Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/gIm3wnvf3iiUE3bXwrbopFB6Fnc.roa
File: gIm3wnvf3iiUE3bXwrbopFB6Fnc.roa (raw, json)
Hash identifier: L7yDsacUGB6FPm3Vzj5lNAcYFcKQ9vN9f92hzko1fxg=
Subject key identifier: 80:89:B7:C2:7B:DF:DE:28:94:13:76:D7:C2:B6:E8:A4:50:7A:16:77
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018D5A82D375AEE432C8EAD24615EE126720
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/gIm3wnvf3iiUE3bXwrbopFB6Fnc.roa
Signing time: Tue 30 Jan 2024 13:15:39 +0000
ROA not before: Tue 30 Jan 2024 13:15:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:82:d3:75:ae:e4:32:c8:ea:d2:46:15:ee:12:67:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 30 13:15:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8089b7c27bdfde28941376d7c2b6e8a4507a1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:db:a4:d3:ad:fc:2d:77:80:69:a4:8c:06:
52:99:46:c1:cc:73:62:be:97:83:b9:84:5c:f7:55:
d5:45:d0:69:0c:42:6e:1d:77:86:65:e8:49:ef:4e:
71:2e:d2:dd:30:37:27:eb:88:1a:77:62:98:d4:ec:
cf:eb:e2:49:f1:6b:14:72:b8:f6:c7:18:3e:51:dd:
09:4e:2d:a6:0d:72:cd:12:41:2a:b8:33:82:20:69:
3c:6c:8c:d6:da:0c:63:bf:b8:7b:89:80:22:af:61:
25:cd:33:95:bb:90:9c:4c:ee:6f:d8:64:39:7a:ae:
09:dd:9c:67:33:70:31:98:9d:39:f0:a9:7d:42:a7:
0f:06:47:74:49:64:f2:57:52:07:72:d3:b6:58:5a:
a8:13:68:0f:52:76:86:25:9b:67:ba:79:4d:a6:bd:
25:a8:81:bc:3c:4a:a3:a4:60:09:c1:cf:73:7a:1a:
37:14:c1:54:bf:ff:b3:bc:ed:9a:46:34:d1:50:fb:
0c:97:a1:d8:82:d1:cc:b1:6f:ce:15:71:03:9a:d8:
3c:f6:30:3b:6b:e4:9f:d1:05:d8:71:1f:bb:16:4a:
6e:ae:a4:86:23:cf:02:c8:76:c5:75:6c:a6:78:98:
8c:52:4b:5e:64:9c:77:55:01:83:f6:e3:06:23:d3:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:B7:C2:7B:DF:DE:28:94:13:76:D7:C2:B6:E8:A4:50:7A:16:77
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/gIm3wnvf3iiUE3bXwrbopFB6Fnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
67:bd:59:79:80:67:fc:14:a6:2a:2b:66:c1:a6:e1:ad:60:98:
8a:18:9b:bf:94:4c:96:37:3c:79:15:9a:0c:f2:d5:77:ca:fc:
a2:40:8c:80:df:63:31:72:4a:2c:3e:61:5d:c7:90:42:f5:ab:
e1:e2:f9:b0:e3:5e:b2:17:7e:aa:72:5f:92:42:b6:3d:8c:d4:
88:44:ea:15:58:ab:88:91:00:42:e8:cd:b8:0b:fa:55:b5:9b:
ff:ff:6b:07:9e:a6:9a:6d:18:fb:95:6a:d7:d8:ae:d6:76:2d:
39:8e:cf:d0:ca:39:d0:1a:2f:9a:15:81:e0:1d:03:48:5e:2c:
db:6c:98:e6:97:68:68:ae:3f:29:8e:6b:80:ee:7e:3d:64:10:
22:a4:f2:1c:c4:5f:e5:c6:43:81:b6:b8:c8:d1:1a:48:81:e8:
a5:63:fe:1a:42:d3:48:80:df:bd:1a:eb:bc:ca:16:1f:ed:a0:
37:29:63:87:d9:e8:85:7b:c5:d3:56:a6:19:61:4f:bd:3a:8e:
f2:06:72:0e:1a:2b:5e:6c:92:9d:e7:80:d3:7a:b9:23:02:66:
21:b6:f2:69:ea:9c:06:61:71:a5:ec:f1:5e:5f:7e:c7:c0:61:
ff:ef:72:2d:3a:13:7a:52:8e:60:7f:97:16:9c:c2:06:06:7a:
11:f8:fe:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1agtN1ruQyyOrSRhXuEmcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjQwMTMwMTMxNTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDg5YjdjMjdiZGZkZTI4OTQxMzc2ZDdjMmI2ZThhNDUwN2ExNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHHbpNOt/C13gGmkjAZSmUbBzHNi
vpeDuYRc91XVRdBpDEJuHXeGZehJ705xLtLdMDcn64gad2KY1OzP6+JJ8WsUcrj2
xxg+Ud0JTi2mDXLNEkEquDOCIGk8bIzW2gxjv7h7iYAir2ElzTOVu5CcTO5v2GQ5
eq4J3ZxnM3AxmJ058Kl9QqcPBkd0SWTyV1IHctO2WFqoE2gPUnaGJZtnunlNpr0l
qIG8PEqjpGAJwc9zeho3FMFUv/+zvO2aRjTRUPsMl6HYgtHMsW/OFXEDmtg89jA7
a+Sf0QXYcR+7FkpurqSGI88CyHbFdWymeJiMUkteZJx3VQGD9uMGI9NgKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICJt8J7394olBN218K26KRQehZ3MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvZ0ltM3dudmYzaWlVRTNiWHdyYm9wRkI2Rm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZGaMA0G
CSqGSIb3DQEBCwUAA4IBAQBnvVl5gGf8FKYqK2bBpuGtYJiKGJu/lEyWNzx5FZoM
8tV3yvyiQIyA32MxckosPmFdx5BC9avh4vmw416yF36qcl+SQrY9jNSIROoVWKuI
kQBC6M24C/pVtZv//2sHnqaabRj7lWrX2K7Wdi05js/QyjnQGi+aFYHgHQNIXizb
bJjml2horj8pjmuA7n49ZBAipPIcxF/lxkOBtrjI0RpIgeilY/4aQtNIgN+9Guu8
yhYf7aA3KWOH2eiFe8XTVqYZYU+9Oo7yBnIOGitebJKd54DTerkjAmYhtvJp6pwG
YXGl7PFeX37HwGH/73ItOhN6Uo5gf5cWnMIGBnoR+P69
-----END CERTIFICATE-----
Generated at Thu May 2 15:29:35 2024 by rpki-client on console-ams.rpki-client.org