Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HHAnS4L9MUmMwacQNcDV13LIRUQ.roa
File: HHAnS4L9MUmMwacQNcDV13LIRUQ.roa (raw, json)
Hash identifier: o9Ce1Yz/bUedqXWSj3vk48VM7ijDtTJ6EcPqEOrWmPk=
Subject key identifier: 1C:70:27:4B:82:FD:31:49:8C:C1:A7:10:35:C0:D5:D7:72:C8:45:44
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D04F806F35AB8069911961CC41454230D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HHAnS4L9MUmMwacQNcDV13LIRUQ.roa
Signing time: Sat 13 Jan 2024 22:36:20 +0000
ROA not before: Sat 13 Jan 2024 22:36:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 45.138.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:f8:06:f3:5a:b8:06:99:11:96:1c:c4:14:54:23:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 13 22:36:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c70274b82fd31498cc1a71035c0d5d772c84544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:4c:87:fb:82:02:83:f3:99:c7:c8:90:15:
5f:a5:e7:44:a9:41:ad:9e:be:07:6a:f0:7f:9e:7d:
e8:6c:73:15:1e:74:54:12:14:b7:76:97:ee:03:d4:
48:d6:07:51:b1:5d:d1:ae:a3:05:86:43:79:ad:6a:
5b:2c:65:61:f2:65:03:6c:20:5e:54:11:60:69:56:
fb:17:39:d5:84:fc:38:0f:d1:13:e6:66:69:9f:a5:
9f:15:6a:6b:54:4b:91:8c:fe:a1:90:de:27:a5:5c:
87:c1:24:05:36:6e:be:b8:3b:72:42:de:71:9d:f7:
2c:0f:a2:3f:59:ea:04:54:52:d5:86:c0:0e:6f:fd:
92:18:2d:79:88:fe:6c:41:38:56:ea:7b:ec:c0:54:
b5:cb:16:1f:76:26:00:ef:43:ae:e9:82:ca:a4:bc:
a4:ec:f1:8f:34:b7:a3:a6:44:bd:2b:f0:02:5e:b1:
dd:8e:97:80:71:51:8d:79:3e:f3:81:2e:ef:a8:df:
f2:24:03:6e:72:ba:f0:0f:ab:ff:5c:96:15:89:9e:
c1:62:c9:08:ba:c5:d9:08:0a:73:c3:a7:de:98:4b:
61:a5:62:39:bc:10:d5:5f:0c:a2:e6:a9:d1:25:6a:
cd:ce:f1:78:11:da:cc:7f:84:af:85:b4:16:d9:94:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:27:4B:82:FD:31:49:8C:C1:A7:10:35:C0:D5:D7:72:C8:45:44
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HHAnS4L9MUmMwacQNcDV13LIRUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0c:b6:86:b2:59:4e:62:5b:74:45:26:c1:5d:a3:a0:21:09:
34:4f:89:e6:0d:fc:29:cb:7e:89:3b:b4:d0:09:67:08:5d:9b:
b0:25:8e:e5:18:91:31:da:bf:70:52:2e:79:cf:d7:a5:d7:65:
a8:d2:22:f3:a5:57:94:43:35:ff:23:b5:96:32:00:f9:77:e7:
1d:01:c9:c6:bd:5d:a6:32:f2:73:df:73:c4:ca:06:94:52:12:
81:9e:54:1f:ea:b6:be:b8:2c:4d:18:d3:ea:c2:84:24:38:9e:
b2:51:01:7e:dc:3a:cb:12:79:5d:a9:b1:59:7a:43:78:8c:94:
f1:82:8e:dd:6e:b0:10:32:e2:62:08:f5:e2:7b:4c:ae:27:ba:
62:c7:d2:6f:db:81:37:88:c4:60:d9:75:28:d8:48:9a:23:ba:
57:b3:3b:e6:3a:b5:96:3f:f1:84:40:95:0a:49:1b:13:f2:11:
95:66:6c:af:47:97:47:71:e6:ec:65:69:c4:74:ec:0d:1b:38:
58:bd:8c:68:f1:b6:d9:2b:a2:a9:fe:0f:a2:b5:74:9b:cc:a0:
4e:80:93:4c:4b:ac:b0:48:40:99:9f:26:96:f9:dc:2d:64:7f:
c9:19:d4:f0:68:69:11:45:02:3b:f2:5d:79:90:b8:e2:73:12:
fa:3d:38:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0E+AbzWrgGmRGWHMQUVCMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTEzMjIzNjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzcwMjc0YjgyZmQzMTQ5OGNjMWE3MTAzNWMwZDVkNzcyYzg0NTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwJMh/uCAoPzmcfIkBVfpedEqUGt
nr4HavB/nn3obHMVHnRUEhS3dpfuA9RI1gdRsV3RrqMFhkN5rWpbLGVh8mUDbCBe
VBFgaVb7FznVhPw4D9ET5mZpn6WfFWprVEuRjP6hkN4npVyHwSQFNm6+uDtyQt5x
nfcsD6I/WeoEVFLVhsAOb/2SGC15iP5sQThW6nvswFS1yxYfdiYA70Ou6YLKpLyk
7PGPNLejpkS9K/ACXrHdjpeAcVGNeT7zgS7vqN/yJANucrrwD6v/XJYViZ7BYskI
usXZCApzw6femEthpWI5vBDVXwyi5qnRJWrNzvF4EdrMf4SvhbQW2ZS43wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxwJ0uC/TFJjMGnEDXA1ddyyEVEMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSEhBblM0TDlNVW1Nd2FjUU5jRFYxM0xJUlVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq3MA0G
CSqGSIb3DQEBCwUAA4IBAQAgDLaGsllOYlt0RSbBXaOgIQk0T4nmDfwpy36JO7TQ
CWcIXZuwJY7lGJEx2r9wUi55z9el12Wo0iLzpVeUQzX/I7WWMgD5d+cdAcnGvV2m
MvJz33PEygaUUhKBnlQf6ra+uCxNGNPqwoQkOJ6yUQF+3DrLEnldqbFZekN4jJTx
go7dbrAQMuJiCPXie0yuJ7pix9Jv24E3iMRg2XUo2EiaI7pXszvmOrWWP/GEQJUK
SRsT8hGVZmyvR5dHcebsZWnEdOwNGzhYvYxo8bbZK6Kp/g+itXSbzKBOgJNMS6yw
SECZnyaW+dwtZH/JGdTwaGkRRQI78l15kLjicxL6PTh+
-----END CERTIFICATE-----
Generated at Sat May 18 02:05:12 2024 by rpki-client on console-ams.rpki-client.org