Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Dv888I_sfamENAnWDbdW5o4TM.roa
File: H6Dv888I_sfamENAnWDbdW5o4TM.roa (raw, json)
Hash identifier: hkKM8AROfrYU7krWQNBUfXW6Yck9Imk8Ejl6iTohprc=
Subject key identifier: 1F:A0:EF:F3:CF:08:FE:C7:DA:98:43:40:9D:60:DB:75:6E:68:E1:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916B97E90430DD8E8B7F89A06D23D5FBB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Dv888I_sfamENAnWDbdW5o4TM.roa
Signing time: Mon 19 Aug 2024 17:03:23 +0000
ROA not before: Mon 19 Aug 2024 17:03:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 45.128.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:97:e9:04:30:dd:8e:8b:7f:89:a0:6d:23:d5:fb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 17:03:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fa0eff3cf08fec7da9843409d60db756e68e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:53:82:bf:fc:0c:ab:e1:31:73:ac:88:a4:
de:2d:36:64:9e:f6:5a:10:dd:71:64:70:2e:cb:ba:
18:95:81:2f:0d:a3:34:35:33:d1:d6:ba:9b:cf:89:
ff:8d:20:78:ba:60:b5:08:b6:99:f8:22:5b:07:ef:
e2:f2:ae:12:6a:11:33:52:40:5b:42:5c:b3:18:c5:
f5:7c:3f:08:1b:7a:7b:cd:8a:ef:1d:1c:06:67:c4:
9a:df:46:c2:2c:b5:f3:67:f4:d3:b6:ba:03:47:4c:
d2:13:d4:9e:7c:5a:5b:e0:f0:7d:3e:dd:cb:22:0d:
ae:56:0d:16:79:de:80:2f:d9:be:ce:c7:fe:fb:38:
73:59:41:07:54:54:b8:f0:1a:cc:82:a3:20:d8:62:
e1:96:66:fc:51:1f:3e:66:37:c1:4c:d8:2f:c4:76:
0a:d5:87:da:39:3e:fd:cc:7d:9b:78:e1:44:e5:14:
78:6c:30:97:24:c5:f4:e4:1c:a5:95:b5:78:1e:a5:
99:7b:bd:b1:5b:1d:6f:6e:26:72:b2:94:24:df:9f:
69:0a:6e:eb:58:f9:e3:fa:f6:8c:1b:c0:12:40:3f:
2e:1f:c2:01:df:e3:1e:66:24:67:e8:44:e1:da:66:
98:1d:23:d9:97:25:99:f9:d5:1b:e9:b3:4e:0d:fe:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:EF:F3:CF:08:FE:C7:DA:98:43:40:9D:60:DB:75:6E:68:E1:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H6Dv888I_sfamENAnWDbdW5o4TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3e:a3:ef:bc:65:f9:a8:b2:ea:71:bc:b5:64:8a:4c:46:a8:
e1:65:ce:28:67:22:31:a7:2a:36:0b:b4:a9:bb:f9:61:30:9c:
59:f7:dc:72:7b:6f:de:df:3a:d8:eb:50:32:58:17:29:ba:6f:
18:87:1a:20:24:9e:0a:05:db:c4:e1:fe:51:43:88:ca:b0:50:
93:63:6b:7f:04:59:ab:8b:f9:b1:a8:d3:a2:30:ad:05:7b:90:
48:a3:01:ab:74:1c:06:63:da:2f:c1:77:85:7b:60:ca:6c:53:
3e:12:df:42:2e:25:09:72:b9:70:7f:be:44:62:a0:7b:3a:b0:
64:9e:95:20:17:e3:9c:3f:a3:59:ba:80:86:51:7a:64:18:08:
f6:dd:29:31:03:4b:9e:ff:58:81:9c:a7:4c:33:58:36:c9:04:
37:dd:5b:1a:7f:a5:40:37:06:7b:39:7a:96:36:cb:8e:8f:fb:
6a:ae:92:1b:fe:41:0c:a1:75:ca:40:79:ba:de:bd:2a:3c:06:
4e:31:72:59:18:70:52:fd:91:e2:76:92:a7:60:a8:c3:0f:3e:
0c:28:04:5c:0f:65:6f:f1:60:7b:e6:10:15:49:af:03:88:68:
a3:31:55:c2:8e:14:13:08:18:5c:a5:a4:86:17:95:49:51:d8:
dd:ed:8f:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFrl+kEMN2Oi3+JoG0j1fuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODE5MTcwMzIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmEwZWZmM2NmMDhmZWM3ZGE5ODQzNDA5ZDYwZGI3NTZlNjhlMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YNTgr/8DKvhMXOsiKTeLTZknvZa
EN1xZHAuy7oYlYEvDaM0NTPR1rqbz4n/jSB4umC1CLaZ+CJbB+/i8q4SahEzUkBb
QlyzGMX1fD8IG3p7zYrvHRwGZ8Sa30bCLLXzZ/TTtroDR0zSE9SefFpb4PB9Pt3L
Ig2uVg0Wed6AL9m+zsf++zhzWUEHVFS48BrMgqMg2GLhlmb8UR8+ZjfBTNgvxHYK
1YfaOT79zH2beOFE5RR4bDCXJMX05ByllbV4HqWZe72xWx1vbiZyspQk359pCm7r
WPnj+vaMG8ASQD8uH8IB3+MeZiRn6ETh2maYHSPZlyWZ+dUb6bNODf7GYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+g7/PPCP7H2phDQJ1g23VuaOEzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSDZEdjg4OElfc2ZhbUVOQW5XRGJkVzVvNFRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYDoMA0G
CSqGSIb3DQEBCwUAA4IBAQAzPqPvvGX5qLLqcby1ZIpMRqjhZc4oZyIxpyo2C7Sp
u/lhMJxZ99xye2/e3zrY61AyWBcpum8YhxogJJ4KBdvE4f5RQ4jKsFCTY2t/BFmr
i/mxqNOiMK0Fe5BIowGrdBwGY9ovwXeFe2DKbFM+Et9CLiUJcrlwf75EYqB7OrBk
npUgF+OcP6NZuoCGUXpkGAj23SkxA0ue/1iBnKdMM1g2yQQ33Vsaf6VANwZ7OXqW
NsuOj/tqrpIb/kEMoXXKQHm63r0qPAZOMXJZGHBS/ZHidpKnYKjDDz4MKARcD2Vv
8WB75hAVSa8DiGijMVXCjhQTCBhcpaSGF5VJUdjd7Y/V
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:45 2024 by rpki-client on console-ams.rpki-client.org