Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/_xU_jJPEg-bf6TNf59-mLO8MJOM.roa
File: _xU_jJPEg-bf6TNf59-mLO8MJOM.roa (raw, json)
Hash identifier: YBvGgwzMR8rVP4+OiZtDGfT3Ce1gs5ObB5o8wDvUqJY=
Subject key identifier: FF:15:3F:8C:93:C4:83:E6:DF:E9:33:5F:E7:DF:A6:2C:EF:0C:24:E3
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018E2EFFE1465C2A22AE7F01D5ACC240C516
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/_xU_jJPEg-bf6TNf59-mLO8MJOM.roa
Signing time: Mon 11 Mar 2024 19:31:44 +0000
ROA not before: Mon 11 Mar 2024 19:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9087
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:ff:e1:46:5c:2a:22:ae:7f:01:d5:ac:c2:40:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Mar 11 19:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff153f8c93c483e6dfe9335fe7dfa62cef0c24e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:88:b2:e3:7e:14:96:97:13:c6:f9:d2:09:
0a:6a:4b:e7:63:b1:05:4e:94:7f:06:db:6a:b9:ee:
33:62:3d:b0:4a:61:fa:33:cc:f8:33:ff:be:0c:2c:
b2:c0:19:85:da:91:63:0a:e1:d7:0c:23:24:a1:f9:
de:60:61:46:e0:78:dc:b4:61:7f:d8:37:f2:7f:8b:
c7:7a:5b:37:01:6a:c5:da:23:4d:73:f4:a0:08:e8:
aa:8f:6c:c0:5b:3d:fc:a0:52:23:3e:9b:9c:7a:94:
1e:b4:7e:e7:55:37:4b:0e:df:03:d1:2d:52:2a:ca:
f1:22:ac:5d:12:5b:1c:a7:80:b3:c5:9d:6c:ca:a7:
8d:5a:d9:a0:62:ca:47:52:b7:b2:5b:ec:ec:b9:5d:
0c:17:05:04:02:e9:78:2a:50:41:0d:7c:36:e8:72:
b2:6e:f1:96:a0:2d:5e:aa:fd:a3:89:16:d6:a9:8a:
50:77:de:48:4d:e3:6c:ab:64:47:ab:c1:04:78:c4:
89:79:74:8a:3d:47:c8:f4:91:37:7e:c5:28:0b:ee:
94:b6:e2:a5:25:82:11:e7:91:de:67:d4:38:1d:41:
73:ba:84:fa:27:8b:10:18:49:ad:4c:dc:bd:22:0b:
8d:3c:66:7a:07:54:c8:42:ea:33:d8:b2:8b:7f:18:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:3F:8C:93:C4:83:E6:DF:E9:33:5F:E7:DF:A6:2C:EF:0C:24:E3
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/_xU_jJPEg-bf6TNf59-mLO8MJOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:af:a1:cf:05:66:10:16:17:5b:4a:2e:02:c7:31:71:42:27:
d9:ac:da:9e:c7:fd:78:91:45:c9:6a:26:54:96:8b:90:0e:0b:
6b:0e:da:71:10:73:2e:19:5d:b9:30:20:ab:0e:5a:fb:e3:20:
fe:cb:3d:4f:c9:e5:e4:19:14:2c:58:1e:1e:b6:cb:d5:a7:1d:
7b:ba:73:b9:eb:eb:f6:3c:8d:a3:29:31:bd:a4:34:48:d5:c3:
eb:03:85:8b:26:0a:05:ed:43:39:b4:b2:01:0d:e4:4d:dd:5c:
fe:b9:82:9e:d8:2b:0a:d9:07:5b:f5:a8:31:10:55:79:a3:1d:
81:45:f1:cf:27:57:17:da:ae:c3:2c:23:c0:3e:f7:03:a8:46:
da:97:f1:f1:cd:e7:b4:8d:6e:a6:c9:56:be:ae:70:16:d3:05:
1f:5f:37:ca:f3:96:bc:6d:36:64:df:dc:4b:5b:1a:b5:21:29:
11:3a:f9:cc:de:e9:df:11:70:e9:66:45:4e:a1:02:ab:03:42:
f8:8a:24:5d:87:b4:33:2a:ec:80:4f:18:0a:97:06:d2:64:1d:
6b:b1:c6:08:c2:66:8f:05:96:5e:d4:6c:70:e8:42:f1:39:54:
42:3a:70:58:56:9c:5d:60:69:7d:25:39:ee:0e:73:2a:ee:92:
8c:a0:e6:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4u/+FGXCoirn8B1azCQMUWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMzExMTkzMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjE1M2Y4YzkzYzQ4M2U2ZGZlOTMzNWZlN2RmYTYyY2VmMGMyNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEqIsuN+FJaXE8b50gkKakvnY7EF
TpR/Bttque4zYj2wSmH6M8z4M/++DCyywBmF2pFjCuHXDCMkofneYGFG4HjctGF/
2Dfyf4vHels3AWrF2iNNc/SgCOiqj2zAWz38oFIjPpucepQetH7nVTdLDt8D0S1S
KsrxIqxdElscp4CzxZ1syqeNWtmgYspHUreyW+zsuV0MFwUEAul4KlBBDXw26HKy
bvGWoC1eqv2jiRbWqYpQd95ITeNsq2RHq8EEeMSJeXSKPUfI9JE3fsUoC+6UtuKl
JYIR55HeZ9Q4HUFzuoT6J4sQGEmtTNy9IguNPGZ6B1TIQuoz2LKLfxgsiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8VP4yTxIPm3+kzX+ffpizvDCTjMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvX3hVX2pKUEVnLWJmNlROZjU5LW1MTzhNSk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZasMA0G
CSqGSIb3DQEBCwUAA4IBAQCyr6HPBWYQFhdbSi4CxzFxQifZrNqex/14kUXJaiZU
louQDgtrDtpxEHMuGV25MCCrDlr74yD+yz1PyeXkGRQsWB4etsvVpx17unO56+v2
PI2jKTG9pDRI1cPrA4WLJgoF7UM5tLIBDeRN3Vz+uYKe2CsK2Qdb9agxEFV5ox2B
RfHPJ1cX2q7DLCPAPvcDqEbal/Hxzee0jW6myVa+rnAW0wUfXzfK85a8bTZk39xL
Wxq1ISkROvnM3unfEXDpZkVOoQKrA0L4iiRdh7QzKuyATxgKlwbSZB1rscYIwmaP
BZZe1Gxw6ELxOVRCOnBYVpxdYGl9JTnuDnMq7pKMoOZR
-----END CERTIFICATE-----
Generated at Mon May 20 01:53:39 2024 by rpki-client on console-fra.rpki-client.org