Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/j4tQmSNO_txZVSDWZn63cjYtJXc.roa
File: j4tQmSNO_txZVSDWZn63cjYtJXc.roa (raw, json)
Hash identifier: 4sFbf7wY9sk8H9Z7lIQg2WrYmQLPwp62M1bcQhWKBTk=
Subject key identifier: 8F:8B:50:99:23:4E:FE:DC:59:55:20:D6:66:7E:B7:72:36:2D:25:77
Certificate issuer: /CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Certificate serial: 018CC49398FC431C0BDECFCC3EB51552044F
Authority key identifier: 18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/j4tQmSNO_txZVSDWZn63cjYtJXc.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15466
IP address blocks: 45.150.28.0/22 maxlen: 22
217.169.224.0/20 maxlen: 20
2a04:8f80:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:98:fc:43:1c:0b:de:cf:cc:3e:b5:15:52:04:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1830e603e9ca8c05d4c1bc62b0b76e7bd9d18909
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f8b5099234efedc595520d6667eb772362d2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:75:ec:30:f0:c2:38:cd:b2:3d:9d:63:80:
a5:bc:27:42:5f:a7:1c:d3:b8:c2:c4:94:d2:52:c2:
7c:00:74:48:83:f2:e5:54:06:30:94:77:b1:49:45:
d4:f6:78:1a:bd:e6:a7:5c:88:23:5a:ef:32:92:d0:
9d:b5:c5:a9:f6:2a:12:55:14:15:b5:59:76:9d:55:
4e:df:5e:00:0d:18:e6:a4:68:8f:e2:84:0d:db:a0:
26:94:84:2d:c9:7d:e3:99:5b:d6:6f:3b:40:14:44:
70:44:bf:21:75:6a:6f:e7:d6:aa:25:db:59:65:db:
95:b9:b8:25:66:c0:8e:38:dd:5d:3b:95:68:28:9c:
a4:0e:89:84:d6:cb:2c:a2:7d:31:db:b3:35:5a:b1:
0c:fe:dd:92:33:d5:f3:ed:84:30:f3:27:4e:2e:11:
00:4a:d6:7e:02:1d:bd:8d:4e:ec:98:5e:9f:d0:f0:
88:cc:97:5b:d1:a0:2d:05:8d:2d:df:ae:2b:ed:0c:
aa:94:3c:b0:cd:cc:a0:30:29:20:59:84:83:54:5f:
de:b4:87:4e:24:4e:8f:80:25:0e:8f:15:98:e2:07:
67:5f:e2:d4:26:4d:2e:89:78:25:a8:b8:1a:19:b2:
67:5e:66:9d:27:40:b0:b5:c0:9a:a4:e5:3c:81:4c:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:50:99:23:4E:FE:DC:59:55:20:D6:66:7E:B7:72:36:2D:25:77
X509v3 Authority Key Identifier:
keyid:18:30:E6:03:E9:CA:8C:05:D4:C1:BC:62:B0:B7:6E:7B:D9:D1:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDDmA-nKjAXUwbxisLdue9nRiQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/j4tQmSNO_txZVSDWZn63cjYtJXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2191d7-fda0-4b07-8a8f-1789e64d3210/1/GDDmA-nKjAXUwbxisLdue9nRiQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.28.0/22
217.169.224.0/20
IPv6:
2a04:8f80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:80:28:47:1e:31:bd:d9:d7:00:50:f5:18:fc:b3:6f:0c:35:
9b:fd:92:be:cb:83:e2:1d:4e:3a:c9:04:f8:16:b7:82:0e:57:
c0:7d:13:18:6f:d9:97:9d:4c:b3:f0:b1:16:df:76:4b:ba:0b:
6a:91:a1:f2:8f:06:11:85:04:c7:ea:1c:e9:6c:df:ec:7e:7e:
e9:f8:c8:17:0d:03:eb:e1:ea:ba:70:40:cb:20:19:2f:01:57:
c0:b3:b0:ca:6d:41:0c:06:29:73:61:ca:43:af:ca:ac:d2:4f:
e5:11:c2:52:d3:66:4d:ed:87:06:ea:a4:2f:fd:08:9d:19:0c:
f3:0e:c8:eb:0d:1f:30:4a:50:7a:be:de:79:f8:e1:23:33:af:
f8:58:34:6e:78:b0:a3:6c:3a:6b:0b:4d:15:03:40:cb:c4:a0:
27:97:64:18:e9:fb:c5:d3:a2:b9:84:44:8b:a8:4e:e5:87:a6:
a6:a8:c8:8a:86:10:8c:2d:a6:43:6e:6c:50:f6:a8:10:5d:ea:
38:78:cd:ec:17:54:14:08:59:2c:6f:6c:a2:76:3f:c0:60:f7:
aa:63:d5:40:f0:c2:e8:4c:5f:ee:1b:cb:20:cf:76:82:1a:7c:
eb:15:eb:34:87:50:43:07:da:67:10:bd:02:ac:5e:2a:86:6d:
7d:55:43:5b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYzEk5j8QxwL3s/MPrUVUgRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MzBlNjAzZTljYThjMDVkNGMxYmM2MmIwYjc2ZTdiZDlk
MTg5MDkwHhcNMjQwMTAxMTAzMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjhiNTA5OTIzNGVmZWRjNTk1NTIwZDY2NjdlYjc3MjM2MmQyNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+t17DDwwjjNsj2dY4ClvCdCX6cc
07jCxJTSUsJ8AHRIg/LlVAYwlHexSUXU9ngaveanXIgjWu8yktCdtcWp9ioSVRQV
tVl2nVVO314ADRjmpGiP4oQN26AmlIQtyX3jmVvWbztAFERwRL8hdWpv59aqJdtZ
ZduVubglZsCOON1dO5VoKJykDomE1ssson0x27M1WrEM/t2SM9Xz7YQw8ydOLhEA
StZ+Ah29jU7smF6f0PCIzJdb0aAtBY0t364r7QyqlDywzcygMCkgWYSDVF/etIdO
JE6PgCUOjxWY4gdnX+LUJk0uiXglqLgaGbJnXmadJ0CwtcCapOU8gUwlYQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFI+LUJkjTv7cWVUg1mZ+t3I2LSV3MB8GA1UdIwQY
MBaAFBgw5gPpyowF1MG8YrC3bnvZ0YkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYt
MTc4OWU2NGQzMjEwLzEvajR0UW1TTk9fdHhaVlNEV1puNjNjall0SlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8yMTkxZDctZmRhMC00YjA3LThhOGYtMTc4OWU2NGQzMjEw
LzEvR0REbUEtbktqQVhVd2J4aXNMZHVlOW5SaVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCLZYcAwQE
2angMA4EAgACMAgDBgQqBI+AIDANBgkqhkiG9w0BAQsFAAOCAQEAt4AoRx4xvdnX
AFD1GPyzbww1m/2SvsuD4h1OOskE+Ba3gg5XwH0TGG/Zl51Ms/CxFt92S7oLapGh
8o8GEYUEx+oc6Wzf7H5+6fjIFw0D6+HqunBAyyAZLwFXwLOwym1BDAYpc2HKQ6/K
rNJP5RHCUtNmTe2HBuqkL/0InRkM8w7I6w0fMEpQer7eefjhIzOv+Fg0bniwo2w6
awtNFQNAy8SgJ5dkGOn7xdOiuYREi6hO5YempqjIioYQjC2mQ25sUPaoEF3qOHjN
7BdUFAhZLG9sonY/wGD3qmPVQPDC6Exf7hvLIM92ghp86xXrNIdQQwfaZxC9Aqxe
KoZtfVVDWw==
-----END CERTIFICATE-----
Generated at Sun May 19 06:37:54 2024 by rpki-client on console-ams.rpki-client.org