Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/9qEGPIGktks35XyO0XEH0Z3Ptkg.roa
File: 9qEGPIGktks35XyO0XEH0Z3Ptkg.roa (raw, json)
Hash identifier: LdiXR6jNTDkkk8KWCg+gRXLlHEadm/ztdK0H3AJZ8VQ=
Subject key identifier: F6:A1:06:3C:81:A4:B6:4B:37:E5:7C:8E:D1:71:07:D1:9D:CF:B6:48
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 018CC871543CDCDB6CF3DB3820370171246D
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/9qEGPIGktks35XyO0XEH0Z3Ptkg.roa
Signing time: Tue 02 Jan 2024 04:31:59 +0000
ROA not before: Tue 02 Jan 2024 04:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398343
IP address blocks: 45.149.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:54:3c:dc:db:6c:f3:db:38:20:37:01:71:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Jan 2 04:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6a1063c81a4b64b37e57c8ed17107d19dcfb648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:eb:f1:9b:f7:64:ce:e0:e7:40:d6:9f:58:
c3:6c:7f:91:c9:29:6d:a1:15:af:25:78:96:60:1f:
fd:5b:17:60:c8:8f:b0:f5:22:2a:45:db:c2:d8:22:
31:cc:d8:58:f3:e5:77:2f:0c:03:6b:b4:38:ac:5c:
19:3d:b1:a8:bc:c3:93:dd:98:d7:6e:f2:0c:51:c1:
9f:ef:2e:d3:2b:81:a2:26:fe:42:f9:3a:36:92:7c:
5c:4d:51:5a:50:23:e5:4b:4b:ee:bb:53:7a:90:25:
93:0f:a1:44:27:bd:65:2a:42:6f:58:f7:51:e5:42:
47:c6:a3:d4:00:27:ca:92:f5:27:a1:fc:e4:98:19:
9c:1f:b6:5f:23:22:c7:c2:05:09:53:a4:d8:6e:5c:
88:53:0f:8d:ce:14:bf:2e:78:98:32:7e:e6:b0:c4:
13:e7:3c:c2:ab:9f:d9:81:83:fc:6b:02:a2:80:29:
2e:5a:5f:83:dc:7a:f1:a6:56:33:5f:f2:13:59:71:
7f:fe:f9:3c:ca:3d:fd:d1:3b:27:c0:74:f6:1a:3e:
70:f8:3f:c9:20:ed:09:6f:aa:70:a9:f2:80:b0:c5:
fb:27:06:ef:7b:6b:0c:ca:79:5c:0d:fd:8d:6a:46:
0d:ea:b0:a2:ee:3a:6a:e9:69:2c:c0:8b:ce:7c:66:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:06:3C:81:A4:B6:4B:37:E5:7C:8E:D1:71:07:D1:9D:CF:B6:48
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/9qEGPIGktks35XyO0XEH0Z3Ptkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:bc:41:39:75:b5:b6:ee:0c:25:af:96:67:4e:d7:52:16:27:
f8:a0:65:01:93:3e:f9:e0:95:cf:2d:58:62:9e:6d:5e:03:b7:
11:b5:45:d6:61:6d:79:42:9a:1a:6f:9d:d0:07:41:76:98:f2:
f6:c7:da:3e:e9:a9:5e:50:29:de:a6:e1:a2:5c:34:13:75:cf:
d3:17:c9:42:db:b2:19:18:f9:00:b7:db:86:ed:bd:4d:9a:f5:
9b:e5:d0:b9:06:16:67:f8:e6:d2:c2:e6:d0:a8:b7:ad:30:b2:
6d:ae:ea:c3:de:7f:23:a8:89:1e:0c:1a:ce:eb:d8:e1:cc:65:
37:0b:14:f4:a9:a3:b5:d2:2f:30:4e:61:39:99:9b:2c:2b:31:
12:89:bc:52:39:0a:6e:59:2d:d9:2a:dd:2d:9f:ca:c7:8c:4b:
a6:58:bc:b7:24:df:f8:5d:f8:dc:0b:e8:db:f1:24:19:44:f5:
62:4a:7b:0c:e9:1a:b7:93:cb:d3:31:d0:fc:7b:47:8a:48:81:
40:df:7a:ae:0f:99:cc:dc:d3:a8:22:83:3f:63:00:10:1c:35:
8f:f4:88:4e:ac:e5:7c:64:3c:47:9e:47:ad:fd:df:9b:76:a1:
02:5d:44:7b:df:83:88:99:a8:aa:67:ec:61:a4:03:ce:0d:5a:
1a:ac:b7:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcVQ83Nts89s4IDcBcSRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjQwMTAyMDQzMTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmExMDYzYzgxYTRiNjRiMzdlNTdjOGVkMTcxMDdkMTlkY2ZiNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl3r8Zv3ZM7g50DWn1jDbH+RySlt
oRWvJXiWYB/9WxdgyI+w9SIqRdvC2CIxzNhY8+V3LwwDa7Q4rFwZPbGovMOT3ZjX
bvIMUcGf7y7TK4GiJv5C+To2knxcTVFaUCPlS0vuu1N6kCWTD6FEJ71lKkJvWPdR
5UJHxqPUACfKkvUnofzkmBmcH7ZfIyLHwgUJU6TYblyIUw+NzhS/LniYMn7msMQT
5zzCq5/ZgYP8awKigCkuWl+D3HrxplYzX/ITWXF//vk8yj390TsnwHT2Gj5w+D/J
IO0Jb6pwqfKAsMX7Jwbve2sMynlcDf2NakYN6rCi7jpq6WkswIvOfGZ6oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPahBjyBpLZLN+V8jtFxB9Gdz7ZIMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvOXFFR1BJR2t0a3MzNVh5TzBYRUgwWjNQdGtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZXaMA0G
CSqGSIb3DQEBCwUAA4IBAQB+vEE5dbW27gwlr5ZnTtdSFif4oGUBkz754JXPLVhi
nm1eA7cRtUXWYW15Qpoab53QB0F2mPL2x9o+6aleUCnepuGiXDQTdc/TF8lC27IZ
GPkAt9uG7b1NmvWb5dC5BhZn+ObSwubQqLetMLJtrurD3n8jqIkeDBrO69jhzGU3
CxT0qaO10i8wTmE5mZssKzESibxSOQpuWS3ZKt0tn8rHjEumWLy3JN/4XfjcC+jb
8SQZRPViSnsM6Rq3k8vTMdD8e0eKSIFA33quD5nM3NOoIoM/YwAQHDWP9IhOrOV8
ZDxHnket/d+bdqECXUR734OImaiqZ+xhpAPODVoarLfZ
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:13:26 2024 by rpki-client on console-ams.rpki-client.org