Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fb18n6zKMEzfM01gSDYa_LgsUZw.roa
File: fb18n6zKMEzfM01gSDYa_LgsUZw.roa (raw, json)
Hash identifier: FCVitEsXOfJDUD3J7vStHigQ+B7FesnTDjhwfKmYPb4=
Subject key identifier: 7D:BD:7C:9F:AC:CA:30:4C:DF:33:4D:60:48:36:1A:FC:B8:2C:51:9C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA03FCBDB9D7A0F1CC381168F9B52
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fb18n6zKMEzfM01gSDYa_LgsUZw.roa
Signing time: Tue 02 Jan 2024 04:30:07 +0000
ROA not before: Tue 02 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6848
IP address blocks: 45.131.63.0/24 maxlen: 24
45.131.62.0/24 maxlen: 24
2a07:e347::/32 maxlen: 32
2a07:e346::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a0:3f:cb:db:9d:7a:0f:1c:c3:81:16:8f:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbd7c9facca304cdf334d6048361afcb82c519c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:6c:ef:41:cf:d3:38:97:2a:c0:b2:62:65:
bf:74:af:71:b9:92:9a:e5:f4:3a:d4:32:71:25:8b:
df:71:00:f4:53:ec:ac:f2:dc:0b:c8:be:48:59:d4:
9f:ad:d6:81:f7:bc:12:da:c2:ca:70:64:43:ab:ae:
b7:3c:15:1a:ec:fe:71:61:64:f9:69:c1:25:c1:21:
eb:83:10:1a:a2:da:c3:05:0d:e2:64:c4:99:1d:23:
3e:01:ec:67:28:dd:4c:0a:d4:23:c5:34:1e:49:60:
56:ee:d5:f4:81:0b:89:34:2a:d9:2f:eb:99:2c:71:
b3:31:e1:3b:5b:2e:28:0e:46:9f:c8:1b:f4:b7:d3:
ab:c5:c4:f7:e7:96:45:d2:9d:98:cf:82:d4:db:c9:
a8:88:68:6a:d2:4c:bc:0d:80:f7:2a:e2:ca:11:cc:
59:8b:13:ea:68:b4:2d:c0:88:d0:43:93:ae:ca:af:
9b:12:d4:dc:46:91:13:2d:61:3a:78:6b:02:bc:b3:
90:68:b8:1a:af:fb:45:82:1d:47:4c:ef:da:08:94:
3e:58:92:e5:68:b5:4d:ba:cc:00:08:89:ac:9a:cf:
9d:28:f6:9a:7e:a6:0d:c6:85:ad:5f:33:41:f2:33:
64:2c:b5:4e:83:8f:b5:23:e8:42:68:6c:a4:4f:ba:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BD:7C:9F:AC:CA:30:4C:DF:33:4D:60:48:36:1A:FC:B8:2C:51:9C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/fb18n6zKMEzfM01gSDYa_LgsUZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.62.0/23
IPv6:
2a07:e346::/31
Signature Algorithm: sha256WithRSAEncryption
bc:17:54:12:98:d0:e9:da:fe:8c:72:4b:74:eb:6e:d2:ad:dc:
76:0c:c8:89:a5:fa:63:c0:0b:d2:13:b6:a9:e6:e4:b5:85:f7:
02:b8:63:57:cf:05:91:db:66:d8:e0:8a:09:bd:af:1b:09:c1:
75:8f:0e:c8:41:33:db:3f:b5:96:a8:91:d2:33:9d:70:eb:72:
26:5e:c5:b8:13:86:f0:28:f6:fd:1a:6f:96:80:17:67:7a:e4:
77:f2:17:87:a9:f4:0d:4c:e4:51:ec:9f:75:00:c7:98:3a:78:
0f:db:1c:bc:cf:55:3c:7c:48:af:bb:9d:d9:0b:b0:2f:3c:35:
7a:b4:7b:e6:2d:2e:ae:5b:1f:02:29:fc:94:4b:7c:f2:1a:79:
d2:f7:40:3c:f2:d2:26:a3:e7:c2:5f:01:12:77:d6:b8:30:8f:
4d:a1:39:45:5f:54:39:2b:72:38:27:bb:64:f1:2c:dd:d1:ad:
81:24:66:ee:08:6f:58:24:9d:41:f4:a7:c6:fc:0b:34:f6:8b:
ed:4a:cf:dc:53:80:28:ef:fd:0e:7e:ef:2c:be:54:6b:c3:a5:
cc:47:99:4e:b7:40:7f:63:2b:6a:8f:de:52:ac:cf:0a:ed:ca:
0f:8d:09:00:35:3c:70:47:35:78:00:3d:32:0f:fb:59:5b:09:
ca:f9:b7:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIb6A/y9udeg8cw4EWj5tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGJkN2M5ZmFjY2EzMDRjZGYzMzRkNjA0ODM2MWFmY2I4MmM1MTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy9s70HP0ziXKsCyYmW/dK9xuZKa
5fQ61DJxJYvfcQD0U+ys8twLyL5IWdSfrdaB97wS2sLKcGRDq663PBUa7P5xYWT5
acElwSHrgxAaotrDBQ3iZMSZHSM+AexnKN1MCtQjxTQeSWBW7tX0gQuJNCrZL+uZ
LHGzMeE7Wy4oDkafyBv0t9OrxcT355ZF0p2Yz4LU28moiGhq0ky8DYD3KuLKEcxZ
ixPqaLQtwIjQQ5Ouyq+bEtTcRpETLWE6eGsCvLOQaLgar/tFgh1HTO/aCJQ+WJLl
aLVNuswACImsms+dKPaafqYNxoWtXzNB8jNkLLVOg4+1I+hCaGykT7qQrwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH29fJ+syjBM3zNNYEg2Gvy4LFGcMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvZmIxOG42ektNRXpmTTAxZ1NEWWFfTGdzVVp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLYM+MA0E
AgACMAcDBQEqB+NGMA0GCSqGSIb3DQEBCwUAA4IBAQC8F1QSmNDp2v6Mckt0627S
rdx2DMiJpfpjwAvSE7ap5uS1hfcCuGNXzwWR22bY4IoJva8bCcF1jw7IQTPbP7WW
qJHSM51w63ImXsW4E4bwKPb9Gm+WgBdneuR38heHqfQNTORR7J91AMeYOngP2xy8
z1U8fEivu53ZC7AvPDV6tHvmLS6uWx8CKfyUS3zyGnnS90A88tImo+fCXwESd9a4
MI9NoTlFX1Q5K3I4J7tk8Szd0a2BJGbuCG9YJJ1B9KfG/As09ovtSs/cU4Ao7/0O
fu8svlRrw6XMR5lOt0B/Yytqj95SrM8K7coPjQkANTxwRzV4AD0yD/tZWwnK+bdi
-----END CERTIFICATE-----
Generated at Fri May 17 07:06:24 2024 by rpki-client on console-fra.rpki-client.org