Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3PoCEGUHO0F6-bM2snR-v6cWDC8.roa
File: 3PoCEGUHO0F6-bM2snR-v6cWDC8.roa (raw, json)
Hash identifier: NmNWpCd8PLoKASNzrrCpWi9O2aNgOQt6RcYJxaJwEDw=
Subject key identifier: DC:FA:02:10:65:07:3B:41:7A:F9:B3:36:B2:74:7E:BF:A7:16:0C:2F
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 018CC8DE6AE3AB4EFAC17AFC8EE9BFF882CD
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3PoCEGUHO0F6-bM2snR-v6cWDC8.roa
Signing time: Tue 02 Jan 2024 06:31:08 +0000
ROA not before: Tue 02 Jan 2024 06:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212752
IP address blocks: 45.90.83.0/24 maxlen: 24
45.90.82.0/24 maxlen: 24
2a10:b480::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6a:e3:ab:4e:fa:c1:7a:fc:8e:e9:bf:f8:82:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Jan 2 06:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcfa021065073b417af9b336b2747ebfa7160c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:d1:3d:39:11:a4:64:89:c6:89:d2:24:11:
27:6c:78:d5:c2:52:56:eb:a5:12:18:3c:bc:00:73:
9e:10:b1:fb:d3:1b:fb:43:51:c6:7a:fc:4a:fd:54:
f7:a6:ce:c4:e0:48:89:36:18:8b:4d:e1:fa:7c:59:
7e:af:1a:f5:ae:6c:16:db:be:71:b0:47:f3:cd:e8:
c6:86:65:b6:1e:b3:36:fe:80:fb:14:5e:90:04:45:
59:7d:eb:29:3b:c0:ba:9a:32:1c:d6:9a:bb:7d:28:
b2:81:1c:dd:e1:6b:28:b1:77:8b:78:ca:b5:ba:a2:
cb:ad:44:0b:da:0d:6c:17:f7:aa:4a:93:23:77:3d:
47:34:f5:f9:36:d3:c4:90:c4:30:9f:67:9f:7c:71:
86:82:fd:6b:15:ee:bb:1d:20:bd:db:07:06:fc:c6:
34:b4:49:6e:84:ad:ab:4b:5f:48:7c:a5:45:20:a2:
2c:a7:8e:9f:be:22:9f:ff:b8:50:48:ad:49:26:f5:
00:31:ff:ba:07:10:55:f2:93:80:fd:34:5b:ed:61:
c1:6b:bd:18:7d:86:0f:90:44:2f:24:22:1c:0f:aa:
00:e3:10:ab:62:55:bf:89:2a:da:f3:15:40:cf:9e:
f7:1a:91:72:99:48:9c:b0:26:34:68:be:0f:47:20:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:02:10:65:07:3B:41:7A:F9:B3:36:B2:74:7E:BF:A7:16:0C:2F
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/3PoCEGUHO0F6-bM2snR-v6cWDC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.82.0/23
IPv6:
2a10:b480::/29
Signature Algorithm: sha256WithRSAEncryption
6c:aa:9e:79:5e:38:fc:8e:a3:99:f5:5f:32:85:69:a3:8c:94:
59:34:1d:6b:e6:a5:f8:41:54:09:81:5c:a3:be:13:6d:67:3e:
2d:d4:fa:45:57:ba:c2:23:97:cc:e3:5d:76:d9:51:49:b2:f8:
88:7e:4c:4f:67:a0:16:c0:05:9b:5b:7b:7f:e1:92:dc:73:50:
73:bf:a3:3d:4d:10:c0:a5:ce:4e:43:e0:44:d9:1a:6a:14:af:
b0:6c:cd:26:19:c9:93:3c:cc:d2:c0:11:ea:2d:65:ec:01:e2:
94:d1:45:1e:79:ec:94:3e:03:1d:4e:b0:f2:fb:48:a8:bd:95:
c4:aa:59:4f:76:94:b6:1d:24:ab:36:ac:10:d9:6c:dd:10:27:
1d:14:55:04:f4:42:f7:f4:75:61:9b:5c:25:90:26:bd:4f:5f:
c0:9b:1a:f0:8f:68:21:01:3d:64:5b:53:b5:82:ed:51:66:79:
a7:43:0a:74:0f:c2:a0:94:ab:22:72:be:7d:e6:eb:7c:b4:35:
20:55:45:4c:2c:5b:13:4e:c1:cf:fb:b7:39:be:a0:a5:ae:68:
6d:b6:d8:98:87:0b:b5:be:05:da:ab:e2:d4:16:75:1b:f5:83:
79:8d:91:c9:20:c1:06:a9:0d:f4:91:28:61:ae:fa:5c:35:5a:
92:9f:78:2c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI3mrjq076wXr8jum/+ILNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4
ZDBiNjgwHhcNMjQwMTAyMDYzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ZhMDIxMDY1MDczYjQxN2FmOWIzMzZiMjc0N2ViZmE3MTYwYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikfRPTkRpGSJxonSJBEnbHjVwlJW
66USGDy8AHOeELH70xv7Q1HGevxK/VT3ps7E4EiJNhiLTeH6fFl+rxr1rmwW275x
sEfzzejGhmW2HrM2/oD7FF6QBEVZfespO8C6mjIc1pq7fSiygRzd4WsosXeLeMq1
uqLLrUQL2g1sF/eqSpMjdz1HNPX5NtPEkMQwn2effHGGgv1rFe67HSC92wcG/MY0
tEluhK2rS19IfKVFIKIsp46fviKf/7hQSK1JJvUAMf+6BxBV8pOA/TRb7WHBa70Y
fYYPkEQvJCIcD6oA4xCrYlW/iSra8xVAz573GpFymUicsCY0aL4PRyDSnQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNz6AhBlBztBevmzNrJ0fr+nFgwvMB8GA1UdIwQY
MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt
ZDU4M2Y5YTY2ZTNiLzEvM1BvQ0VHVUhPMEY2LWJNMnNuUi12NmNXREM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi
LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLVpSMA0E
AgACMAcDBQMqELSAMA0GCSqGSIb3DQEBCwUAA4IBAQBsqp55Xjj8jqOZ9V8yhWmj
jJRZNB1r5qX4QVQJgVyjvhNtZz4t1PpFV7rCI5fM41122VFJsviIfkxPZ6AWwAWb
W3t/4ZLcc1Bzv6M9TRDApc5OQ+BE2RpqFK+wbM0mGcmTPMzSwBHqLWXsAeKU0UUe
eeyUPgMdTrDy+0iovZXEqllPdpS2HSSrNqwQ2WzdECcdFFUE9EL39HVhm1wlkCa9
T1/Amxrwj2ghAT1kW1O1gu1RZnmnQwp0D8KglKsicr595ut8tDUgVUVMLFsTTsHP
+7c5vqClrmhtttiYhwu1vgXaq+LUFnUb9YN5jZHJIMEGqQ30kShhrvpcNVqSn3gs
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:00:05 2024 by rpki-client on console-fra.rpki-client.org