Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/vb4Mu2CSpnF2YvquxSqZSslH91I.roa
File: vb4Mu2CSpnF2YvquxSqZSslH91I.roa (raw, json)
Hash identifier: RLgsf5PmnPOhylQALfe1U+K+2qJ2yvgM/xFA+Z25kBk=
Subject key identifier: BD:BE:0C:BB:60:92:A6:71:76:62:FA:AE:C5:2A:99:4A:C9:47:F7:52
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018CC794CF2DEAD5A6E1CD8DD1E339BA74A2
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/vb4Mu2CSpnF2YvquxSqZSslH91I.roa
Signing time: Tue 02 Jan 2024 00:31:07 +0000
ROA not before: Tue 02 Jan 2024 00:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 45.140.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cf:2d:ea:d5:a6:e1:cd:8d:d1:e3:39:ba:74:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 00:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdbe0cbb6092a6717662faaec52a994ac947f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:0c:4d:45:e5:f5:ed:75:40:c4:4b:8a:fb:
c7:4c:86:7f:b2:d4:68:a0:95:16:9c:2c:67:70:d9:
69:0c:8f:c9:2d:f5:09:aa:42:b5:8b:f6:7f:ae:f4:
af:60:75:b8:51:ad:ef:de:6e:f3:ac:5e:c6:71:66:
cd:c0:78:b3:41:18:f2:b6:c7:1f:8a:e9:d9:8b:a5:
22:32:d8:76:96:c7:fd:ea:48:f2:a7:b0:73:55:76:
51:3d:cd:4c:47:48:a2:66:e1:35:76:4f:f0:f3:b2:
e3:7a:93:f8:ed:9f:b0:32:67:18:97:20:8c:4b:00:
05:a6:8e:c3:51:5a:5f:db:38:e0:6d:6a:da:84:0d:
0b:4d:3d:ba:13:a4:4d:4f:09:41:dd:0c:3d:b2:5a:
76:d2:61:15:f4:76:d2:b5:16:c4:a1:71:6b:79:20:
8d:dc:ca:80:d0:04:f0:4f:d6:cd:38:51:50:44:74:
d7:84:47:7a:f8:fc:16:13:93:88:64:5d:33:3e:b0:
19:35:15:75:c3:65:25:bf:74:b6:9e:11:67:53:36:
9f:a1:9f:df:78:e5:81:81:28:1b:8c:52:3c:64:98:
42:89:93:b1:99:64:d8:b1:0f:4a:c4:f9:64:cb:6a:
91:34:a1:1a:bd:d6:95:e6:9c:f9:55:59:c9:26:88:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BE:0C:BB:60:92:A6:71:76:62:FA:AE:C5:2A:99:4A:C9:47:F7:52
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/vb4Mu2CSpnF2YvquxSqZSslH91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
35:39:f9:c4:83:7d:9f:67:dc:21:f8:03:84:c1:88:c9:6c:6f:
8c:52:7a:a0:85:3b:6b:e9:4b:e4:85:9d:4d:65:df:93:e9:8e:
f4:48:63:2c:18:13:22:28:c4:14:21:48:8c:02:9b:2b:3e:16:
e7:e3:05:35:74:f3:54:a3:ec:f6:76:54:3f:fb:64:c6:7c:74:
67:25:d1:68:87:25:be:3f:f1:df:cf:1a:05:5a:5c:aa:dc:86:
29:51:92:3a:a4:de:f3:c1:0e:0d:cd:54:f0:47:3b:e9:73:4f:
b0:71:16:d7:08:24:53:ac:8b:e6:57:a9:27:9f:4e:8c:bb:f9:
49:08:6f:e6:d5:1a:9d:ec:a1:1a:ea:6b:f2:dd:7f:0b:b0:6e:
16:84:16:d0:40:2f:7e:00:3e:a7:1d:30:6e:90:13:4d:44:7f:
75:83:5a:fd:3d:dc:90:eb:d6:4c:98:e8:30:e8:08:58:9b:da:
bf:ba:c9:db:df:7e:8a:1e:fa:c6:d2:af:a7:8c:a0:64:3c:46:
be:d3:f1:31:6e:7b:c4:33:37:d7:09:7f:01:1a:39:74:e7:0a:
32:62:c2:af:16:7b:62:70:a8:b5:4c:72:08:e6:67:ef:da:ef:
50:d5:c4:15:35:1d:68:2b:41:9a:77:58:dc:88:e3:e5:2b:c1:
a8:1b:4f:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlM8t6tWm4c2N0eM5unSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjQwMTAyMDAzMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGJlMGNiYjYwOTJhNjcxNzY2MmZhYWVjNTJhOTk0YWM5NDdmNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNMMTUXl9e11QMRLivvHTIZ/stRo
oJUWnCxncNlpDI/JLfUJqkK1i/Z/rvSvYHW4Ua3v3m7zrF7GcWbNwHizQRjytscf
iunZi6UiMth2lsf96kjyp7BzVXZRPc1MR0iiZuE1dk/w87LjepP47Z+wMmcYlyCM
SwAFpo7DUVpf2zjgbWrahA0LTT26E6RNTwlB3Qw9slp20mEV9HbStRbEoXFreSCN
3MqA0ATwT9bNOFFQRHTXhEd6+PwWE5OIZF0zPrAZNRV1w2Ulv3S2nhFnUzafoZ/f
eOWBgSgbjFI8ZJhCiZOxmWTYsQ9KxPlky2qRNKEavdaV5pz5VVnJJohhDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2+DLtgkqZxdmL6rsUqmUrJR/dSMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvdmI0TXUyQ1NwbkYyWXZxdXhTcVpTc2xIOTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQA1OfnEg32fZ9wh+AOEwYjJbG+MUnqghTtr6UvkhZ1N
Zd+T6Y70SGMsGBMiKMQUIUiMApsrPhbn4wU1dPNUo+z2dlQ/+2TGfHRnJdFohyW+
P/HfzxoFWlyq3IYpUZI6pN7zwQ4NzVTwRzvpc0+wcRbXCCRTrIvmV6knn06Mu/lJ
CG/m1Rqd7KEa6mvy3X8LsG4WhBbQQC9+AD6nHTBukBNNRH91g1r9PdyQ69ZMmOgw
6AhYm9q/usnb336KHvrG0q+njKBkPEa+0/ExbnvEMzfXCX8BGjl05woyYsKvFnti
cKi1THII5mfv2u9Q1cQVNR1oK0Gad1jciOPlK8GoG0+r
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:48 2024 by rpki-client on console-ams.rpki-client.org