Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ysFVi-k22VfAgad_iW3pCLLPkv0.roa
File: ysFVi-k22VfAgad_iW3pCLLPkv0.roa (raw, json)
Hash identifier: xWOWSJHZN6agZTxVfyqBVZCac7olh+/UlG/9UJHVuFg=
Subject key identifier: CA:C1:55:8B:E9:36:D9:57:C0:81:A7:7F:89:6D:E9:08:B2:CF:92:FD
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E331A9D6F1A8EF02FA8A0750FD083
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ysFVi-k22VfAgad_iW3pCLLPkv0.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 45.134.37.0/24 maxlen: 24
45.134.38.0/24 maxlen: 24
45.80.192.0/24 maxlen: 24
45.10.20.0/24 maxlen: 24
45.135.150.0/24 maxlen: 24
45.147.4.0/24 maxlen: 24
45.91.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:1a:9d:6f:1a:8e:f0:2f:a8:a0:75:0f:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cac1558be936d957c081a77f896de908b2cf92fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:a0:0c:1b:22:a8:ba:f1:8d:92:69:ef:f0:
be:eb:7c:f8:ef:6f:08:f6:0c:a6:b3:28:c3:a6:04:
10:08:a4:34:0e:67:b9:d0:fe:75:e7:26:10:8f:b8:
a0:fc:e9:5e:28:52:45:c2:03:48:ca:21:95:8c:55:
76:87:19:a2:ce:12:dd:d6:f3:f7:fa:6a:67:0e:d9:
4e:59:5e:98:61:46:af:83:dc:d9:aa:09:7a:ba:3f:
14:96:4a:40:a6:17:03:ab:60:5b:9c:7e:43:8f:77:
5d:ab:c4:ef:b6:77:7f:01:d0:02:63:63:7e:77:99:
ab:c7:3e:35:dc:c1:ca:65:ca:12:df:eb:8b:28:78:
49:ef:21:fa:f9:ab:08:2a:49:40:07:be:bc:ca:98:
e3:58:85:d8:8d:fe:0b:56:48:fb:48:fb:8b:64:5a:
e8:0d:18:07:e2:86:6b:10:40:c5:c4:3e:a8:10:87:
2c:1e:1d:f7:8a:02:d3:60:92:58:af:72:f4:fc:d2:
b2:6a:44:b0:5d:9a:4c:9e:a4:67:7d:13:c8:58:0b:
8f:9f:ac:04:99:43:c5:08:5b:79:4a:e7:7a:13:06:
7d:cf:4e:34:bd:75:b4:6e:38:93:37:8f:83:fd:2f:
af:c2:05:6b:d5:70:29:14:03:f8:9f:a7:d3:f2:c3:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C1:55:8B:E9:36:D9:57:C0:81:A7:7F:89:6D:E9:08:B2:CF:92:FD
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ysFVi-k22VfAgad_iW3pCLLPkv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.20.0/24
45.80.192.0/24
45.91.249.0/24
45.134.37.0-45.134.38.255
45.135.150.0/24
45.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7a:bb:dd:d8:8c:a6:2d:0a:e3:77:1b:f4:86:4b:b4:ed:ba:
19:e8:62:62:a9:15:07:70:22:38:c9:da:b8:03:bb:73:fc:fa:
ff:ad:46:20:ee:b5:21:c1:c3:df:95:4d:84:87:10:b1:54:c1:
3e:89:61:e3:3b:d4:bf:8b:08:38:f1:d7:28:c3:9f:50:d7:14:
ca:99:e3:75:39:c8:3f:6f:be:93:8d:75:85:af:a9:c5:94:d9:
35:72:49:c9:ec:1f:b7:9e:96:44:84:aa:43:17:70:78:f8:b8:
29:c8:f2:46:70:89:fd:1f:47:18:b7:c1:9f:51:7f:a3:66:2e:
40:73:f9:46:d9:27:8c:a6:1c:c2:26:41:99:e3:82:92:41:76:
52:b6:83:0b:26:4f:91:b8:61:3e:3e:4f:19:b6:68:f5:16:4e:
4c:72:cd:8f:ca:d2:e3:94:a9:24:de:68:0f:41:f8:c1:52:e6:
1a:c2:6c:d0:ef:24:f6:62:eb:99:8d:13:44:af:aa:9a:8c:db:
7a:a0:28:03:27:af:ea:4e:d3:89:81:83:4f:23:56:4a:b1:f8:
6c:bd:38:8e:46:f4:d6:ef:44:3c:c0:7b:0a:25:4f:a9:49:b5:
8e:a0:eb:cf:b2:2a:7e:d0:ac:8b:7f:ad:4a:c7:e8:6c:3f:b1:
b2:3d:44:dc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYzJTjManW8ajvAvqKB1D9CDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWMxNTU4YmU5MzZkOTU3YzA4MWE3N2Y4OTZkZTkwOGIyY2Y5MmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35agDBsiqLrxjZJp7/C+63z4728I
9gymsyjDpgQQCKQ0Dme50P515yYQj7ig/OleKFJFwgNIyiGVjFV2hxmizhLd1vP3
+mpnDtlOWV6YYUavg9zZqgl6uj8UlkpAphcDq2BbnH5Dj3ddq8Tvtnd/AdACY2N+
d5mrxz413MHKZcoS3+uLKHhJ7yH6+asIKklAB768ypjjWIXYjf4LVkj7SPuLZFro
DRgH4oZrEEDFxD6oEIcsHh33igLTYJJYr3L0/NKyakSwXZpMnqRnfRPIWAuPn6wE
mUPFCFt5Sud6EwZ9z040vXW0bjiTN4+D/S+vwgVr1XApFAP4n6fT8sNlDwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFMrBVYvpNtlXwIGnf4lt6Qiyz5L9MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEveXNGVmktazIyVmZBZ2FkX2lXM3BDTExQa3YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALQoUAwQA
LVDAAwQALVv5MAwDBAAthiUDBAAthiYDBAAth5YDBAAtkwQwDQYJKoZIhvcNAQEL
BQADggEBACd6u93YjKYtCuN3G/SGS7TtuhnoYmKpFQdwIjjJ2rgDu3P8+v+tRiDu
tSHBw9+VTYSHELFUwT6JYeM71L+LCDjx1yjDn1DXFMqZ43U5yD9vvpONdYWvqcWU
2TVyScnsH7eelkSEqkMXcHj4uCnI8kZwif0fRxi3wZ9Rf6NmLkBz+UbZJ4ymHMIm
QZnjgpJBdlK2gwsmT5G4YT4+Txm2aPUWTkxyzY/K0uOUqSTeaA9B+MFS5hrCbNDv
JPZi65mNE0SvqpqM23qgKAMnr+pO04mBg08jVkqx+Gy9OI5G9NbvRDzAewolT6lJ
tY6g68+yKn7QrIt/rUrH6Gw/sbI9RNw=
-----END CERTIFICATE-----
Generated at Mon May 6 12:09:44 2024 by rpki-client on console-fra.rpki-client.org