Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6kvPM2fB0w0v3Lo_2EXVwBjZMSE.roa
File: 6kvPM2fB0w0v3Lo_2EXVwBjZMSE.roa (raw, json)
Hash identifier: wJi0bqrtANqE03Xkofqws5b1xc3Vwm1Osk/tFPz0PPg=
Subject key identifier: EA:4B:CF:33:67:C1:D3:0D:2F:DC:BA:3F:D8:45:D5:C0:18:D9:31:21
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019320C0DB17123C627E351BA0EB07AEA314
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6kvPM2fB0w0v3Lo_2EXVwBjZMSE.roa
Signing time: Tue 12 Nov 2024 14:22:10 +0000
ROA not before: Tue 12 Nov 2024 14:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214654
IP address blocks: 45.152.162.0/23 maxlen: 23
45.152.162.0/24 maxlen: 24
45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:c0:db:17:12:3c:62:7e:35:1b:a0:eb:07:ae:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 12 14:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea4bcf3367c1d30d2fdcba3fd845d5c018d93121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:9b:55:04:17:f9:9b:94:50:36:ad:9a:d9:
de:ac:f8:46:83:34:e3:41:a8:be:7f:23:74:fe:a2:
bc:b5:fe:2e:3c:62:58:e9:51:a8:af:bb:ca:38:45:
8b:64:b4:25:c0:69:10:be:a2:a4:08:29:8d:a7:be:
a8:a7:11:71:a5:ce:3f:3e:f0:cd:f2:13:fe:f7:84:
58:6b:a3:ba:c9:0d:87:bf:56:48:f4:c6:85:bc:1f:
9c:7a:10:49:2c:04:e7:f6:2e:b6:7e:28:ab:10:89:
e1:a2:70:79:c8:6a:1f:7d:3b:3f:50:8c:19:a1:98:
f2:77:e6:9f:89:32:eb:05:23:9d:1e:1f:cf:71:70:
83:b2:87:33:c6:04:8b:7c:87:45:ce:0c:7c:2d:68:
78:27:ce:ce:1c:12:d7:7c:18:1b:75:7a:fe:fa:7c:
c7:c9:7c:fe:d2:3b:33:b9:51:c6:fc:19:b2:17:1e:
13:ad:20:90:1f:25:f8:8b:e7:bf:8c:1e:73:e0:e8:
1d:85:4d:ea:9e:b0:83:91:d5:6e:df:53:95:34:e6:
f3:f4:e7:38:cd:9c:1a:db:b4:0c:4f:1d:47:b5:34:
69:36:de:5c:d0:67:8a:8d:f0:18:a3:55:13:ea:87:
d4:e1:54:aa:fa:75:f6:57:b4:1f:3c:17:5e:bb:c0:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:CF:33:67:C1:D3:0D:2F:DC:BA:3F:D8:45:D5:C0:18:D9:31:21
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6kvPM2fB0w0v3Lo_2EXVwBjZMSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:0d:9b:20:bf:91:b4:bc:2a:6e:af:0a:91:82:2d:27:d5:1e:
9f:8a:ef:64:14:32:9d:e9:b9:ff:f0:f6:04:5d:07:d0:5c:d1:
b5:05:d4:6f:72:60:20:6a:a0:52:b1:a0:0a:23:2a:21:49:21:
80:de:50:b5:9a:8b:82:b4:03:ec:5f:1c:19:7e:3d:43:cb:89:
6d:46:53:21:8b:6c:99:50:ad:79:ef:e8:1b:26:68:d6:b1:7c:
35:2a:19:14:3b:f0:5b:1e:36:63:9d:55:63:8f:7b:f4:3b:ac:
92:b7:3f:4f:e4:d8:8e:a8:c6:1a:a2:b9:49:3e:7d:c4:3f:a1:
53:de:30:13:60:5f:19:0f:4e:70:5a:08:5e:d8:58:f9:22:52:
c7:01:df:59:d3:84:99:b3:da:b3:e8:ff:e8:bc:4d:bd:36:6c:
7f:ed:96:e5:34:8b:ca:de:98:03:e3:aa:b8:ab:31:d4:72:1f:
94:83:20:20:05:8b:3f:11:9c:0a:5e:1e:be:1e:e4:70:a6:45:
a7:7a:b9:0d:1f:fd:2e:a5:26:73:3c:e7:c4:96:1b:28:b1:1f:
b0:ee:e9:b5:a6:1a:97:a4:ee:63:4f:5f:b5:ca:de:a5:86:49:
c9:f2:15:79:6f:42:07:0b:c9:4d:20:74:4d:75:4a:67:ae:23:
6a:1b:29:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMgwNsXEjxifjUboOsHrqMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQxMTEyMTQyMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTRiY2YzMzY3YzFkMzBkMmZkY2JhM2ZkODQ1ZDVjMDE4ZDkzMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LybVQQX+ZuUUDatmtnerPhGgzTj
Qai+fyN0/qK8tf4uPGJY6VGor7vKOEWLZLQlwGkQvqKkCCmNp76opxFxpc4/PvDN
8hP+94RYa6O6yQ2Hv1ZI9MaFvB+cehBJLATn9i62fiirEInhonB5yGoffTs/UIwZ
oZjyd+afiTLrBSOdHh/PcXCDsoczxgSLfIdFzgx8LWh4J87OHBLXfBgbdXr++nzH
yXz+0jszuVHG/BmyFx4TrSCQHyX4i+e/jB5z4OgdhU3qnrCDkdVu31OVNObz9Oc4
zZwa27QMTx1HtTRpNt5c0GeKjfAYo1UT6ofU4VSq+nX2V7QfPBdeu8C2NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOpLzzNnwdMNL9y6P9hF1cAY2TEhMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvNmt2UE0yZkIwdzB2M0xvXzJFWFZ3QmpaTVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZiiMA0G
CSqGSIb3DQEBCwUAA4IBAQA9DZsgv5G0vCpurwqRgi0n1R6fiu9kFDKd6bn/8PYE
XQfQXNG1BdRvcmAgaqBSsaAKIyohSSGA3lC1mouCtAPsXxwZfj1Dy4ltRlMhi2yZ
UK157+gbJmjWsXw1KhkUO/BbHjZjnVVjj3v0O6yStz9P5NiOqMYaorlJPn3EP6FT
3jATYF8ZD05wWghe2Fj5IlLHAd9Z04SZs9qz6P/ovE29Nmx/7ZblNIvK3pgD46q4
qzHUch+UgyAgBYs/EZwKXh6+HuRwpkWnerkNH/0upSZzPOfElhsosR+w7um1phqX
pO5jT1+1yt6lhknJ8hV5b0IHC8lNIHRNdUpnriNqGykf
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:21 2024 by rpki-client on console-fra.rpki-client.org