Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S4zIpDYSJ9LmujBdFwahfLeyThs.roa
File: S4zIpDYSJ9LmujBdFwahfLeyThs.roa (raw, json)
Hash identifier: v/sZRjl99b9kVi4Yn82Wou1HgvqHkmdxOwGuqO3yPPU=
Subject key identifier: 4B:8C:C8:A4:36:12:27:D2:E6:BA:30:5D:17:06:A1:7C:B7:B2:4E:1B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3C3C7A40DB914F37199E58B445C5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S4zIpDYSJ9LmujBdFwahfLeyThs.roa
Signing time: Tue 02 Jan 2024 08:33:16 +0000
ROA not before: Tue 02 Jan 2024 08:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200056
IP address blocks: 45.133.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3c:3c:7a:40:db:91:4f:37:19:9e:58:b4:45:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b8cc8a4361227d2e6ba305d1706a17cb7b24e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:c4:45:c7:f8:3b:b5:03:24:3c:e8:04:f2:
47:ff:1c:5d:e7:0d:f5:1c:d3:d5:80:c1:e0:a3:2b:
9a:90:9f:7e:f6:da:89:8a:d7:e4:ea:0a:52:8e:e5:
70:e3:62:06:3b:4b:a7:74:ac:7a:95:a7:16:4c:ab:
d0:9c:be:66:3c:fb:52:7d:d4:7c:ca:26:81:f5:82:
81:dd:0e:4e:d2:38:1b:62:2d:63:e3:94:d1:0e:51:
86:61:b5:58:79:d2:63:c0:c0:e1:82:ce:8f:96:a4:
d6:1c:67:de:df:e2:55:97:90:df:1f:25:53:f4:ca:
e9:16:8c:f7:ae:48:81:6b:2b:b3:10:ff:68:3c:fe:
3f:30:dd:da:e6:52:c4:f0:d6:c1:91:3c:b0:89:36:
00:5a:23:16:03:0c:8f:08:ea:49:02:10:a1:c7:4c:
0d:68:97:dc:88:61:05:67:c2:d7:93:54:2b:55:4b:
24:e4:48:c0:f5:0e:ae:bd:4a:e1:42:79:45:1b:ce:
3f:af:c0:3d:43:ce:5f:e8:c3:2c:5b:6f:60:b0:ec:
e3:9c:5d:f2:13:01:ce:5f:c7:e8:78:ea:13:f3:2a:
6e:3b:33:ba:7b:1f:f5:36:83:11:8c:ea:f0:e6:77:
04:c7:d6:e5:bf:6f:37:f2:f7:5d:46:29:1a:04:6a:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:C8:A4:36:12:27:D2:E6:BA:30:5D:17:06:A1:7C:B7:B2:4E:1B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/S4zIpDYSJ9LmujBdFwahfLeyThs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
32:87:de:e2:45:a7:e5:5b:af:dc:b4:d7:78:c0:54:eb:b4:98:
70:be:f9:df:ef:8d:82:d2:07:e0:b5:a2:d9:2b:ad:d8:f3:e1:
ba:ab:46:4a:1d:7e:38:c0:37:22:13:b4:fb:6c:d4:70:e0:0f:
59:d0:47:78:88:d6:87:1b:ab:dd:e0:57:90:d9:aa:3c:4c:f5:
35:7d:68:f0:43:29:f6:e3:98:ca:37:c6:9a:eb:0f:6b:05:5d:
78:ec:d1:29:b5:f0:4f:82:96:dd:de:41:6d:19:68:66:61:2a:
3a:9f:0e:b7:24:64:cc:87:d7:c0:5b:17:49:9d:78:c8:da:d3:
28:35:ff:e1:1b:f3:9a:fd:41:9d:84:91:66:ba:c0:6f:b7:dd:
bc:f5:43:4e:1a:9e:8f:2c:53:22:59:b7:a2:c7:43:ae:10:14:
47:fd:c9:d5:e1:b0:43:49:46:c2:32:b8:43:fb:cf:44:87:a4:
b6:58:1e:31:20:7e:94:13:ee:d5:6b:c6:53:40:d5:ef:e8:26:
95:8e:b8:04:11:d3:59:40:02:01:e4:23:f7:1c:15:32:fe:96:
06:fa:cd:a8:88:99:e0:ee:fc:44:c3:0c:67:e0:e9:eb:39:1d:
4f:f0:0e:5b:27:4d:60:62:74:bd:6d:e6:ab:b8:6f:75:55:ff:
6f:cb:cc:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTjw8ekDbkU83GZ5YtEXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjhjYzhhNDM2MTIyN2QyZTZiYTMwNWQxNzA2YTE3Y2I3YjI0ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoXERcf4O7UDJDzoBPJH/xxd5w31
HNPVgMHgoyuakJ9+9tqJitfk6gpSjuVw42IGO0undKx6lacWTKvQnL5mPPtSfdR8
yiaB9YKB3Q5O0jgbYi1j45TRDlGGYbVYedJjwMDhgs6PlqTWHGfe3+JVl5DfHyVT
9MrpFoz3rkiBayuzEP9oPP4/MN3a5lLE8NbBkTywiTYAWiMWAwyPCOpJAhChx0wN
aJfciGEFZ8LXk1QrVUsk5EjA9Q6uvUrhQnlFG84/r8A9Q85f6MMsW29gsOzjnF3y
EwHOX8foeOoT8ypuOzO6ex/1NoMRjOrw5ncEx9blv2838vddRikaBGpqBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuMyKQ2EifS5rowXRcGoXy3sk4bMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvUzR6SXBEWVNKOUxtdWpCZEZ3YWhmTGV5VGhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYVJMA0G
CSqGSIb3DQEBCwUAA4IBAQAyh97iRaflW6/ctNd4wFTrtJhwvvnf742C0gfgtaLZ
K63Y8+G6q0ZKHX44wDciE7T7bNRw4A9Z0Ed4iNaHG6vd4FeQ2ao8TPU1fWjwQyn2
45jKN8aa6w9rBV147NEptfBPgpbd3kFtGWhmYSo6nw63JGTMh9fAWxdJnXjI2tMo
Nf/hG/Oa/UGdhJFmusBvt9289UNOGp6PLFMiWbeix0OuEBRH/cnV4bBDSUbCMrhD
+89Eh6S2WB4xIH6UE+7Va8ZTQNXv6CaVjrgEEdNZQAIB5CP3HBUy/pYG+s2oiJng
7vxEwwxn4OnrOR1P8A5bJ01gYnS9bearuG91Vf9vy8yK
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:21 2024 by rpki-client on console-fra.rpki-client.org