyimSScAymTyZLPPDbYfjy6twhxicjDFno
KP6EJnsEP96xU7a983Awj5R9sSweeo6VimRuQ8a5WNJb7KneNd8LnBhL9aAhmDo6
+k7D93sQ3inVpptbU2pgrkTImSlxFWi6nVKamlJIEE3QWDKEh4eCstQjb2p0R9lc
XxC6NikE+qvGT5ntV1p3UVmH+uOg5U1DxvN3m+xTn39K
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:12:22 2024 by rpki-client on console-fra.rpki-client.org