Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/8Ku-uykbIPPTlg6srAUkHaIWrAY.roa
File: 8Ku-uykbIPPTlg6srAUkHaIWrAY.roa (raw, json)
Hash identifier: P8wJJdhINlvCX0c4HKpxxZMuSCo21FS84pundorzeng=
Subject key identifier: F0:AB:BE:BB:29:1B:20:F3:D3:96:0E:AC:AC:05:24:1D:A2:16:AC:06
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 018CC72713E85605486803E5439C5750CD72
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/8Ku-uykbIPPTlg6srAUkHaIWrAY.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 45.129.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:e8:56:05:48:68:03:e5:43:9c:57:50:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0abbebb291b20f3d3960eacac05241da216ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:c9:f2:1d:3a:97:f5:53:f9:3b:f2:73:f3:
de:46:e8:cc:74:4f:9a:34:d9:9b:87:0a:33:6f:30:
e1:72:d4:a1:58:cd:75:29:bf:f3:36:e6:70:73:67:
56:97:f6:58:00:e6:d1:63:1c:88:0b:a4:a9:42:30:
00:d9:4e:a7:fd:6d:c5:df:3a:92:5e:50:72:b0:ab:
dd:ef:65:a8:32:a0:69:94:57:ca:53:cd:79:b7:c3:
1d:f4:9f:0a:2d:a4:2c:27:c6:19:99:53:e3:84:8f:
59:db:fa:ae:10:cd:2a:94:d6:8b:83:59:b1:50:87:
6b:af:a5:80:c8:27:9d:41:1d:7b:d5:87:ab:ad:14:
92:db:e1:3f:c4:d2:ef:96:c6:bc:f5:81:e1:b8:4e:
ea:23:c5:93:55:c8:fc:77:fa:45:73:39:ee:3a:08:
8b:08:5b:c0:af:db:15:3f:3f:cc:20:16:27:14:9a:
f0:2b:7e:fb:ae:9f:48:b9:b7:c4:68:af:48:9b:cb:
cf:a4:a6:d0:71:9d:39:d8:1f:56:89:ba:d3:a8:f7:
cd:0f:d9:64:10:f6:2e:9e:d1:30:26:61:c8:b7:a4:
13:02:80:0f:dd:4e:48:6e:05:33:f7:ab:e1:0d:e5:
08:96:ff:a0:ff:79:46:6b:9c:09:c0:3f:9b:07:cf:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:BE:BB:29:1B:20:F3:D3:96:0E:AC:AC:05:24:1D:A2:16:AC:06
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/8Ku-uykbIPPTlg6srAUkHaIWrAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f2:9b:06:04:da:77:a4:77:23:c6:d5:9c:41:82:fa:b4:53:
1d:db:dd:4e:59:ef:79:34:d2:60:da:34:1d:86:03:90:df:7d:
3f:a8:6b:49:14:c8:33:e7:47:3e:9b:d8:45:ff:51:47:c0:76:
c4:76:8f:0c:04:cd:86:cf:8f:13:66:b2:c1:34:df:0e:ee:c3:
4c:cd:db:c5:68:06:3a:4e:ae:44:37:a8:c9:84:60:51:4c:42:
5a:f5:a7:7b:eb:47:93:51:c2:66:70:d9:c1:4c:4d:e5:15:e9:
01:fb:b6:ae:b4:85:65:e5:da:ae:bc:7a:85:57:43:37:4c:f5:
41:a4:78:95:87:df:77:52:67:92:db:32:f6:66:9d:ac:37:04:
e1:83:5d:13:d2:56:07:74:5c:8e:2e:e0:29:1a:c2:f7:8c:ad:
e0:f8:1f:93:51:4c:84:9d:3c:b8:bb:7d:62:56:a7:a6:5c:e1:
14:bb:06:dc:6d:fb:37:1e:0d:9b:5f:82:f6:8b:6f:ee:4d:fb:
61:98:9c:93:49:2e:34:1f:7a:01:c6:7d:1a:61:2f:ba:7c:7b:
62:3c:f9:47:3e:87:75:26:67:c5:24:67:d5:02:a3:a1:94:dd:
d8:4e:56:f0:7e:64:52:21:67:83:d3:58:07:b7:42:51:10:9e:
83:81:db:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJxPoVgVIaAPlQ5xXUM1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl
YTJiYTEwHhcNMjQwMTAxMjIzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGFiYmViYjI5MWIyMGYzZDM5NjBlYWNhYzA1MjQxZGEyMTZhYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy3J8h06l/VT+Tvyc/PeRujMdE+a
NNmbhwozbzDhctShWM11Kb/zNuZwc2dWl/ZYAObRYxyIC6SpQjAA2U6n/W3F3zqS
XlBysKvd72WoMqBplFfKU815t8Md9J8KLaQsJ8YZmVPjhI9Z2/quEM0qlNaLg1mx
UIdrr6WAyCedQR171YerrRSS2+E/xNLvlsa89YHhuE7qI8WTVcj8d/pFcznuOgiL
CFvAr9sVPz/MIBYnFJrwK377rp9IubfEaK9Im8vPpKbQcZ052B9WibrTqPfND9lk
EPYuntEwJmHIt6QTAoAP3U5IbgUz96vhDeUIlv+g/3lGa5wJwD+bB89GlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCrvrspGyDz05YOrKwFJB2iFqwGMB8GA1UdIwQY
MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt
OTJlOGJlNjI3OWJiLzEvOEt1LXV5a2JJUFBUbGc2c3JBVWtIYUlXckFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi
LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHBMA0G
CSqGSIb3DQEBCwUAA4IBAQCc8psGBNp3pHcjxtWcQYL6tFMd291OWe95NNJg2jQd
hgOQ330/qGtJFMgz50c+m9hF/1FHwHbEdo8MBM2Gz48TZrLBNN8O7sNMzdvFaAY6
Tq5EN6jJhGBRTEJa9ad760eTUcJmcNnBTE3lFekB+7autIVl5dquvHqFV0M3TPVB
pHiVh993UmeS2zL2Zp2sNwThg10T0lYHdFyOLuApGsL3jK3g+B+TUUyEnTy4u31i
VqemXOEUuwbcbfs3Hg2bX4L2i2/uTfthmJyTSS40H3oBxn0aYS+6fHtiPPlHPod1
JmfFJGfVAqOhlN3YTlbwfmRSIWeD01gHt0JREJ6Dgduc
-----END CERTIFICATE-----
Generated at Tue Jun 4 02:55:32 2024 by rpki-client on console-fra.rpki-client.org