Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yEKvzGoViO3_3W-Cswa3t-NBbwg.roa
File: yEKvzGoViO3_3W-Cswa3t-NBbwg.roa (raw, json)
Hash identifier: XtMXcn9+iMwoUzCWic7fnyAr4asohejtrRBlBNVdEK0=
Subject key identifier: C8:42:AF:CC:6A:15:88:ED:FF:DD:6F:82:B3:06:B7:B7:E3:41:6F:08
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3684D480D94F7DD07D4641CA94A5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yEKvzGoViO3_3W-Cswa3t-NBbwg.roa
Signing time: Mon 01 Jan 2024 02:29:55 +0000
ROA not before: Mon 01 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206127
IP address blocks: 45.150.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:36:84:d4:80:d9:4f:7d:d0:7d:46:41:ca:94:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c842afcc6a1588edffdd6f82b306b7b7e3416f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:ef:79:31:38:14:21:9d:13:1a:cb:51:51:
6f:d5:f9:46:dd:b9:fd:98:72:d7:67:4c:eb:4d:ad:
b4:b3:51:f7:17:ec:be:1c:07:b7:ed:4c:8e:bd:66:
42:43:02:30:c0:90:12:a3:cf:20:3a:ac:68:0d:2e:
85:d6:ab:f6:18:30:2d:30:69:2a:5e:21:03:c5:90:
17:6a:1d:08:3c:27:31:c7:31:a3:b6:41:cf:de:c1:
af:da:a5:0c:f4:a6:90:54:f2:24:31:89:6a:f1:bf:
47:74:ad:e9:a4:63:af:17:b4:50:62:a2:4e:51:f6:
47:21:5f:a3:59:7f:a8:99:5b:ef:cb:46:2c:97:0c:
44:ed:df:7b:77:16:96:af:63:11:90:a7:b4:99:c0:
52:b4:40:62:7f:3b:e0:9d:cc:fb:fe:97:1c:40:d2:
86:f9:81:35:da:f4:43:20:ee:bd:c9:82:38:95:99:
bd:da:25:c4:4b:f0:d1:37:29:cf:53:4a:93:f8:e1:
0b:6a:12:0e:1c:bb:5a:0f:38:9e:12:4e:62:df:cf:
84:28:04:03:c6:23:d2:99:93:06:8f:bd:6a:3e:8c:
c1:5e:cc:5d:6d:e9:cb:ba:00:cb:e3:2d:98:08:8a:
40:d8:a2:7a:86:2b:8f:19:c1:13:15:7d:90:2a:8b:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:AF:CC:6A:15:88:ED:FF:DD:6F:82:B3:06:B7:B7:E3:41:6F:08
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yEKvzGoViO3_3W-Cswa3t-NBbwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.168.0/22
Signature Algorithm: sha256WithRSAEncryption
52:7f:3e:c1:25:f3:2d:11:dc:53:30:56:e1:20:5f:ff:ae:17:
8b:07:82:ee:bb:65:4e:4b:3d:8a:7b:07:57:f5:17:67:13:dc:
b3:da:f9:74:46:e3:a6:f5:13:2d:47:23:ca:eb:93:cc:2d:f8:
b9:c5:6c:91:fd:22:c0:1d:b4:62:6a:cf:5c:ac:dc:25:ef:a3:
1c:44:e2:be:92:09:bf:f7:fa:9b:8f:32:cb:1b:22:68:63:53:
78:c5:66:91:c6:d7:31:e1:61:ea:e0:28:9d:b3:96:25:e2:69:
e3:6a:92:ff:6f:5c:f5:7b:62:0b:c5:f7:44:57:d1:00:16:9d:
c6:7a:aa:ca:14:f8:45:ac:73:e0:d3:1f:28:00:72:12:bf:bb:
68:7d:a4:2b:d5:88:77:38:79:ed:c1:5b:63:c1:55:8a:87:11:
07:86:1f:d9:44:c5:c0:a3:31:c8:ea:75:b1:e6:22:c1:98:9f:
c6:e4:99:2d:f6:34:7e:56:a2:5f:75:c3:0a:4f:16:9e:02:82:
45:7c:a5:b7:a5:8b:fb:15:3f:bc:ca:17:5b:33:e3:51:6b:89:
f0:07:ae:ee:f1:a5:2a:8d:e8:94:69:5c:e0:97:1b:28:57:22:
ef:cf:7b:cc:b4:5e:34:7c:9c:8b:ca:85:df:1b:73:5f:fe:74:
39:e0:71:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zaE1IDZT33QfUZBypSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQyYWZjYzZhMTU4OGVkZmZkZDZmODJiMzA2YjdiN2UzNDE2ZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHnveTE4FCGdExrLUVFv1flG3bn9
mHLXZ0zrTa20s1H3F+y+HAe37UyOvWZCQwIwwJASo88gOqxoDS6F1qv2GDAtMGkq
XiEDxZAXah0IPCcxxzGjtkHP3sGv2qUM9KaQVPIkMYlq8b9HdK3ppGOvF7RQYqJO
UfZHIV+jWX+omVvvy0YslwxE7d97dxaWr2MRkKe0mcBStEBifzvgncz7/pccQNKG
+YE12vRDIO69yYI4lZm92iXES/DRNynPU0qT+OELahIOHLtaDzieEk5i38+EKAQD
xiPSmZMGj71qPozBXsxdbenLugDL4y2YCIpA2KJ6hiuPGcETFX2QKouRJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhCr8xqFYjt/91vgrMGt7fjQW8IMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEveUVLdnpHb1ZpTzNfM1ctQ3N3YTN0LU5CYndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZaoMA0G
CSqGSIb3DQEBCwUAA4IBAQBSfz7BJfMtEdxTMFbhIF//rheLB4Luu2VOSz2KewdX
9RdnE9yz2vl0RuOm9RMtRyPK65PMLfi5xWyR/SLAHbRias9crNwl76McROK+kgm/
9/qbjzLLGyJoY1N4xWaRxtcx4WHq4Cids5Yl4mnjapL/b1z1e2ILxfdEV9EAFp3G
eqrKFPhFrHPg0x8oAHISv7tofaQr1Yh3OHntwVtjwVWKhxEHhh/ZRMXAozHI6nWx
5iLBmJ/G5Jkt9jR+VqJfdcMKTxaeAoJFfKW3pYv7FT+8yhdbM+NRa4nwB67u8aUq
jeiUaVzglxsoVyLvz3vMtF40fJyLyoXfG3Nf/nQ54HGR
-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org