Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/tTmI3SbUTMEtPJO7ar4QADZl2AM.roa
File: tTmI3SbUTMEtPJO7ar4QADZl2AM.roa (raw, json)
Hash identifier: E2sPfv4dqqKXrj9f7hSM74WnjHXYi6R9aubjtYMefMk=
Subject key identifier: B5:39:88:DD:26:D4:4C:C1:2D:3C:93:BB:6A:BE:10:00:36:65:D8:03
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 018CC7266CC1FDE108C4163A625528C564DC
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/tTmI3SbUTMEtPJO7ar4QADZl2AM.roa
Signing time: Mon 01 Jan 2024 22:30:33 +0000
ROA not before: Mon 01 Jan 2024 22:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212097
IP address blocks: 45.81.88.0/24 maxlen: 24
45.81.89.0/24 maxlen: 24
45.81.90.0/24 maxlen: 24
45.81.91.0/24 maxlen: 24
45.81.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:6c:c1:fd:e1:08:c4:16:3a:62:55:28:c5:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jan 1 22:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b53988dd26d44cc12d3c93bb6abe10003665d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:77:de:95:9e:ab:dc:d1:9a:48:09:fd:e8:
c1:d6:37:75:39:7e:a4:d8:2a:50:b3:25:d3:48:21:
31:50:99:47:11:34:ff:23:95:d8:5a:e8:7b:bb:d6:
9f:f5:d5:ad:ee:74:a8:c5:9f:fa:0d:8a:68:3b:22:
a6:21:1b:7f:1b:62:94:87:f8:00:34:ed:98:ec:83:
fa:0e:b7:a5:de:51:c9:d6:d6:2c:f5:f3:60:e6:0e:
5a:9f:50:7d:35:90:bc:39:46:70:91:4c:b1:72:8b:
fa:83:89:f5:92:fe:38:71:b7:1e:dd:f6:4b:57:e4:
b1:6c:91:78:77:04:9f:18:19:b4:43:ab:36:bc:4a:
f9:a5:9a:0d:aa:f9:51:b9:72:69:41:06:f5:58:e9:
cf:e5:cd:29:e3:5a:6e:df:1f:c9:fb:37:36:27:26:
41:bc:e0:65:49:02:e8:d8:f3:06:9c:4c:fd:3b:3b:
5a:62:ce:dd:e6:75:55:20:f4:06:84:e3:22:6a:e0:
b2:03:4f:87:31:2c:bd:f4:c4:04:c1:31:73:95:24:
31:a5:85:0f:ce:eb:1d:90:78:1e:ba:6f:9d:b8:a8:
3d:6a:78:2d:6d:6e:4c:06:82:72:b3:40:e8:c4:8d:
b4:8f:42:ec:ba:38:88:5f:dd:9b:88:eb:f8:b7:9e:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:39:88:DD:26:D4:4C:C1:2D:3C:93:BB:6A:BE:10:00:36:65:D8:03
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/tTmI3SbUTMEtPJO7ar4QADZl2AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:a9:90:8f:77:4d:fa:bc:ed:ec:b1:72:77:86:2f:d4:d0:de:
40:6e:47:c0:5f:5a:f3:80:b0:98:62:d2:3e:b3:94:26:aa:2f:
3f:f5:fa:48:06:88:e3:85:92:e5:cb:19:39:97:46:5f:14:8b:
c0:c8:8e:22:b0:48:cc:15:0a:3d:e0:dc:2e:b7:11:65:d0:3f:
eb:ff:e4:b4:dd:56:81:9e:f9:62:34:cc:e7:b1:ae:09:35:12:
ac:8c:b8:af:6b:a1:9c:43:d2:5d:73:50:26:58:02:16:4b:b9:
33:dd:7c:77:05:fb:cc:36:85:18:ee:e4:39:4a:f8:61:ea:3f:
de:32:52:89:bd:27:03:b4:c8:fe:da:27:e6:a4:2a:b5:41:73:
8d:6a:45:12:6e:e0:3b:fe:78:47:b6:14:3b:0a:b6:d6:a3:bd:
ff:47:ff:85:f0:ab:c6:4f:79:70:8f:c7:cd:1a:95:80:08:6a:
76:ac:31:3a:e5:7d:3f:33:da:7e:06:29:4a:0f:46:7e:7c:4c:
a9:88:46:7e:a2:a8:4c:6c:a7:25:87:71:8c:5e:ff:43:d3:b5:
30:1c:b1:b5:10:59:6a:be:70:2f:98:31:ad:7a:5e:1a:77:cc:
17:ee:b9:40:62:38:5f:4d:d6:8b:17:a0:c7:c6:7b:21:91:46:
ec:8b:08:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJmzB/eEIxBY6YlUoxWTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2
YTA1YmIwHhcNMjQwMTAxMjIzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTM5ODhkZDI2ZDQ0Y2MxMmQzYzkzYmI2YWJlMTAwMDM2NjVkODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhx33pWeq9zRmkgJ/ejB1jd1OX6k
2CpQsyXTSCExUJlHETT/I5XYWuh7u9af9dWt7nSoxZ/6DYpoOyKmIRt/G2KUh/gA
NO2Y7IP6Drel3lHJ1tYs9fNg5g5an1B9NZC8OUZwkUyxcov6g4n1kv44cbce3fZL
V+SxbJF4dwSfGBm0Q6s2vEr5pZoNqvlRuXJpQQb1WOnP5c0p41pu3x/J+zc2JyZB
vOBlSQLo2PMGnEz9OztaYs7d5nVVIPQGhOMiauCyA0+HMSy99MQEwTFzlSQxpYUP
zusdkHgeum+duKg9angtbW5MBoJys0DoxI20j0LsujiIX92biOv4t56+3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLU5iN0m1EzBLTyTu2q+EAA2ZdgDMB8GA1UdIwQY
MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt
MmQ5NTM2MDBmZjM3LzEvdFRtSTNTYlVUTUV0UEpPN2FyNFFBRFpsMkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3
LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFYMA0G
CSqGSIb3DQEBCwUAA4IBAQCdqZCPd036vO3ssXJ3hi/U0N5AbkfAX1rzgLCYYtI+
s5Qmqi8/9fpIBojjhZLlyxk5l0ZfFIvAyI4isEjMFQo94NwutxFl0D/r/+S03VaB
nvliNMznsa4JNRKsjLiva6GcQ9Jdc1AmWAIWS7kz3Xx3BfvMNoUY7uQ5Svhh6j/e
MlKJvScDtMj+2ifmpCq1QXONakUSbuA7/nhHthQ7CrbWo73/R/+F8KvGT3lwj8fN
GpWACGp2rDE65X0/M9p+BilKD0Z+fEypiEZ+oqhMbKclh3GMXv9D07UwHLG1EFlq
vnAvmDGtel4ad8wX7rlAYjhfTdaLF6DHxnshkUbsiwg0
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:37:32 2024 by rpki-client on console-ams.rpki-client.org