Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/dU-bYGcwmOrB1zeAi7zO9oJVuhE.roa
File: dU-bYGcwmOrB1zeAi7zO9oJVuhE.roa (raw, json)
Hash identifier: +P7aaMev+MF0oM8DOVa/FyFKFPaanwokhu9pbNWCIto=
Subject key identifier: 75:4F:9B:60:67:30:98:EA:C1:D7:37:80:8B:BC:CE:F6:82:55:BA:11
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018CCA2A3BE4DBC5E23A4DB75D78C90CD1C9
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/dU-bYGcwmOrB1zeAi7zO9oJVuhE.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48716
IP address blocks: 45.82.14.0/24 maxlen: 24
91.200.151.0/24 maxlen: 24
91.200.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3b:e4:db:c5:e2:3a:4d:b7:5d:78:c9:0c:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=754f9b60673098eac1d737808bbccef68255ba11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:fc:b1:90:c0:bf:06:1b:33:76:b9:65:48:
fc:2a:34:01:f1:62:96:8d:8f:a2:59:c5:61:16:e0:
5e:01:dd:1c:7e:3f:04:cf:65:7b:84:4b:ae:de:b6:
61:00:5a:43:95:2c:e4:b9:4a:6b:06:3a:13:7e:3f:
e8:18:53:85:c9:c9:b6:73:d6:ca:2f:65:b8:20:9c:
ef:36:70:12:df:34:36:9d:c9:22:66:f6:56:f1:08:
85:9c:85:a0:cf:08:5c:fa:e7:4b:76:3e:00:aa:38:
16:79:aa:64:93:30:f5:d4:df:a2:73:ea:9f:06:6e:
7e:db:22:76:aa:fd:e1:b3:db:0b:c8:8c:65:f6:47:
3a:d2:f1:4d:f8:09:03:17:ad:d1:95:31:61:b5:1b:
8b:8e:50:df:e8:3d:2c:9c:c8:9c:3b:fd:fa:1f:77:
b4:b3:0e:b7:df:02:49:b7:57:ba:60:d1:e0:6f:d9:
df:79:ac:df:bc:ca:4e:86:ef:19:d7:41:12:87:a7:
05:50:0c:5c:c1:5f:59:86:e8:32:fc:4e:44:e7:34:
83:fd:68:63:e9:f8:e2:25:1a:bc:3a:99:b7:e5:50:
e7:92:fa:bc:44:19:54:b2:9b:41:94:53:40:b8:5a:
b0:8d:54:74:35:d9:4f:4c:3a:13:55:04:7b:ae:01:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4F:9B:60:67:30:98:EA:C1:D7:37:80:8B:BC:CE:F6:82:55:BA:11
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/dU-bYGcwmOrB1zeAi7zO9oJVuhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.14.0/24
91.200.148.0/24
91.200.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ac:27:44:95:e3:98:35:9f:61:9e:93:a6:10:88:a9:47:3a:
5d:c4:59:8f:5a:f2:13:9a:4a:fc:81:20:64:d2:73:18:da:23:
84:0d:72:2e:3a:23:74:d3:23:84:95:fe:30:c0:83:8f:41:9f:
62:ef:4a:a3:69:30:e9:e6:bf:f4:aa:6e:36:90:de:64:a2:42:
c1:1e:1b:90:23:62:4d:a6:1e:92:d6:1b:96:dd:77:ed:de:41:
d0:33:18:c3:79:45:4f:a0:69:fa:76:e6:59:ab:1e:b3:01:ea:
03:98:db:b8:5d:56:9b:e4:2a:38:30:fd:5a:e3:a5:45:ae:0a:
64:c2:40:a0:12:63:b4:d6:79:63:fa:8d:74:37:4e:70:cd:18:
12:64:e3:ee:d1:c8:8d:a2:1d:ed:4d:17:bb:51:11:d5:ef:90:
00:44:cd:bd:44:e3:c7:54:9d:69:9a:c0:14:bb:52:e8:24:11:
d9:e8:84:52:62:ee:c2:1c:f6:ad:07:d2:8d:44:e6:17:f4:9f:
8a:bf:93:6c:fd:31:72:66:cb:09:a3:4d:80:0b:c6:fb:c8:a1:
73:ff:e1:7d:7d:9d:bd:a5:1e:21:6d:2e:85:45:c3:35:ea:8a:
25:64:2a:68:92:b8:a3:68:6a:5e:12:64:15:f1:07:a5:99:2b:
b4:18:2e:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKKjvk28XiOk23XXjJDNHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjQwMTAyMTIzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTRmOWI2MDY3MzA5OGVhYzFkNzM3ODA4YmJjY2VmNjgyNTViYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT78sZDAvwYbM3a5ZUj8KjQB8WKW
jY+iWcVhFuBeAd0cfj8Ez2V7hEuu3rZhAFpDlSzkuUprBjoTfj/oGFOFycm2c9bK
L2W4IJzvNnAS3zQ2nckiZvZW8QiFnIWgzwhc+udLdj4AqjgWeapkkzD11N+ic+qf
Bm5+2yJ2qv3hs9sLyIxl9kc60vFN+AkDF63RlTFhtRuLjlDf6D0snMicO/36H3e0
sw633wJJt1e6YNHgb9nfeazfvMpOhu8Z10ESh6cFUAxcwV9Zhugy/E5E5zSD/Whj
6fjiJRq8Opm35VDnkvq8RBlUsptBlFNAuFqwjVR0NdlPTDoTVQR7rgGNbQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHVPm2BnMJjqwdc3gIu8zvaCVboRMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvZFUtYllHY3dtT3JCMXplQWk3ek85b0pWdWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVIOAwQA
W8iUAwQAW8iXMA0GCSqGSIb3DQEBCwUAA4IBAQAqrCdEleOYNZ9hnpOmEIipRzpd
xFmPWvITmkr8gSBk0nMY2iOEDXIuOiN00yOElf4wwIOPQZ9i70qjaTDp5r/0qm42
kN5kokLBHhuQI2JNph6S1huW3Xft3kHQMxjDeUVPoGn6duZZqx6zAeoDmNu4XVab
5Co4MP1a46VFrgpkwkCgEmO01nlj+o10N05wzRgSZOPu0ciNoh3tTRe7URHV75AA
RM29ROPHVJ1pmsAUu1LoJBHZ6IRSYu7CHPatB9KNROYX9J+Kv5Ns/TFyZssJo02A
C8b7yKFz/+F9fZ29pR4hbS6FRcM16oolZCpokrijaGpeEmQV8QelmSu0GC6T
-----END CERTIFICATE-----
Generated at Sat May 11 18:58:37 2024 by rpki-client on console-fra.rpki-client.org