Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/butqp2C9emGgLbINDlgW07IY-aI.roa
File: butqp2C9emGgLbINDlgW07IY-aI.roa (raw, json)
Hash identifier: yny8MOti7gF09RYgqlB7sr01tBP+C6E77lLfHyRawnA=
Subject key identifier: 6E:EB:6A:A7:60:BD:7A:61:A0:2D:B2:0D:0E:58:16:D3:B2:18:F9:A2
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 018FA00831DCA995F933DF4291AE39E47F3C
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/butqp2C9emGgLbINDlgW07IY-aI.roa
Signing time: Wed 22 May 2024 11:20:42 +0000
ROA not before: Wed 22 May 2024 11:20:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59588
IP address blocks: 45.153.116.0/23 maxlen: 23
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.167.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.170.0/24 maxlen: 24
151.236.171.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.172.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.175.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.180.0/24 maxlen: 24
151.236.181.0/24 maxlen: 24
151.236.182.0/23 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.183.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
198.160.168.0/23 maxlen: 23
198.160.168.0/24 maxlen: 24
198.176.116.0/23 maxlen: 23
198.176.116.0/24 maxlen: 24
198.176.117.0/24 maxlen: 24
2a10:2200:1::/48 maxlen: 48
2a10:2200:2::/48 maxlen: 48
2a10:2200:3::/48 maxlen: 48
2a10:2200:b::/48 maxlen: 48
2a10:2200:c::/48 maxlen: 48
2a10:2200:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a0:08:31:dc:a9:95:f9:33:df:42:91:ae:39:e4:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: May 22 11:20:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eeb6aa760bd7a61a02db20d0e5816d3b218f9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:06:13:12:ca:61:22:49:7c:e8:1d:64:5c:
76:91:4f:49:0c:15:01:8d:1a:96:90:01:a1:7a:62:
49:58:a5:68:61:aa:96:58:1b:e0:9b:4a:6f:68:86:
85:1e:98:65:20:38:e0:d2:42:3e:04:77:13:f3:0c:
98:76:30:34:3c:b1:41:87:b8:76:34:99:c2:c0:da:
78:a9:57:cd:61:45:8e:13:93:e7:a3:6e:04:e1:2d:
ef:a6:c9:0e:73:43:75:7d:83:5f:c1:51:89:33:5a:
f0:a4:54:8d:b0:80:86:72:ea:45:e0:05:f4:d8:84:
45:90:4a:ea:da:f2:2b:83:34:bd:d6:ac:39:4a:3f:
35:6e:e8:ef:71:0c:8e:30:ea:80:39:8d:8e:42:7e:
35:6d:e8:5e:01:1f:27:0b:8f:cd:b5:b7:80:47:cf:
a3:8c:bc:41:70:78:05:fb:f5:d0:2d:b1:87:b2:7d:
30:3d:dd:33:7c:19:00:b3:31:f2:ad:47:61:6d:42:
b8:7c:96:40:6d:7b:81:7e:8f:56:10:cf:52:01:ec:
9c:9f:4a:39:74:2a:dd:83:45:c9:e5:cb:15:53:c3:
8e:41:86:48:8f:a9:fc:da:2c:44:42:bc:33:c1:eb:
d1:b4:51:50:6d:fa:c1:bc:6d:a8:0d:66:62:b5:ec:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EB:6A:A7:60:BD:7A:61:A0:2D:B2:0D:0E:58:16:D3:B2:18:F9:A2
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/butqp2C9emGgLbINDlgW07IY-aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.183.255
151.236.186.0/24
151.236.188.0/22
198.160.168.0/23
198.176.116.0/23
IPv6:
2a10:2200:1::-2a10:2200:3:ffff:ffff:ffff:ffff:ffff
2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:9e:77:56:df:e4:c6:55:4c:c1:29:e8:b9:0d:5e:54:6a:a2:
fc:bb:8a:58:79:31:1f:64:d0:2b:b3:08:cf:f4:d3:62:9a:1b:
ad:bf:9a:53:59:7d:b0:f8:3d:bc:59:92:50:06:e0:63:29:90:
ee:a7:ee:a1:96:c1:cd:6e:e0:33:9e:b9:47:b8:6d:89:46:20:
d2:9a:fd:19:54:aa:27:33:07:48:39:eb:23:dc:f5:62:c1:f4:
89:af:75:69:8f:6f:92:5e:7e:1c:76:07:2b:89:fd:62:1e:75:
f0:99:82:b2:6a:5c:15:95:41:90:ba:45:a1:e6:28:59:81:bc:
56:af:66:d1:4a:4e:67:f4:82:de:f5:81:7a:19:38:d2:46:2f:
86:b1:d3:1d:46:b1:95:64:2b:4e:e0:c0:c2:9b:9f:70:9b:8e:
c1:98:3a:00:4c:1d:30:6b:e7:56:25:46:ae:62:35:b6:a7:08:
24:5c:54:30:d8:82:bf:22:5b:6a:60:be:a7:82:3d:74:3a:43:
eb:95:ea:aa:53:5c:a8:29:12:b2:01:7e:8b:48:58:87:b6:4e:
66:11:9b:9f:98:4c:0f:ad:22:e9:96:cb:68:e9:ce:64:59:01:
2f:fe:74:f1:85:8a:f3:64:e1:8e:b4:d7:df:de:21:71:5a:41:
b2:26:e8:28
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAY+gCDHcqZX5M99Cka455H88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh
MmQxMWIwHhcNMjQwNTIyMTEyMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWViNmFhNzYwYmQ3YTYxYTAyZGIyMGQwZTU4MTZkM2IyMThmOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgsGExLKYSJJfOgdZFx2kU9JDBUB
jRqWkAGhemJJWKVoYaqWWBvgm0pvaIaFHphlIDjg0kI+BHcT8wyYdjA0PLFBh7h2
NJnCwNp4qVfNYUWOE5Pno24E4S3vpskOc0N1fYNfwVGJM1rwpFSNsICGcupF4AX0
2IRFkErq2vIrgzS91qw5Sj81bujvcQyOMOqAOY2OQn41beheAR8nC4/NtbeAR8+j
jLxBcHgF+/XQLbGHsn0wPd0zfBkAszHyrUdhbUK4fJZAbXuBfo9WEM9SAeycn0o5
dCrdg0XJ5csVU8OOQYZIj6n82ixEQrwzwevRtFFQbfrBvG2oDWZiteyWSQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFG7raqdgvXphoC2yDQ5YFtOyGPmiMB8GA1UdIwQY
MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct
MDA4NWEzNjVhMjVmLzEvYnV0cXAyQzllbUdnTGJJTkRsZ1cwN0lZLWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm
LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAyBAIAATAsAwQCLZl0MAwD
BAWX7KADBAOX7LADBACX7LoDBAKX7LwDBAHGoKgDBAHGsHQwLgQCAAIwKDASAwcA
KhAiAAABAwcCKhAiAAAAMBIDBwAqECIAAAsDBwEqECIAAAwwDQYJKoZIhvcNAQEL
BQADggEBAFeed1bf5MZVTMEp6LkNXlRqovy7ilh5MR9k0CuzCM/002KaG62/mlNZ
fbD4PbxZklAG4GMpkO6n7qGWwc1u4DOeuUe4bYlGINKa/RlUqiczB0g56yPc9WLB
9ImvdWmPb5Jefhx2ByuJ/WIedfCZgrJqXBWVQZC6RaHmKFmBvFavZtFKTmf0gt71
gXoZONJGL4ax0x1GsZVkK07gwMKbn3CbjsGYOgBMHTBr51YlRq5iNbanCCRcVDDY
gr8iW2pgvqeCPXQ6Q+uV6qpTXKgpErIBfotIWIe2TmYRm5+YTA+tIumWy2jpzmRZ
AS/+dPGFivNk4Y6019/eIXFaQbIm6Cg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:06 2024 by rpki-client on console-ams.rpki-client.org