Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YvT-5WfCqZAph_g1lZUOsIUeDkw.roa
File: YvT-5WfCqZAph_g1lZUOsIUeDkw.roa (raw, json)
Hash identifier: bKxWvBeScoupq66F7xcTXWu6OrUWAXPx4lkJ0N/46jM=
Subject key identifier: 62:F4:FE:E5:67:C2:A9:90:29:87:F8:35:95:95:0E:B0:85:1E:0E:4C
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0191382C79EA71E96524D7BA222C044ED06E
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YvT-5WfCqZAph_g1lZUOsIUeDkw.roa
Signing time: Fri 09 Aug 2024 17:25:24 +0000
ROA not before: Fri 09 Aug 2024 17:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 22
45.150.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:2c:79:ea:71:e9:65:24:d7:ba:22:2c:04:4e:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 9 17:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f4fee567c2a9902987f83595950eb0851e0e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:e0:2b:96:03:ab:cd:2e:e0:94:49:50:6c:
a1:c1:0b:b7:6c:ce:d5:d3:f1:6c:b5:55:b2:1d:d9:
5f:fb:03:af:c2:f0:da:2d:dd:7e:ed:83:7a:f2:7d:
eb:2e:c7:b4:3f:74:bd:f1:ae:65:9e:1a:a7:a9:f9:
21:b0:b3:1d:fe:2e:97:52:dc:f2:e9:17:89:92:2c:
44:ae:27:8c:b2:91:86:cd:d5:6c:82:3c:c1:6c:db:
99:94:e4:39:2d:84:19:6e:9e:ef:57:a6:a0:4e:8a:
41:17:0c:ac:ed:e9:8b:5c:76:d0:b0:9d:50:69:14:
10:76:d1:8f:c7:a5:ea:31:d8:c1:b7:f0:17:1d:d8:
ad:e7:7e:9d:86:77:df:67:9e:eb:38:d6:df:4b:da:
35:c1:b0:dc:c8:64:50:1d:9b:db:a2:95:68:35:b3:
0b:56:34:39:ed:05:e5:6f:b2:eb:af:c8:75:88:bd:
d2:b5:af:9a:6b:14:e7:73:25:6e:62:7b:44:9f:a1:
2d:f9:1b:ae:35:f8:4f:34:69:c1:65:bd:5e:90:9c:
55:c3:97:fb:b4:d5:86:22:b0:9f:e3:12:33:09:12:
1a:4f:93:d6:79:bc:e7:0f:b8:cf:c1:c5:c9:40:0d:
4b:59:72:e4:1c:21:d6:ee:fe:12:1e:e4:a1:6f:84:
8e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:FE:E5:67:C2:A9:90:29:87:F8:35:95:95:0E:B0:85:1E:0E:4C
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/YvT-5WfCqZAph_g1lZUOsIUeDkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
e6:3d:6b:a5:e9:d9:de:5b:ec:a2:98:b0:af:51:da:4a:e6:06:
84:35:5e:b5:ea:54:1c:4e:33:28:17:70:64:08:59:53:2d:52:
d1:9e:e1:cb:b4:e6:b3:60:7a:0b:4b:58:19:60:f0:5c:8e:7c:
00:ed:57:9c:57:f3:71:81:8d:8e:bb:93:b9:7b:43:6b:a0:eb:
c8:dc:33:ff:a2:de:30:9a:ee:c9:3e:55:2d:fd:75:1e:53:bc:
18:5f:e6:36:26:cd:6f:f0:4a:45:98:ca:34:94:c0:4f:a2:fb:
90:58:a9:49:66:4e:dc:33:99:e5:9d:5f:0d:c1:4f:5c:ed:8d:
52:85:e0:3f:cc:64:3e:19:0f:8e:03:ad:5d:ce:67:05:fb:f8:
8d:73:25:7b:af:4b:b0:f2:99:65:38:e4:e2:92:43:d3:24:33:
14:b7:52:4c:66:47:8e:fd:ed:4d:12:ba:42:59:9b:82:bc:48:
e1:d2:44:08:c9:92:61:e1:f0:91:9b:b8:6d:5a:42:b3:a5:cc:
6a:50:bc:2b:95:d9:0e:6c:a0:f8:e7:26:27:2e:7a:fa:8c:9f:
c5:c2:02:22:ef:7b:d0:eb:d5:09:ad:cd:01:b0:68:c0:12:c5:
fc:5f:2f:3b:23:69:f4:10:e2:54:50:1a:68:34:30:8c:ea:b2:
80:fb:94:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZE4LHnqcellJNe6IiwETtBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwODA5MTcyNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmY0ZmVlNTY3YzJhOTkwMjk4N2Y4MzU5NTk1MGViMDg1MWUwZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOHgK5YDq80u4JRJUGyhwQu3bM7V
0/FstVWyHdlf+wOvwvDaLd1+7YN68n3rLse0P3S98a5lnhqnqfkhsLMd/i6XUtzy
6ReJkixErieMspGGzdVsgjzBbNuZlOQ5LYQZbp7vV6agTopBFwys7emLXHbQsJ1Q
aRQQdtGPx6XqMdjBt/AXHdit536dhnffZ57rONbfS9o1wbDcyGRQHZvbopVoNbML
VjQ57QXlb7Lrr8h1iL3Sta+aaxTncyVuYntEn6Et+RuuNfhPNGnBZb1ekJxVw5f7
tNWGIrCf4xIzCRIaT5PWebznD7jPwcXJQA1LWXLkHCHW7v4SHuShb4SOhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGL0/uVnwqmQKYf4NZWVDrCFHg5MMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvWXZULTVXZkNxWkFwaF9nMWxaVU9zSVVlRGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY3QAwQC
LZYIMA0GCSqGSIb3DQEBCwUAA4IBAQDmPWul6dneW+yimLCvUdpK5gaENV616lQc
TjMoF3BkCFlTLVLRnuHLtOazYHoLS1gZYPBcjnwA7VecV/NxgY2Ou5O5e0NroOvI
3DP/ot4wmu7JPlUt/XUeU7wYX+Y2Js1v8EpFmMo0lMBPovuQWKlJZk7cM5nlnV8N
wU9c7Y1SheA/zGQ+GQ+OA61dzmcF+/iNcyV7r0uw8pllOOTikkPTJDMUt1JMZkeO
/e1NErpCWZuCvEjh0kQIyZJh4fCRm7htWkKzpcxqULwrldkObKD45yYnLnr6jJ/F
wgIi73vQ69UJrc0BsGjAEsX8Xy87I2n0EOJUUBpoNDCM6rKA+5Rh
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:26:42 2024 by rpki-client on console-fra.rpki-client.org