Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nPhesNISRScTy8zxOvEBrHi5Z84.roa
File: nPhesNISRScTy8zxOvEBrHi5Z84.roa (raw, json)
Hash identifier: YuFC2HuYCa7L19wRTL1MNdf/ec65/O37Uz+YUP+We6s=
Subject key identifier: 9C:F8:5E:B0:D2:12:45:27:13:CB:CC:F1:3A:F1:01:AC:78:B9:67:CE
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018EFC0103C1CA912E6C85AC9A6BF6D4625A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nPhesNISRScTy8zxOvEBrHi5Z84.roa
Signing time: Sat 20 Apr 2024 14:55:08 +0000
ROA not before: Sat 20 Apr 2024 14:55:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200195
IP address blocks: 45.89.60.0/24 maxlen: 24
45.89.61.0/24 maxlen: 24
45.150.66.0/24 maxlen: 32
2a0e:4005::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fc:01:03:c1:ca:91:2e:6c:85:ac:9a:6b:f6:d4:62:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 20 14:55:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cf85eb0d212452713cbccf13af101ac78b967ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:84:4b:f3:e6:15:8b:de:d1:2a:52:9b:ea:
8a:2a:d5:b4:d2:42:dd:f3:57:3b:b3:30:99:07:06:
41:a9:a1:fd:27:ea:07:e9:39:ca:ec:d0:8e:9d:f6:
b8:71:74:4a:3f:69:e4:b4:ef:75:d0:f7:33:ad:6e:
f6:0e:38:19:a0:42:0d:e9:98:67:84:9e:da:f9:97:
a9:97:3f:f9:38:27:20:a2:30:ac:ab:7c:11:33:ce:
0e:84:01:ca:b5:ea:1d:fb:5e:30:9f:1c:79:9b:6b:
a9:91:e9:fa:fa:5b:7a:be:5c:60:88:b1:de:de:b3:
4c:3b:b0:1e:f5:d9:36:c0:37:7b:19:a9:d8:54:f8:
4a:7c:c4:bb:f4:58:4c:54:14:23:c6:a5:ae:a0:6f:
92:ff:eb:db:af:6c:ca:7f:81:8a:88:ba:78:a1:38:
bc:4a:d8:a0:7f:8b:60:0b:27:c5:42:df:66:fe:f3:
b3:93:43:59:2a:81:9d:5c:04:08:37:6f:38:2c:76:
d7:36:d6:ab:d7:fe:5d:5c:55:bf:17:dd:6c:45:c6:
a5:e8:43:2e:da:32:5c:86:90:d8:4b:9f:46:ff:72:
11:45:6e:50:79:ce:ed:2a:87:6c:70:5b:b2:c7:2d:
d9:25:e5:2a:9a:25:20:ee:5c:b1:2b:f5:a4:39:8f:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:5E:B0:D2:12:45:27:13:CB:CC:F1:3A:F1:01:AC:78:B9:67:CE
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/nPhesNISRScTy8zxOvEBrHi5Z84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.60.0/23
45.150.66.0/24
IPv6:
2a0e:4005::/32
Signature Algorithm: sha256WithRSAEncryption
c6:8b:4e:cb:1f:05:4d:dc:e4:0b:71:4f:29:cc:a6:4b:54:68:
f8:b8:68:e2:8c:64:2e:ad:66:2b:c5:33:2b:75:2a:16:e1:ab:
be:b5:4a:87:ff:7d:31:bd:dd:fa:13:ea:e5:7d:65:4b:c2:56:
ca:57:01:f4:e7:a1:22:8c:f6:e8:c2:42:98:9c:a7:d4:61:85:
a6:21:da:4b:d8:78:e0:dc:f1:94:97:32:35:e5:ee:77:dc:00:
df:29:70:a3:05:e6:82:12:5d:b1:18:11:e3:2f:22:99:ac:9a:
2d:95:b2:88:56:22:de:e3:42:6d:c7:54:5d:45:d1:1e:ab:3f:
bf:7d:e5:7b:18:e0:4a:80:df:2b:04:25:5c:93:95:b9:bb:45:
c7:ad:65:25:61:56:cb:cd:21:7e:b4:a5:20:ef:71:b0:9e:f7:
76:ec:33:5b:aa:d0:1c:fc:bd:75:71:1e:02:23:c4:ca:40:92:
2b:99:be:99:fd:26:3b:00:77:fe:99:b0:32:8e:51:c0:d7:a3:
4c:12:bc:62:15:f4:63:d6:38:02:bd:f1:4a:2b:4e:c6:1f:0b:
06:b7:7b:6d:6a:50:97:49:fc:25:8e:77:0c:31:21:c1:36:66:
fa:bd:4d:69:8d:1d:68:c2:96:15:29:d3:1a:5e:ec:49:fd:ed:
82:ec:71:05
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY78AQPBypEubIWsmmv21GJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQwNDIwMTQ1NTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2Y4NWViMGQyMTI0NTI3MTNjYmNjZjEzYWYxMDFhYzc4Yjk2N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxduES/PmFYve0SpSm+qKKtW00kLd
81c7szCZBwZBqaH9J+oH6TnK7NCOnfa4cXRKP2nktO910PczrW72DjgZoEIN6Zhn
hJ7a+Zeplz/5OCcgojCsq3wRM84OhAHKteod+14wnxx5m2upken6+lt6vlxgiLHe
3rNMO7Ae9dk2wDd7GanYVPhKfMS79FhMVBQjxqWuoG+S/+vbr2zKf4GKiLp4oTi8
Stigf4tgCyfFQt9m/vOzk0NZKoGdXAQIN284LHbXNtar1/5dXFW/F91sRcal6EMu
2jJchpDYS59G/3IRRW5Qec7tKodscFuyxy3ZJeUqmiUg7lyxK/WkOY/M4wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJz4XrDSEkUnE8vM8TrxAax4uWfOMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvblBoZXNOSVNSU2NUeTh6eE92RUJySGk1Wjg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLVk8AwQA
LZZCMA0EAgACMAcDBQAqDkAFMA0GCSqGSIb3DQEBCwUAA4IBAQDGi07LHwVN3OQL
cU8pzKZLVGj4uGjijGQurWYrxTMrdSoW4au+tUqH/30xvd36E+rlfWVLwlbKVwH0
56EijPbowkKYnKfUYYWmIdpL2Hjg3PGUlzI15e533ADfKXCjBeaCEl2xGBHjLyKZ
rJotlbKIViLe40Jtx1RdRdEeqz+/feV7GOBKgN8rBCVck5W5u0XHrWUlYVbLzSF+
tKUg73Gwnvd27DNbqtAc/L11cR4CI8TKQJIrmb6Z/SY7AHf+mbAyjlHA16NMErxi
FfRj1jgCvfFKK07GHwsGt3ttalCXSfwljncMMSHBNmb6vU1pjR1owpYVKdMaXuxJ
/e2C7HEF
-----END CERTIFICATE-----
Generated at Wed May 8 02:16:07 2024 by rpki-client on console-fra.rpki-client.org