Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HJk4VKsf5mT4ckZ9E3BD79esTXo.roa
File: HJk4VKsf5mT4ckZ9E3BD79esTXo.roa (raw, json)
Hash identifier: OFT1ewaOebjyqFDfpz8eiF2MUKKHvHS96ZlFsXGEkbQ=
Subject key identifier: 1C:99:38:54:AB:1F:E6:64:F8:72:46:7D:13:70:43:EF:D7:AC:4D:7A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018FE8E0580A3CA40267B786621A49E133D0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HJk4VKsf5mT4ckZ9E3BD79esTXo.roa
Signing time: Wed 05 Jun 2024 14:49:27 +0000
ROA not before: Wed 05 Jun 2024 14:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209396
IP address blocks: 45.86.20.0/22 maxlen: 24
45.151.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:e0:58:0a:3c:a4:02:67:b7:86:62:1a:49:e1:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 5 14:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c993854ab1fe664f872467d137043efd7ac4d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:9e:30:f7:ce:81:f6:64:53:e0:f0:30:b8:
86:50:ac:12:7e:e6:3b:08:cf:25:5e:0a:bf:5f:11:
54:28:26:5a:eb:69:ad:57:eb:a7:de:2b:e2:06:11:
3b:20:cc:7d:1f:40:b7:4b:5c:4b:34:e2:20:3b:fe:
f6:1d:db:49:97:3a:4e:29:35:60:94:a8:99:f0:93:
5c:7c:36:eb:26:3d:14:67:35:fd:45:0d:05:d0:52:
34:e4:ae:0a:e8:b7:1f:cb:16:04:17:08:5a:96:29:
3f:88:54:a6:96:ac:b6:83:5b:15:6f:31:36:e3:2e:
a4:6e:d6:ad:9d:04:cd:5f:fa:c4:b1:05:21:6e:56:
a0:b7:dc:2a:55:4d:ed:3e:34:fd:4b:1e:86:58:de:
c8:e5:24:19:67:e7:99:0d:15:e0:b6:2a:54:63:08:
e9:9d:a9:e0:27:63:65:62:c0:cf:be:89:72:08:fa:
5d:43:69:16:39:52:74:84:3d:8c:41:cc:d4:d6:82:
3d:cc:80:cf:76:47:c0:1c:ac:7e:db:47:b2:83:b7:
61:59:2c:73:11:8b:6f:7d:3f:86:fd:37:57:04:07:
29:0c:77:11:67:8a:fa:bb:1d:77:d7:8a:cf:6b:81:
eb:ef:84:03:b0:18:6e:76:4d:7e:37:5d:1e:a1:b3:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:38:54:AB:1F:E6:64:F8:72:46:7D:13:70:43:EF:D7:AC:4D:7A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/HJk4VKsf5mT4ckZ9E3BD79esTXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.20.0/22
45.151.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:57:ea:0a:59:9d:e6:ff:f3:e0:f4:f2:6f:a2:f1:6a:d8:72:
41:1a:6e:9e:7e:36:07:7b:02:64:2b:fb:ec:21:b1:57:81:06:
64:22:af:f4:a2:20:af:68:18:55:56:da:e8:fe:3b:1e:24:71:
ba:59:aa:bf:db:4e:cc:33:55:16:38:17:fc:09:3d:59:d9:7c:
e2:47:c6:cd:54:aa:5b:6e:20:14:d8:ae:94:73:c7:b4:0b:a3:
97:5f:75:a3:37:dd:6f:0a:13:ae:40:49:81:34:a9:96:c4:a8:
18:ed:13:d2:c7:f8:87:5b:d7:cf:a0:f6:2c:20:ea:40:cd:96:
26:45:77:d5:26:45:5e:f4:65:f9:b7:0c:b3:5e:a9:44:74:46:
f1:41:5d:6a:ce:36:fe:14:4d:c9:3a:8f:ba:12:88:92:a6:15:
ee:4a:36:f2:9a:7f:c7:d0:d2:6e:8a:c0:59:5d:15:e8:1f:ef:
c1:a2:b2:6c:94:81:2e:0c:2f:09:52:6a:59:e4:bb:4f:73:13:
31:60:37:33:da:55:b0:76:19:c5:68:1e:b9:31:b5:06:69:c7:
a1:e1:ce:11:c4:55:7c:af:2f:55:6a:b6:b6:e8:f5:11:3c:f3:
32:5f:65:3d:d9:50:5b:37:1b:a4:24:1e:19:0b:67:19:52:5c:
c5:58:fa:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/o4FgKPKQCZ7eGYhpJ4TPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwNjA1MTQ0OTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzk5Mzg1NGFiMWZlNjY0Zjg3MjQ2N2QxMzcwNDNlZmQ3YWM0ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeaeMPfOgfZkU+DwMLiGUKwSfuY7
CM8lXgq/XxFUKCZa62mtV+un3iviBhE7IMx9H0C3S1xLNOIgO/72HdtJlzpOKTVg
lKiZ8JNcfDbrJj0UZzX9RQ0F0FI05K4K6LcfyxYEFwhalik/iFSmlqy2g1sVbzE2
4y6kbtatnQTNX/rEsQUhblagt9wqVU3tPjT9Sx6GWN7I5SQZZ+eZDRXgtipUYwjp
nangJ2NlYsDPvolyCPpdQ2kWOVJ0hD2MQczU1oI9zIDPdkfAHKx+20eyg7dhWSxz
EYtvfT+G/TdXBAcpDHcRZ4r6ux1314rPa4Hr74QDsBhudk1+N10eobPMrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFByZOFSrH+Zk+HJGfRNwQ+/XrE16MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvSEprNFZLc2Y1bVQ0Y2taOUUzQkQ3OWVzVFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVYUAwQC
LZfEMA0GCSqGSIb3DQEBCwUAA4IBAQB8V+oKWZ3m//Pg9PJvovFq2HJBGm6efjYH
ewJkK/vsIbFXgQZkIq/0oiCvaBhVVtro/jseJHG6Waq/207MM1UWOBf8CT1Z2Xzi
R8bNVKpbbiAU2K6Uc8e0C6OXX3WjN91vChOuQEmBNKmWxKgY7RPSx/iHW9fPoPYs
IOpAzZYmRXfVJkVe9GX5twyzXqlEdEbxQV1qzjb+FE3JOo+6EoiSphXuSjbymn/H
0NJuisBZXRXoH+/BorJslIEuDC8JUmpZ5LtPcxMxYDcz2lWwdhnFaB65MbUGaceh
4c4RxFV8ry9Vara26PURPPMyX2U92VBbNxukJB4ZC2cZUlzFWPq5
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:12 2024 by rpki-client on console-ams.rpki-client.org