Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o9m0GWI_e_Qt3DTfzdxn9UeS64U.roa
File: o9m0GWI_e_Qt3DTfzdxn9UeS64U.roa (raw, json)
Hash identifier: FmQszo/PrD0oM4B/65lPFhC+szGBuwyHhtNoKXWzGBk=
Subject key identifier: A3:D9:B4:19:62:3F:7B:F4:2D:DC:34:DF:CD:DC:67:F5:47:92:EB:85
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FB1D6699908D23D6970CACFB37D1B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o9m0GWI_e_Qt3DTfzdxn9UeS64U.roa
Signing time: Tue 02 Jan 2024 04:30:12 +0000
ROA not before: Tue 02 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202422
IP address blocks: 45.130.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b1:d6:69:99:08:d2:3d:69:70:ca:cf:b3:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3d9b419623f7bf42ddc34dfcddc67f54792eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:36:47:24:95:ae:95:06:21:a5:5a:86:bf:
c1:b4:41:de:bb:87:3d:ce:38:71:f4:4f:1f:71:0d:
a8:52:4a:cf:a7:b3:36:08:23:68:a8:81:1a:f9:65:
05:e4:64:61:79:c9:86:b7:21:95:ff:70:3c:ec:d5:
35:de:c0:95:58:d9:f3:37:c2:c9:17:9a:f8:c5:52:
5d:5f:04:db:44:0c:06:21:1b:f3:7f:4e:e2:03:c7:
59:af:b7:eb:18:24:c3:b9:67:c9:52:eb:2a:9b:04:
16:56:74:f3:54:9e:32:b4:89:c2:bb:de:41:56:87:
6e:11:da:96:83:ed:35:be:e1:37:e2:04:79:3d:60:
d7:5f:e5:9b:df:b5:a6:ba:98:88:49:20:60:8a:c3:
55:7c:46:c6:c6:43:26:8c:65:93:6d:19:d5:f5:42:
34:90:4b:41:c0:fd:c8:df:74:d7:5b:73:85:3d:98:
32:a6:08:01:bb:2d:57:03:ed:41:2c:45:18:5c:e3:
af:c5:b5:b3:c9:4f:87:ef:5e:ae:f3:17:15:2c:01:
45:56:d9:97:91:c0:c8:ca:c3:a6:22:28:53:bf:49:
05:bc:75:52:43:b9:ee:a0:59:31:b1:20:61:8f:25:
8b:f3:5c:ef:c0:9d:3d:53:d8:5d:4f:ec:63:c9:6a:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:B4:19:62:3F:7B:F4:2D:DC:34:DF:CD:DC:67:F5:47:92:EB:85
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/o9m0GWI_e_Qt3DTfzdxn9UeS64U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3f:40:4c:a4:21:cb:1d:2a:f0:9d:ec:6e:49:bd:b7:3f:62:
99:68:0f:28:00:e5:8a:5c:1e:38:b7:9b:74:c4:ab:21:04:c7:
a2:02:fe:d5:d0:dc:d4:d4:51:38:eb:2a:84:f9:75:45:a9:e3:
f6:48:e4:dd:b3:ef:92:7e:70:fd:5b:3d:05:30:2c:32:d0:3d:
69:bf:63:cb:19:a0:b8:20:50:a4:99:f9:2b:8f:c2:f1:6e:bc:
e2:c6:0a:36:f5:ca:54:49:c8:7b:cb:29:70:2a:cb:fe:40:20:
46:cf:f3:08:7f:a3:dd:ea:72:af:d5:1f:c2:c2:44:41:31:17:
c8:d6:5e:b1:2a:56:2a:e6:5e:47:80:a7:8e:59:b6:db:05:87:
fe:22:96:da:b8:a1:21:c6:a2:9e:a3:34:cd:04:8f:9c:3c:12:
fc:e6:f7:ae:d9:b9:46:5d:9b:0f:a8:75:15:c0:fc:ef:6a:89:
6e:71:3c:16:eb:21:fe:07:78:f8:0c:9f:c7:4f:ef:f5:e0:14:
63:29:fc:60:bf:d8:4c:b5:5c:61:ab:ae:0e:16:88:6b:e9:ed:
6c:b7:fd:9d:28:82:90:5b:75:29:43:8f:a5:3e:88:d4:4a:89:
c8:8c:18:15:7b:b0:49:44:c2:8b:4e:29:f6:d5:f2:3c:37:81:
4a:2e:06:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb7HWaZkI0j1pcMrPs30bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2Q5YjQxOTYyM2Y3YmY0MmRkYzM0ZGZjZGRjNjdmNTQ3OTJlYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNg2RySVrpUGIaVahr/BtEHeu4c9
zjhx9E8fcQ2oUkrPp7M2CCNoqIEa+WUF5GRhecmGtyGV/3A87NU13sCVWNnzN8LJ
F5r4xVJdXwTbRAwGIRvzf07iA8dZr7frGCTDuWfJUusqmwQWVnTzVJ4ytInCu95B
VoduEdqWg+01vuE34gR5PWDXX+Wb37WmupiISSBgisNVfEbGxkMmjGWTbRnV9UI0
kEtBwP3I33TXW3OFPZgypggBuy1XA+1BLEUYXOOvxbWzyU+H716u8xcVLAFFVtmX
kcDIysOmIihTv0kFvHVSQ7nuoFkxsSBhjyWL81zvwJ09U9hdT+xjyWoHFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPZtBliP3v0Ldw0383cZ/VHkuuFMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvbzltMEdXSV9lX1F0M0RUZnpkeG45VWVTNjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYKLMA0G
CSqGSIb3DQEBCwUAA4IBAQB6P0BMpCHLHSrwnexuSb23P2KZaA8oAOWKXB44t5t0
xKshBMeiAv7V0NzU1FE46yqE+XVFqeP2SOTds++SfnD9Wz0FMCwy0D1pv2PLGaC4
IFCkmfkrj8Lxbrzixgo29cpUSch7yylwKsv+QCBGz/MIf6Pd6nKv1R/CwkRBMRfI
1l6xKlYq5l5HgKeOWbbbBYf+IpbauKEhxqKeozTNBI+cPBL85veu2blGXZsPqHUV
wPzvaolucTwW6yH+B3j4DJ/HT+/14BRjKfxgv9hMtVxhq64OFohr6e1st/2dKIKQ
W3UpQ4+lPojUSonIjBgVe7BJRMKLTin21fI8N4FKLgYa
-----END CERTIFICATE-----
Generated at Fri May 17 07:06:24 2024 by rpki-client on console-fra.rpki-client.org