Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa
File: A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa (raw, json)
Hash identifier: gpez0mGEn0JhJZhUL18QQBGx450LduIEGx8V3oqjpwU=
Subject key identifier: 03:B1:1D:60:39:BE:90:70:44:68:DB:8C:08:8F:0E:F7:11:7F:55:01
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018CC5DC10C16FB20ABD2EB2A88C85C82DF8
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 45.143.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:10:c1:6f:b2:0a:bd:2e:b2:a8:8c:85:c8:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03b11d6039be90704468db8c088f0ef7117f5501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:69:30:75:2f:1d:84:39:1e:8c:0c:01:be:
dd:ee:ad:c1:df:be:5b:5c:dd:0b:6b:d5:63:05:a7:
48:93:93:a2:0e:52:51:d6:45:ab:53:25:81:c3:b7:
07:fb:fa:49:da:0c:ff:be:b8:84:ee:04:d1:6c:c9:
74:9c:ea:76:ea:5e:9d:49:3c:8f:f3:6a:72:30:17:
1c:26:f1:9e:d4:06:36:14:28:51:80:27:d2:b2:12:
1b:c9:42:69:f7:54:05:ce:b7:ab:40:8e:61:60:d4:
15:8b:37:c5:19:e2:5c:05:1f:b2:5d:32:58:7e:32:
17:a3:0b:e0:fc:9c:72:bb:0e:3f:01:86:90:0e:55:
4d:84:44:10:03:75:2e:ec:0d:79:48:6e:c2:b8:7b:
73:c5:8f:14:19:a7:87:4c:13:11:71:e8:78:4c:84:
82:a7:cb:a5:5a:e0:17:a4:d5:cd:b6:db:d3:a2:21:
83:45:ae:28:95:8f:30:64:af:3f:37:a7:2c:66:9d:
72:b6:c0:9a:5a:aa:c2:36:07:48:2c:19:9f:64:1a:
9b:a3:48:aa:d2:04:61:c6:4e:04:51:b4:e7:19:16:
05:af:0b:88:e9:d5:ac:7e:8b:71:a0:6c:47:7f:80:
9c:56:6d:69:27:0f:e2:d9:fd:c0:91:f8:d8:30:9c:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B1:1D:60:39:BE:90:70:44:68:DB:8C:08:8F:0E:F7:11:7F:55:01
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:85:59:ca:a8:4c:e2:af:d8:0f:2e:e3:8a:4e:f0:f2:af:8d:
d0:6e:85:47:c6:a4:41:b5:d0:b3:2e:60:b4:ba:9a:0b:9c:3d:
d7:77:01:ea:c5:1b:92:97:43:09:4a:9e:05:c8:a5:37:9d:3c:
55:ad:b7:c9:10:42:0d:9d:41:30:b8:43:5e:4d:98:71:a1:53:
25:ee:25:3a:85:ad:fc:b5:21:5a:11:b6:20:e8:50:fd:cb:71:
c1:41:30:9b:1d:a3:78:59:5e:dc:e9:3f:4f:79:7e:44:3e:76:
da:a8:63:c0:b3:b9:fd:e1:6b:03:4d:fe:18:13:bf:70:d5:bd:
64:53:e9:26:03:43:aa:0f:62:72:d7:45:52:d2:1d:7a:de:c9:
89:ae:11:2a:ff:31:05:92:04:82:68:c2:5b:cc:0d:36:a0:7d:
7b:1b:bd:81:93:2b:23:5d:2d:ed:29:46:06:1c:35:c3:d3:87:
13:b1:eb:93:8c:8c:1f:f3:a6:a8:df:de:dc:0a:5e:ce:48:00:
9e:f5:a6:6a:18:dd:e3:49:b8:a4:ec:fb:08:38:28:45:b1:e1:
7a:0c:de:65:66:06:3a:38:91:eb:db:da:63:4d:4c:48:74:dc:
9a:1b:2f:1c:fc:76:6e:4b:57:9f:8c:4c:94:64:51:d7:c2:95:
1e:b3:68:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3BDBb7IKvS6yqIyFyC34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwMTAxMTYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2IxMWQ2MDM5YmU5MDcwNDQ2OGRiOGMwODhmMGVmNzExN2Y1NTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+5pMHUvHYQ5HowMAb7d7q3B375b
XN0La9VjBadIk5OiDlJR1kWrUyWBw7cH+/pJ2gz/vriE7gTRbMl0nOp26l6dSTyP
82pyMBccJvGe1AY2FChRgCfSshIbyUJp91QFzrerQI5hYNQVizfFGeJcBR+yXTJY
fjIXowvg/Jxyuw4/AYaQDlVNhEQQA3Uu7A15SG7CuHtzxY8UGaeHTBMRceh4TISC
p8ulWuAXpNXNttvToiGDRa4olY8wZK8/N6csZp1ytsCaWqrCNgdILBmfZBqbo0iq
0gRhxk4EUbTnGRYFrwuI6dWsfotxoGxHf4CcVm1pJw/i2f3AkfjYMJyyrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOxHWA5vpBwRGjbjAiPDvcRf1UBMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvQTdFZFlEbS1rSEJFYU51TUNJOE85eEZfVlFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+iMA0G
CSqGSIb3DQEBCwUAA4IBAQCihVnKqEzir9gPLuOKTvDyr43QboVHxqRBtdCzLmC0
upoLnD3XdwHqxRuSl0MJSp4FyKU3nTxVrbfJEEINnUEwuENeTZhxoVMl7iU6ha38
tSFaEbYg6FD9y3HBQTCbHaN4WV7c6T9PeX5EPnbaqGPAs7n94WsDTf4YE79w1b1k
U+kmA0OqD2Jy10VS0h163smJrhEq/zEFkgSCaMJbzA02oH17G72BkysjXS3tKUYG
HDXD04cTseuTjIwf86ao397cCl7OSACe9aZqGN3jSbik7PsIOChFseF6DN5lZgY6
OJHr29pjTUxIdNyaGy8c/HZuS1efjEyUZFHXwpUes2in
-----END CERTIFICATE-----
Generated at Thu May 2 04:41:34 2024 by rpki-client on console-fra.rpki-client.org