Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa
File: bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa (raw, json)
Hash identifier: z+DURpkPZi1+KNfwgwM9iAGLoB0HAYgtntTX0kBagU0=
Subject key identifier: 6E:19:DA:4D:D6:14:E1:1E:99:06:2F:5D:4F:A2:79:32:44:B6:B2:69
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 018F76E934A662F6F4E993577A9C8EDFE13F
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa
Signing time: Tue 14 May 2024 11:42:25 +0000
ROA not before: Tue 14 May 2024 11:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e9:34:a6:62:f6:f4:e9:93:57:7a:9c:8e:df:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 14 11:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e19da4dd614e11e99062f5d4fa2793244b6b269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:bf:fb:46:c4:87:a4:ee:bb:56:e1:8f:33:
ae:39:a2:4a:3a:76:24:96:43:9f:58:2c:41:44:fd:
76:c5:de:ae:58:63:a5:2a:5a:da:2d:d1:9e:ef:ae:
87:9f:92:50:4f:12:5e:39:6d:c0:b0:94:4a:34:92:
19:a3:89:30:69:95:ba:f4:23:89:0b:1b:f3:78:88:
2d:90:4b:d6:19:ad:b9:3b:8e:6d:10:16:7d:e8:a6:
4a:d9:cb:f1:d9:90:ab:86:1d:f2:b4:33:51:da:fe:
a0:5a:25:26:b9:a4:b3:0c:50:2d:d8:4b:d7:b2:b0:
5b:6c:57:21:de:3e:8b:1e:19:65:81:ec:b7:57:83:
12:dd:42:75:c5:5b:44:a1:1d:3b:9f:a9:69:9b:15:
f5:a8:97:b0:72:ee:b6:51:14:e7:e4:9d:73:85:99:
77:ab:be:3f:cc:0f:a3:eb:38:1c:fd:74:1b:14:66:
3b:37:28:48:80:48:85:64:a4:25:81:af:8e:9a:b4:
64:9b:23:47:17:ea:4f:7a:10:38:58:1d:d0:3a:7f:
05:61:a5:ae:3f:4d:ba:8f:6a:a1:83:cc:98:cc:06:
ae:92:57:56:ca:b4:08:ce:89:bd:80:bc:a5:f7:51:
54:27:d1:31:54:5e:d1:9e:28:4f:ba:50:46:80:dd:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:19:DA:4D:D6:14:E1:1E:99:06:2F:5D:4F:A2:79:32:44:B6:B2:69
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.149.0-45.159.150.255
Signature Algorithm: sha256WithRSAEncryption
46:80:ab:94:7d:0f:2c:4f:38:ff:f8:bb:f9:ee:a5:9c:07:ce:
f5:d6:6e:30:ac:47:fa:ad:e4:04:2c:a1:1e:7d:e6:5b:7a:27:
78:86:a6:2d:ab:e8:36:05:34:9b:09:3c:41:2d:0b:e0:37:a0:
1a:97:c4:f9:2e:34:df:14:9d:d8:18:2f:08:7c:6e:9a:1d:91:
a6:3a:ac:c2:0e:72:ab:90:15:e0:db:83:10:d7:db:9f:e3:1d:
6e:39:f7:f4:54:e5:f6:9f:3c:62:fb:af:e7:60:35:19:79:b9:
d7:16:db:c5:ff:63:cf:de:f3:73:81:3d:5f:9f:cc:fc:5a:0f:
79:07:86:f3:fd:68:ef:62:b5:5c:1f:ed:7b:d7:8c:a0:8e:1d:
e7:4b:75:79:59:ad:89:41:1d:a3:42:70:e6:1f:51:00:14:6f:
31:fd:8d:02:19:4b:65:39:a2:51:2a:55:f5:8e:60:41:2c:3f:
4b:20:61:62:6e:ef:b6:61:67:99:da:04:69:c1:01:62:e3:5a:
69:37:cc:54:ee:5d:e1:79:b0:99:f0:33:b9:80:b5:0f:8a:6e:
51:e9:49:87:7e:dc:69:fc:43:19:14:1f:ae:1c:3d:d1:78:2a:
62:3b:de:e1:ca:1f:06:84:07:36:53:93:b4:7d:db:a7:b0:fa:
2b:e6:f2:11
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY926TSmYvb06ZNXepyO3+E/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwNTE0MTE0MjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTE5ZGE0ZGQ2MTRlMTFlOTkwNjJmNWQ0ZmEyNzkzMjQ0YjZiMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7a/+0bEh6Tuu1bhjzOuOaJKOnYk
lkOfWCxBRP12xd6uWGOlKlraLdGe766Hn5JQTxJeOW3AsJRKNJIZo4kwaZW69COJ
CxvzeIgtkEvWGa25O45tEBZ96KZK2cvx2ZCrhh3ytDNR2v6gWiUmuaSzDFAt2EvX
srBbbFch3j6LHhllgey3V4MS3UJ1xVtEoR07n6lpmxX1qJewcu62URTn5J1zhZl3
q74/zA+j6zgc/XQbFGY7NyhIgEiFZKQlga+OmrRkmyNHF+pPehA4WB3QOn8FYaWu
P026j2qhg8yYzAaukldWyrQIzom9gLyl91FUJ9ExVF7RnihPulBGgN2mZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG4Z2k3WFOEemQYvXU+ieTJEtrJpMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvYmhuYVRkWVU0UjZaQmk5ZFQ2SjVNa1Myc21rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtn5UD
BAAtn5YwDQYJKoZIhvcNAQELBQADggEBAEaAq5R9DyxPOP/4u/nupZwHzvXWbjCs
R/qt5AQsoR595lt6J3iGpi2r6DYFNJsJPEEtC+A3oBqXxPkuNN8UndgYLwh8bpod
kaY6rMIOcquQFeDbgxDX25/jHW459/RU5fafPGL7r+dgNRl5udcW28X/Y8/e83OB
PV+fzPxaD3kHhvP9aO9itVwf7XvXjKCOHedLdXlZrYlBHaNCcOYfUQAUbzH9jQIZ
S2U5olEqVfWOYEEsP0sgYWJu77ZhZ5naBGnBAWLjWmk3zFTuXeF5sJnwM7mAtQ+K
blHpSYd+3Gn8QxkUH64cPdF4KmI73uHKHwaEBzZTk7R926ew+ivm8hE=
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:26 2024 by rpki-client on console-fra.rpki-client.org