Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa
File: Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa (raw, json)
Hash identifier: +pN4Pd2383xnLXj68X32P7/s+lJrKmnV+dmvVXeVvZQ=
Subject key identifier: 63:80:C9:CF:E2:68:84:DD:06:62:68:0B:09:96:5D:C8:BF:CA:B9:BF
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018CC80164A4A19FA4AAEE77C36A66ED19EF
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64473
IP address blocks: 45.92.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:64:a4:a1:9f:a4:aa:ee:77:c3:6a:66:ed:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6380c9cfe26884dd0662680b09965dc8bfcab9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:bf:1b:63:49:f3:10:7a:62:4e:95:3f:0a:
bf:89:9f:8d:71:83:e8:56:0f:b7:f2:68:37:54:da:
8c:3e:4d:1b:9d:b7:66:68:52:65:98:26:73:92:e3:
32:49:f8:39:0a:56:de:13:ce:eb:b1:55:d4:e9:ba:
08:ae:44:74:1c:ef:d2:f7:e8:6b:9d:e2:13:fe:ab:
c9:4e:86:dc:cd:e0:95:0b:df:81:91:db:29:a1:7f:
f9:51:e4:97:31:91:d2:61:64:85:7b:0f:43:bf:09:
bf:ad:e5:59:7c:c3:93:7e:c6:2e:cc:d0:b9:df:16:
b5:39:b7:16:e4:b5:10:91:98:82:ce:b4:f7:6a:53:
0c:a4:85:fe:9d:68:d8:2c:ec:af:37:fa:19:c8:48:
a4:28:37:0a:c7:50:16:f8:29:45:a9:cc:c4:3f:fc:
f1:1b:0b:60:5c:7e:80:56:5c:b8:b6:77:27:eb:4d:
fa:c7:9e:6c:77:6d:6a:b0:73:f4:f2:3b:5d:3b:db:
99:7f:a9:e6:83:b7:d6:17:e0:d6:62:97:3b:55:4a:
ea:3f:f4:c8:e4:f0:73:c2:c7:1e:74:2d:bb:50:40:
e8:1d:9c:2f:52:1b:14:c8:19:5f:cf:87:66:f1:05:
7a:44:90:07:00:64:18:fd:83:b5:8b:1f:2a:b1:f7:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:80:C9:CF:E2:68:84:DD:06:62:68:0B:09:96:5D:C8:BF:CA:B9:BF
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/Y4DJz-JohN0GYmgLCZZdyL_Kub8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:37:d4:e1:a0:d5:75:28:60:42:d8:41:07:bf:48:18:d8:70:
69:7d:49:4e:eb:51:35:68:fd:b6:40:20:6f:85:88:d1:bb:bb:
b2:b1:d8:c6:8f:91:86:9c:8e:65:0c:58:a2:2d:76:9d:15:1e:
d2:1d:f1:f7:13:f3:b0:fb:ff:6a:76:dd:11:b9:5c:58:c3:84:
00:15:05:3a:ce:7b:e3:5b:f3:94:0e:b8:c3:fd:25:a1:1b:ff:
62:27:a9:b4:6f:5c:59:84:91:98:14:9d:c3:65:38:a1:00:f8:
64:98:9f:58:ab:36:7b:2b:84:cb:67:e2:49:21:92:d8:96:7e:
b4:a3:74:cb:d0:91:62:08:be:08:54:e3:46:bf:2d:e7:9e:96:
f5:2a:83:74:f5:9a:3f:97:f8:48:3b:05:ad:a7:6c:33:84:ce:
84:36:97:10:94:0e:29:b4:a7:b1:48:97:88:50:c9:a2:88:57:
ee:b5:95:38:98:70:cb:23:7f:b0:d6:dd:c0:31:83:59:57:3d:
ad:c9:f4:6e:d9:85:16:b7:3f:d9:be:9b:5c:5d:be:2f:44:c8:
0d:95:ab:9d:a9:51:d9:76:da:ee:3c:24:16:65:6d:2a:e6:61:
6f:c5:f3:7b:bf:fe:0a:fb:ce:85:da:cd:ea:e6:5f:1d:e4:60:
a1:f7:cf:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAWSkoZ+kqu53w2pm7RnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjQwMTAyMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzgwYzljZmUyNjg4NGRkMDY2MjY4MGIwOTk2NWRjOGJmY2FiOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpS/G2NJ8xB6Yk6VPwq/iZ+NcYPo
Vg+38mg3VNqMPk0bnbdmaFJlmCZzkuMySfg5ClbeE87rsVXU6boIrkR0HO/S9+hr
neIT/qvJTobczeCVC9+BkdspoX/5UeSXMZHSYWSFew9Dvwm/reVZfMOTfsYuzNC5
3xa1ObcW5LUQkZiCzrT3alMMpIX+nWjYLOyvN/oZyEikKDcKx1AW+ClFqczEP/zx
GwtgXH6AVly4tncn6036x55sd21qsHP08jtdO9uZf6nmg7fWF+DWYpc7VUrqP/TI
5PBzwscedC27UEDoHZwvUhsUyBlfz4dm8QV6RJAHAGQY/YO1ix8qsfdGFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGOAyc/iaITdBmJoCwmWXci/yrm/MB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvWTRESnotSm9oTjBHWW1nTENaWmR5TF9LdWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwoMA0G
CSqGSIb3DQEBCwUAA4IBAQBqN9ThoNV1KGBC2EEHv0gY2HBpfUlO61E1aP22QCBv
hYjRu7uysdjGj5GGnI5lDFiiLXadFR7SHfH3E/Ow+/9qdt0RuVxYw4QAFQU6znvj
W/OUDrjD/SWhG/9iJ6m0b1xZhJGYFJ3DZTihAPhkmJ9YqzZ7K4TLZ+JJIZLYln60
o3TL0JFiCL4IVONGvy3nnpb1KoN09Zo/l/hIOwWtp2wzhM6ENpcQlA4ptKexSJeI
UMmiiFfutZU4mHDLI3+w1t3AMYNZVz2tyfRu2YUWtz/ZvptcXb4vRMgNlaudqVHZ
dtruPCQWZW0q5mFvxfN7v/4K+86F2s3q5l8d5GCh989b
-----END CERTIFICATE-----
Generated at Tue Jun 25 23:14:22 2024 by rpki-client on console-ams.rpki-client.org