Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/VrqQHowflt1nRJ9jurY3564NCtQ.roa
File: VrqQHowflt1nRJ9jurY3564NCtQ.roa (raw, json)
Hash identifier: yTQXq1mcyCwDlDCFu5PJ+LDHJcAgJAVmt/oGs8FGn7U=
Subject key identifier: 56:BA:90:1E:8C:1F:96:DD:67:44:9F:63:BA:B6:37:E7:AE:0D:0A:D4
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018CC8DE38B983082BDAEC85AD72BA44685A
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/VrqQHowflt1nRJ9jurY3564NCtQ.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.87.162.0/23 maxlen: 23
45.87.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:38:b9:83:08:2b:da:ec:85:ad:72:ba:44:68:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ba901e8c1f96dd67449f63bab637e7ae0d0ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:0f:9f:e6:09:7f:e0:bd:13:aa:88:7c:d4:
d0:53:39:06:f2:62:7c:6f:43:c3:87:9b:4c:ef:b5:
aa:c6:1e:fa:c4:c2:b5:6c:a9:03:b7:ab:46:4f:f9:
0c:dc:32:c6:60:48:79:70:3b:68:65:c3:b0:32:43:
49:d6:ed:16:13:f9:15:30:b7:2a:44:a1:1d:93:0d:
c7:1a:1d:d0:1c:f4:1f:5f:dc:dc:79:b9:74:ff:b0:
d9:a5:15:aa:b6:d1:a6:cd:81:15:34:dd:5a:5e:10:
e6:72:e0:f9:7a:a1:3b:ea:d7:09:fa:a6:53:ed:93:
88:81:65:7e:60:8a:c6:39:1b:1d:60:4e:de:d2:33:
ad:44:64:ce:92:e7:bf:93:e3:05:59:00:b1:c6:b3:
99:d8:62:cc:e3:d2:85:11:2e:cd:90:5b:9a:60:47:
d2:98:52:b9:72:ed:53:fd:6f:04:b5:16:8a:ad:2f:
36:5f:7c:f4:49:68:a5:e8:1f:d6:00:86:bc:63:0c:
e8:65:a5:35:ff:53:28:96:ba:06:e8:71:83:78:48:
fb:34:ed:28:f9:9c:5b:d3:98:57:20:97:7c:6b:55:
b2:89:15:c9:49:1e:6c:9f:b8:28:91:ce:4c:70:80:
a3:e4:e0:d7:4d:a3:77:45:d5:0d:68:e0:94:a9:f8:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:90:1E:8C:1F:96:DD:67:44:9F:63:BA:B6:37:E7:AE:0D:0A:D4
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/VrqQHowflt1nRJ9jurY3564NCtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
66:e2:0b:0f:17:e1:38:92:10:cf:28:0d:8f:07:48:7e:ae:bf:
5f:1c:df:96:ac:bd:73:ca:da:e8:0d:87:ec:9c:53:ee:5e:53:
ea:50:a9:82:1e:06:22:d2:24:dd:f7:38:27:26:57:b6:a9:a9:
96:51:ec:84:06:53:d5:57:6c:cb:bf:a6:c5:3f:2b:d9:c9:d8:
53:fb:18:ac:ed:69:eb:e6:d7:99:90:1a:50:e4:06:13:6a:89:
bc:b9:d9:17:bb:94:de:67:b8:75:cc:01:ad:2f:b5:92:3a:f1:
89:d7:19:ab:a8:37:a1:36:97:70:fb:6f:0b:f6:99:e1:a4:ae:
80:d0:df:2d:b0:37:a9:ae:21:98:ef:6b:42:14:44:b4:c7:fe:
14:f4:f2:b3:9a:23:3b:1b:61:5c:dc:aa:1c:93:0f:ad:5b:76:
23:53:1c:39:e3:6f:e2:55:69:58:fb:47:3e:b7:e1:5e:47:c8:
9b:62:3a:a5:59:c2:6e:6c:c8:f4:25:28:ee:6e:86:00:63:b2:
64:b5:4f:22:8c:85:4a:2e:da:22:3a:1a:37:79:6c:28:31:9c:
9e:92:c6:6e:f8:fa:ce:5c:b9:dd:57:bf:1c:98:17:96:c3:59:
85:4b:a4:3c:49:cd:06:37:15:3f:51:cb:b4:2d:11:05:af:53:
6d:e9:fc:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3ji5gwgr2uyFrXK6RGhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjQwMTAyMDYzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJhOTAxZThjMWY5NmRkNjc0NDlmNjNiYWI2MzdlN2FlMGQwYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/4Pn+YJf+C9E6qIfNTQUzkG8mJ8
b0PDh5tM77Wqxh76xMK1bKkDt6tGT/kM3DLGYEh5cDtoZcOwMkNJ1u0WE/kVMLcq
RKEdkw3HGh3QHPQfX9zcebl0/7DZpRWqttGmzYEVNN1aXhDmcuD5eqE76tcJ+qZT
7ZOIgWV+YIrGORsdYE7e0jOtRGTOkue/k+MFWQCxxrOZ2GLM49KFES7NkFuaYEfS
mFK5cu1T/W8EtRaKrS82X3z0SWil6B/WAIa8YwzoZaU1/1MolroG6HGDeEj7NO0o
+Zxb05hXIJd8a1WyiRXJSR5sn7gokc5McICj5ODXTaN3RdUNaOCUqfj0IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFa6kB6MH5bdZ0SfY7q2N+euDQrUMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvVnJxUUhvd2ZsdDFuUko5anVyWTM1NjROQ3RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVegMA0G
CSqGSIb3DQEBCwUAA4IBAQBm4gsPF+E4khDPKA2PB0h+rr9fHN+WrL1zytroDYfs
nFPuXlPqUKmCHgYi0iTd9zgnJle2qamWUeyEBlPVV2zLv6bFPyvZydhT+xis7Wnr
5teZkBpQ5AYTaom8udkXu5TeZ7h1zAGtL7WSOvGJ1xmrqDehNpdw+28L9pnhpK6A
0N8tsDepriGY72tCFES0x/4U9PKzmiM7G2Fc3Kockw+tW3YjUxw542/iVWlY+0c+
t+FeR8ibYjqlWcJubMj0JSjuboYAY7JktU8ijIVKLtoiOho3eWwoMZyeksZu+PrO
XLndV78cmBeWw1mFS6Q8Sc0GNxU/Ucu0LREFr1Nt6fw+
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:59:05 2024 by rpki-client on console-ams.rpki-client.org