Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nJFQRvzxAVvSH11XFYY4f-mn_lQ.roa
File: nJFQRvzxAVvSH11XFYY4f-mn_lQ.roa (raw, json)
Hash identifier: vg+lRsnixnXlzyUVA+N/mJESQCDhZZQ0SNkN0K0j2AM=
Subject key identifier: 9C:91:50:46:FC:F1:01:5B:D2:1F:5D:57:15:86:38:7F:E9:A7:FE:54
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB025B3FAD9F0741769E39F45FE9C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nJFQRvzxAVvSH11XFYY4f-mn_lQ.roa
Signing time: Tue 02 Jan 2024 04:30:11 +0000
ROA not before: Tue 02 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199524
IP address blocks: 45.130.137.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 03:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b0:25:b3:fa:d9:f0:74:17:69:e3:9f:45:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c915046fcf1015bd21f5d571586387fe9a7fe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:a2:f8:f9:62:21:5c:a5:fa:e9:5f:c2:a9:
ff:74:fd:b5:06:59:7b:54:a9:87:ee:30:0e:e8:da:
05:03:9c:76:32:93:c9:97:c6:c2:0b:c5:9f:c7:0c:
fe:04:c7:e3:fd:61:69:7b:7e:a9:18:98:1f:98:26:
df:51:77:67:d4:02:de:58:36:2c:5d:bc:79:eb:86:
3e:74:80:55:a4:2c:21:78:24:d5:07:a5:01:cc:9a:
5f:19:84:0a:e3:5e:e0:ac:c6:e2:6f:d0:49:a4:e7:
cb:93:41:b8:59:e3:4e:b9:b6:50:a5:46:9c:69:37:
28:5c:92:55:5a:99:3d:1c:60:23:46:c4:fc:6d:75:
9e:a7:39:22:47:94:04:78:c3:5d:15:fe:c1:fd:1d:
6f:c7:37:c2:3c:7a:13:c9:3c:ec:14:37:c8:46:2e:
16:7b:38:43:b4:29:ec:cf:ec:68:a1:05:54:3b:11:
77:7f:f9:c2:e5:a1:db:b3:09:44:cc:64:e2:c1:bc:
27:67:b0:de:07:a1:f2:ea:bc:dd:9e:91:c9:5c:e6:
79:ac:6a:42:91:34:b9:f5:a6:6d:db:65:1c:fc:e9:
2d:8b:65:7e:f6:78:6b:66:a7:e4:63:d2:86:6f:70:
da:7d:7b:57:b7:42:fe:a4:9d:37:1d:d9:be:25:9d:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:50:46:FC:F1:01:5B:D2:1F:5D:57:15:86:38:7F:E9:A7:FE:54
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/nJFQRvzxAVvSH11XFYY4f-mn_lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:56:ae:a0:61:9e:9a:e1:59:97:e2:ae:a5:2c:25:76:27:44:
ed:8c:39:a3:fa:31:b9:8d:5e:20:31:47:50:93:f6:1b:35:14:
df:9f:8c:dd:4b:12:45:e4:97:ed:fb:a2:bd:7c:bf:b3:c0:79:
b8:bc:99:e8:9a:42:bb:98:53:b9:17:e0:96:02:52:c9:47:e5:
af:0c:a3:3c:ae:40:ce:f0:2a:10:24:ae:13:a3:80:44:c2:91:
3e:6f:40:35:db:d5:11:da:af:f6:bc:44:2b:b8:8f:a2:7b:08:
c8:08:24:62:63:f6:fc:72:1f:34:16:d8:81:27:e6:bb:43:45:
e4:ce:ca:e2:14:59:af:57:65:7d:20:0e:04:77:cd:50:1e:2a:
0a:10:64:eb:ba:81:15:98:5b:0f:84:f2:53:3a:9b:eb:1d:dd:
66:48:38:8d:51:82:5e:4a:94:27:18:72:a4:46:a5:d5:ce:22:
fe:fc:c6:4f:01:32:cd:d6:9f:c4:e3:58:a4:59:df:06:ef:c1:
86:9b:30:a8:33:b2:17:c7:97:1a:be:36:49:61:fc:d5:fe:8b:
2d:95:7a:17:74:66:93:2a:b4:76:a4:7b:e8:ce:12:de:cd:a3:
0b:19:d3:ec:61:99:66:d5:1c:48:fb:ee:ef:e0:2e:ff:3b:35:
8b:6f:45:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIb7Als/rZ8HQXaeOfRf6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzkxNTA0NmZjZjEwMTViZDIxZjVkNTcxNTg2Mzg3ZmU5YTdmZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWi+PliIVyl+ulfwqn/dP21Bll7
VKmH7jAO6NoFA5x2MpPJl8bCC8Wfxwz+BMfj/WFpe36pGJgfmCbfUXdn1ALeWDYs
Xbx564Y+dIBVpCwheCTVB6UBzJpfGYQK417grMbib9BJpOfLk0G4WeNOubZQpUac
aTcoXJJVWpk9HGAjRsT8bXWepzkiR5QEeMNdFf7B/R1vxzfCPHoTyTzsFDfIRi4W
ezhDtCnsz+xooQVUOxF3f/nC5aHbswlEzGTiwbwnZ7DeB6Hy6rzdnpHJXOZ5rGpC
kTS59aZt22Uc/Okti2V+9nhrZqfkY9KGb3DafXtXt0L+pJ03Hdm+JZ33CwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJyRUEb88QFb0h9dVxWGOH/pp/5UMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvbkpGUVJ2enhBVnZTSDExWEZZWTRmLW1uX2xRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYKJAwQA
LYKLMA0GCSqGSIb3DQEBCwUAA4IBAQCqVq6gYZ6a4VmX4q6lLCV2J0TtjDmj+jG5
jV4gMUdQk/YbNRTfn4zdSxJF5Jft+6K9fL+zwHm4vJnomkK7mFO5F+CWAlLJR+Wv
DKM8rkDO8CoQJK4To4BEwpE+b0A129UR2q/2vEQruI+iewjICCRiY/b8ch80FtiB
J+a7Q0XkzsriFFmvV2V9IA4Ed81QHioKEGTruoEVmFsPhPJTOpvrHd1mSDiNUYJe
SpQnGHKkRqXVziL+/MZPATLN1p/E41ikWd8G78GGmzCoM7IXx5cavjZJYfzV/ost
lXoXdGaTKrR2pHvozhLezaMLGdPsYZlm1RxI++7v4C7/OzWLb0WS
-----END CERTIFICATE-----
Generated at Fri May 17 11:01:29 2024 by rpki-client on console-fra.rpki-client.org