Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Takwh2UUw4zKj4kR9VWKOZy0Uts.roa
File: Takwh2UUw4zKj4kR9VWKOZy0Uts.roa (raw, json)
Hash identifier: 9X3lNIMseAURT8n4kiHFuqssax4N2qy0qkkusRpu/RU=
Subject key identifier: 4D:A9:30:87:65:14:C3:8C:CA:8F:89:11:F5:55:8A:39:9C:B4:52:DB
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 018CC56ED696F616A408C9EA27D99F4E33CE
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Takwh2UUw4zKj4kR9VWKOZy0Uts.roa
Signing time: Mon 01 Jan 2024 14:30:24 +0000
ROA not before: Mon 01 Jan 2024 14:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206728
IP address blocks: 45.141.84.0/24 maxlen: 24
45.141.87.0/24 maxlen: 24
45.141.86.0/24 maxlen: 24
2a0b:7ec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d6:96:f6:16:a4:08:c9:ea:27:d9:9f:4e:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4da930876514c38cca8f8911f5558a399cb452db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:65:22:09:e0:41:93:d3:58:ab:6f:65:b8:
e9:1a:1e:17:f2:de:e2:0e:7a:f6:cf:68:fc:8c:9b:
b2:28:07:18:27:e9:8d:48:e3:11:b7:24:18:51:f1:
0e:33:00:cb:6c:32:49:f3:0c:82:4e:c6:4d:7f:c6:
0b:9f:f3:ff:ae:b3:35:52:f7:65:99:4d:bf:5e:e5:
68:2a:19:72:06:0c:93:83:4e:ef:63:17:27:ea:80:
e2:4a:13:40:ad:76:b0:e2:2c:b9:2f:e4:e0:d5:a2:
23:78:97:4c:2d:8f:64:4f:3e:5a:70:a4:c2:a7:de:
cd:c2:ab:23:da:eb:4f:5e:82:25:4e:59:5f:3e:65:
12:6b:5b:48:0f:05:dd:38:99:a8:c5:17:c0:e6:8b:
5a:76:fc:6b:40:22:17:32:d5:26:54:4c:66:4f:35:
f0:ce:76:bc:65:b0:9f:51:9f:32:35:3a:cc:77:39:
2d:8b:25:fd:38:26:dc:7f:f0:75:d9:24:be:bf:68:
92:a3:90:bb:df:06:5a:a0:53:40:36:36:97:06:2f:
4b:88:3e:be:e2:97:3f:48:48:9e:fe:ab:2e:e6:ed:
fc:7c:2b:8a:c7:b3:ed:51:65:0e:ef:1f:40:68:ab:
3f:df:a2:e0:8a:d8:14:2d:66:4c:52:32:c1:42:0e:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:30:87:65:14:C3:8C:CA:8F:89:11:F5:55:8A:39:9C:B4:52:DB
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/Takwh2UUw4zKj4kR9VWKOZy0Uts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.84.0/24
45.141.86.0/23
IPv6:
2a0b:7ec0::/29
Signature Algorithm: sha256WithRSAEncryption
bd:6c:62:bb:ad:44:e5:99:b5:8d:7c:94:2b:6f:c3:54:57:e3:
74:c7:81:b3:6a:54:a4:7e:79:7b:f9:d3:9a:0c:bc:55:b0:04:
2b:6d:fd:03:43:54:88:44:a1:c3:b5:69:83:38:83:51:a5:bb:
f2:24:70:38:9b:46:46:f3:27:b5:42:08:cc:9d:f6:e5:17:83:
76:9b:41:7c:cb:34:ce:1e:64:1e:46:5d:71:52:a4:77:0e:35:
80:7c:0e:67:e3:3f:7b:a3:d0:5f:8d:ff:89:3b:b4:b8:ab:06:
85:be:d2:94:7e:c5:73:38:16:30:6d:36:86:48:f9:5b:b4:4f:
fe:8a:37:c8:85:c4:e8:06:f2:b3:9b:d6:c0:fe:04:17:19:7c:
89:cd:70:53:9d:f5:f6:94:56:c3:f6:44:44:57:3f:8e:10:1a:
af:c7:c8:86:4d:63:83:c8:0e:d4:ee:61:a2:0c:4f:a8:b4:fc:
19:40:c3:11:88:f1:a2:90:4a:8d:d3:f6:c1:1a:9e:fd:fe:6d:
0a:ce:a8:e4:2d:53:c6:3b:00:46:ab:9b:f3:4d:22:3d:26:d5:
e2:a7:38:43:36:7d:84:60:4e:78:83:b0:70:2d:62:91:85:ec:
e6:f7:1d:c8:d6:61:a6:45:32:2d:0c:3d:f4:e2:a9:d5:1b:42:
06:76:ec:22
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFbtaW9hakCMnqJ9mfTjPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjQwMTAxMTQzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGE5MzA4NzY1MTRjMzhjY2E4Zjg5MTFmNTU1OGEzOTljYjQ1MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEJlIgngQZPTWKtvZbjpGh4X8t7i
Dnr2z2j8jJuyKAcYJ+mNSOMRtyQYUfEOMwDLbDJJ8wyCTsZNf8YLn/P/rrM1Uvdl
mU2/XuVoKhlyBgyTg07vYxcn6oDiShNArXaw4iy5L+Tg1aIjeJdMLY9kTz5acKTC
p97Nwqsj2utPXoIlTllfPmUSa1tIDwXdOJmoxRfA5otadvxrQCIXMtUmVExmTzXw
zna8ZbCfUZ8yNTrMdzktiyX9OCbcf/B12SS+v2iSo5C73wZaoFNANjaXBi9LiD6+
4pc/SEie/qsu5u38fCuKx7PtUWUO7x9AaKs/36LgitgULWZMUjLBQg7d/wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFE2pMIdlFMOMyo+JEfVVijmctFLbMB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvVGFrd2gyVVV3NHpLajRrUjlWV0tPWnkwVXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALY1UAwQB
LY1WMA0EAgACMAcDBQMqC37AMA0GCSqGSIb3DQEBCwUAA4IBAQC9bGK7rUTlmbWN
fJQrb8NUV+N0x4GzalSkfnl7+dOaDLxVsAQrbf0DQ1SIRKHDtWmDOINRpbvyJHA4
m0ZG8ye1QgjMnfblF4N2m0F8yzTOHmQeRl1xUqR3DjWAfA5n4z97o9Bfjf+JO7S4
qwaFvtKUfsVzOBYwbTaGSPlbtE/+ijfIhcToBvKzm9bA/gQXGXyJzXBTnfX2lFbD
9kREVz+OEBqvx8iGTWODyA7U7mGiDE+otPwZQMMRiPGikEqN0/bBGp79/m0Kzqjk
LVPGOwBGq5vzTSI9JtXipzhDNn2EYE54g7BwLWKRhezm9x3I1mGmRTItDD304qnV
G0IGduwi
-----END CERTIFICATE-----
Generated at Fri Jun 14 06:26:07 2024 by rpki-client on console-fra.rpki-client.org