Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/vBYhdNRSgNfg5JSifzUOLHQQTOc.roa
File: vBYhdNRSgNfg5JSifzUOLHQQTOc.roa (raw, json)
Hash identifier: nYgbiJTCs1MOp/zFKOyWVi5A+20SmEq3aSSbeG4DvAk=
Subject key identifier: BC:16:21:74:D4:52:80:D7:E0:E4:94:A2:7F:35:0E:2C:74:10:4C:E7
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018CC72737DA72C6A1BEC2B1AD3D65A9292C
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/vBYhdNRSgNfg5JSifzUOLHQQTOc.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197328
IP address blocks: 45.14.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 01:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:37:da:72:c6:a1:be:c2:b1:ad:3d:65:a9:29:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc162174d45280d7e0e494a27f350e2c74104ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:c4:0f:0c:ea:dd:0a:3b:da:c1:05:4f:44:
ac:10:9b:7c:09:07:fe:9d:72:45:8a:90:70:0c:44:
1b:6d:d7:40:a2:6a:53:48:f4:a5:09:91:1e:ff:fb:
6e:dc:6e:f4:9f:7a:9d:2a:dd:85:90:ee:91:e5:cc:
d4:de:a9:eb:4e:e7:85:2b:f4:c3:af:e3:55:6a:c4:
05:c9:9c:9b:ee:17:e0:51:28:8a:13:7d:1f:db:8d:
ad:8e:16:1d:5f:53:77:84:dd:88:cb:cf:d2:05:73:
e4:40:ba:c3:f3:0c:a2:21:0f:61:6d:9f:fe:73:6d:
89:d9:28:dc:42:1e:31:23:8f:fb:b7:d6:bb:c8:c9:
c9:3b:de:2d:05:ab:5e:d0:b8:2a:68:7f:99:65:ae:
e3:b6:88:a4:fd:37:ae:c3:5d:6b:20:c9:32:c9:62:
ca:d4:f2:74:c5:d3:3a:a4:18:9a:dc:21:f1:00:89:
bc:7a:1d:59:0e:db:f5:75:2a:1b:69:3a:dd:8f:cf:
df:8a:3f:a7:3c:9d:c8:7c:4c:a5:43:b4:89:fa:bc:
54:a9:bc:e2:1c:91:14:1c:b4:d6:7a:6c:28:e2:8c:
4c:4e:97:c8:7b:7e:37:75:9f:d3:a9:9b:27:15:5e:
a0:84:b5:c8:18:18:68:5e:2d:a1:14:db:f2:63:70:
c8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:21:74:D4:52:80:D7:E0:E4:94:A2:7F:35:0E:2C:74:10:4C:E7
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/vBYhdNRSgNfg5JSifzUOLHQQTOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.82.0/23
Signature Algorithm: sha256WithRSAEncryption
32:bf:91:13:ac:eb:f2:3d:60:56:40:c1:33:dc:0f:72:f7:e9:
80:88:32:8a:b0:96:f7:36:62:be:75:e8:78:e8:1d:70:30:6e:
99:bc:f7:9b:1d:a6:c2:6f:0a:d1:a5:56:b6:b7:8e:9d:70:84:
9a:7c:64:6a:2b:2e:c6:0b:f7:0e:6f:dd:8a:ec:78:72:d6:fd:
c1:87:23:e8:da:13:d5:c2:a7:11:91:79:2b:e4:5b:69:89:82:
30:d5:a8:58:d2:42:88:83:52:06:6e:24:19:da:f7:f9:9b:7d:
9e:17:8a:ad:b0:ae:6e:4e:41:2a:3f:01:de:49:bb:5f:1d:c0:
e4:8a:03:74:c4:b3:4d:82:7a:48:35:18:f6:67:2d:0d:68:36:
88:2f:36:d3:0c:f3:e2:49:30:e0:71:c3:35:37:64:ab:38:e4:
5a:9e:16:b1:88:16:26:32:e4:9a:f2:ac:0c:62:c3:22:2c:cc:
69:e5:16:5d:2e:f6:c5:f6:51:e0:6d:36:0e:7b:72:90:fd:c1:
bc:5e:7a:33:85:a2:f4:0a:e3:2f:78:35:01:9a:78:6d:8e:2c:
fd:8b:9b:9e:8c:a9:5d:17:b1:65:1a:df:b8:d6:a3:df:55:6d:
b7:0a:f3:cb:51:f2:f1:f5:1a:19:91:cc:5d:3b:99:81:6a:9f:
14:89:42:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJzfacsahvsKxrT1lqSksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw
YzI0ZGMwHhcNMjQwMTAxMjIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzE2MjE3NGQ0NTI4MGQ3ZTBlNDk0YTI3ZjM1MGUyYzc0MTA0Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlojEDwzq3Qo72sEFT0SsEJt8CQf+
nXJFipBwDEQbbddAompTSPSlCZEe//tu3G70n3qdKt2FkO6R5czU3qnrTueFK/TD
r+NVasQFyZyb7hfgUSiKE30f242tjhYdX1N3hN2Iy8/SBXPkQLrD8wyiIQ9hbZ/+
c22J2SjcQh4xI4/7t9a7yMnJO94tBate0LgqaH+ZZa7jtoik/Teuw11rIMkyyWLK
1PJ0xdM6pBia3CHxAIm8eh1ZDtv1dSobaTrdj8/fij+nPJ3IfEylQ7SJ+rxUqbzi
HJEUHLTWemwo4oxMTpfIe343dZ/TqZsnFV6ghLXIGBhoXi2hFNvyY3DISQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwWIXTUUoDX4OSUon81Dix0EEznMB8GA1UdIwQY
MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt
NzM5MjNkYWVmMTE0LzEvdkJZaGROUlNnTmZnNUpTaWZ6VU9MSFFRVE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0
LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ5SMA0G
CSqGSIb3DQEBCwUAA4IBAQAyv5ETrOvyPWBWQMEz3A9y9+mAiDKKsJb3NmK+deh4
6B1wMG6ZvPebHabCbwrRpVa2t46dcISafGRqKy7GC/cOb92K7Hhy1v3BhyPo2hPV
wqcRkXkr5FtpiYIw1ahY0kKIg1IGbiQZ2vf5m32eF4qtsK5uTkEqPwHeSbtfHcDk
igN0xLNNgnpINRj2Zy0NaDaILzbTDPPiSTDgccM1N2SrOORanhaxiBYmMuSa8qwM
YsMiLMxp5RZdLvbF9lHgbTYOe3KQ/cG8XnozhaL0CuMveDUBmnhtjiz9i5uejKld
F7FlGt+41qPfVW23CvPLUfLx9RoZkcxdO5mBap8UiUII
-----END CERTIFICATE-----
Generated at Sun Apr 28 08:12:43 2024 by rpki-client on console-ams.rpki-client.org