Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NiX0Lb3LkEajI8T3aGwR8NvzKGw.roa
File: NiX0Lb3LkEajI8T3aGwR8NvzKGw.roa (raw, json)
Hash identifier: hqIANFi6m7jJgEWgdb/vS1madShb0Abt97m07gl99vs=
Subject key identifier: 36:25:F4:2D:BD:CB:90:46:A3:23:C4:F7:68:6C:11:F0:DB:F3:28:6C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB58A98E16413D860CEC04426D8A2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NiX0Lb3LkEajI8T3aGwR8NvzKGw.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210740
IP address blocks: 45.128.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b5:8a:98:e1:64:13:d8:60:ce:c0:44:26:d8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3625f42dbdcb9046a323c4f7686c11f0dbf3286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:7c:ee:8e:e0:83:00:90:71:e0:60:41:b2:
4b:b7:eb:91:59:9e:07:86:94:40:86:d6:10:59:f1:
5d:95:b4:33:4e:c1:fe:00:2f:23:05:95:6c:53:27:
ce:78:26:d1:87:98:ec:c9:15:59:23:ff:8b:6d:cb:
15:b7:47:63:70:85:5a:b1:bb:6f:e0:92:02:94:a2:
9b:66:b7:1d:27:02:69:ce:cf:c9:5c:fb:fd:be:6b:
ba:48:29:9b:69:48:d9:88:e8:f7:d5:f9:14:cf:3e:
14:a5:d4:88:8f:ed:d4:70:1f:52:2e:dc:97:58:f5:
5a:4c:a5:65:43:6a:2b:7a:ef:02:f9:1e:99:5d:9c:
7e:d1:b6:d1:49:7f:d3:72:b9:89:a6:c2:db:f0:24:
24:d3:e4:f0:fe:c3:b6:63:89:5c:b1:1b:a9:60:21:
8d:5a:46:02:a6:ed:8d:32:bf:eb:35:33:10:2f:2a:
89:24:65:b1:5c:a1:19:62:a0:30:7e:fb:31:a3:38:
23:b1:da:bb:aa:b8:9e:3c:5f:96:58:c1:ac:08:38:
d9:7e:20:fd:cb:a6:53:3d:48:70:60:96:db:e6:41:
64:db:2b:06:e0:44:96:db:b3:2d:a0:18:b4:ca:a0:
f0:25:9d:ed:70:66:b6:30:5c:44:9a:62:5b:b9:0f:
10:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:25:F4:2D:BD:CB:90:46:A3:23:C4:F7:68:6C:11:F0:DB:F3:28:6C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/NiX0Lb3LkEajI8T3aGwR8NvzKGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ea:a4:dd:0f:49:d8:f7:46:fb:d6:3d:36:77:01:8b:e3:25:
25:2a:e6:af:bb:dc:eb:dc:d6:48:75:47:d1:8c:e7:7f:9e:15:
e0:51:a7:16:77:4a:4d:07:1d:33:b2:5a:fc:31:58:d7:86:c0:
64:15:23:3c:0c:1f:5e:1b:99:d3:cd:2e:7d:ff:8d:e5:6e:00:
cc:85:ab:96:32:5a:39:7b:91:99:af:16:a3:2e:cb:e6:6c:03:
21:60:b6:45:cf:67:0f:22:33:2d:aa:a2:f9:7f:1d:0d:3c:cc:
8f:86:f5:b1:7b:62:86:c1:e7:d8:f4:ce:f4:84:f0:d2:be:ba:
c5:78:64:ee:80:39:a1:a1:af:af:87:7a:7d:8f:39:b7:a9:ee:
44:79:d8:5e:09:37:21:5d:b8:6c:e2:98:7c:b3:35:f4:41:a4:
37:80:d7:20:6e:2c:42:4e:c6:30:0e:c4:de:fe:66:8d:0e:96:
86:7d:97:84:60:c8:b7:7e:ad:24:97:74:44:94:70:9d:cd:9f:
3c:59:c4:93:f8:5d:09:13:37:6e:f5:ba:56:94:f9:00:e2:2a:
69:94:4e:7d:78:b2:90:e0:36:9b:67:8f:1b:88:9f:1d:e6:13:
97:a7:f0:00:2f:64:19:20:2d:0e:b5:a8:97:6d:da:7b:38:48:
02:5a:53:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb7WKmOFkE9hgzsBEJtiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjI1ZjQyZGJkY2I5MDQ2YTMyM2M0Zjc2ODZjMTFmMGRiZjMyODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIF87o7ggwCQceBgQbJLt+uRWZ4H
hpRAhtYQWfFdlbQzTsH+AC8jBZVsUyfOeCbRh5jsyRVZI/+LbcsVt0djcIVasbtv
4JIClKKbZrcdJwJpzs/JXPv9vmu6SCmbaUjZiOj31fkUzz4UpdSIj+3UcB9SLtyX
WPVaTKVlQ2oreu8C+R6ZXZx+0bbRSX/TcrmJpsLb8CQk0+Tw/sO2Y4lcsRupYCGN
WkYCpu2NMr/rNTMQLyqJJGWxXKEZYqAwfvsxozgjsdq7qriePF+WWMGsCDjZfiD9
y6ZTPUhwYJbb5kFk2ysG4ESW27MtoBi0yqDwJZ3tcGa2MFxEmmJbuQ8QDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYl9C29y5BGoyPE92hsEfDb8yhsMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvTmlYMExiM0xrRWFqSThUM2FHd1I4TnZ6S0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDFMA0G
CSqGSIb3DQEBCwUAA4IBAQCg6qTdD0nY90b71j02dwGL4yUlKuavu9zr3NZIdUfR
jOd/nhXgUacWd0pNBx0zslr8MVjXhsBkFSM8DB9eG5nTzS59/43lbgDMhauWMlo5
e5GZrxajLsvmbAMhYLZFz2cPIjMtqqL5fx0NPMyPhvWxe2KGwefY9M70hPDSvrrF
eGTugDmhoa+vh3p9jzm3qe5EedheCTchXbhs4ph8szX0QaQ3gNcgbixCTsYwDsTe
/maNDpaGfZeEYMi3fq0kl3RElHCdzZ88WcST+F0JEzdu9bpWlPkA4ipplE59eLKQ
4DabZ48biJ8d5hOXp/AAL2QZIC0OtaiXbdp7OEgCWlMW
-----END CERTIFICATE-----
Generated at Fri May 17 09:04:19 2024 by rpki-client on console-fra.rpki-client.org