Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa
File: B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa (raw, json)
Hash identifier: BVQbpK4VvZLxVp4u/AkgPIy/tiZ6UVdM+E433I+etq4=
Subject key identifier: 07:A2:BD:99:2F:AB:76:1D:CA:E4:F6:57:E6:72:90:51:0A:19:29:F5
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018CC86FC2BB4B21F175EF95719434C12288
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa
Signing time: Tue 02 Jan 2024 04:30:16 +0000
ROA not before: Tue 02 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201839
IP address blocks: 45.67.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c2:bb:4b:21:f1:75:ef:95:71:94:34:c1:22:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a2bd992fab761dcae4f657e67290510a1929f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3c:fa:05:fc:6b:db:6b:7b:3d:04:b0:d1:eb:
fe:50:7a:7c:67:77:e9:3e:82:c2:b7:a7:48:b3:aa:
d2:bc:1f:f3:2a:1a:d5:a1:bc:26:8f:9e:e5:73:70:
6c:37:84:5e:1e:b7:ba:fe:a7:f6:a0:03:ed:41:15:
52:e1:d2:a0:8d:4b:9b:1f:09:f7:30:2f:e6:63:93:
0b:78:34:2a:8a:c8:6b:3b:d8:a5:83:a3:fe:1e:b1:
8a:74:4a:e1:6c:dc:f1:7e:3b:2c:c4:d6:73:1a:f2:
61:d2:9a:66:99:e1:87:21:34:60:6a:ef:43:2c:89:
c5:5a:f8:60:ad:c9:16:20:01:2b:f9:d3:47:13:03:
3e:57:01:87:06:2e:51:71:a5:a1:cb:c9:61:1a:6a:
ad:17:63:20:bf:c1:89:cc:06:3d:d1:21:87:73:86:
11:c3:7c:56:2f:46:86:21:24:cd:15:89:dd:ba:0d:
4a:0a:46:42:3b:3b:22:4d:1c:18:44:ec:be:3d:88:
4e:c5:8a:9f:d4:c3:84:84:52:41:f6:f8:ad:f2:78:
5a:e0:4c:b7:e4:8f:8a:76:1a:4f:e5:e2:2e:4d:e9:
69:78:c1:90:77:1b:c8:ef:81:3f:6f:eb:e9:2c:95:
09:6c:3c:ff:d6:ee:02:e8:74:64:d5:61:13:c6:5f:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A2:BD:99:2F:AB:76:1D:CA:E4:F6:57:E6:72:90:51:0A:19:29:F5
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c7:d4:28:76:8b:61:fe:6e:d3:1d:16:77:b4:7a:dd:39:0b:
61:5f:39:d3:32:1c:6e:b7:a1:27:d8:70:f8:9b:fe:65:42:86:
dc:58:20:55:51:fc:a4:3a:83:1c:d5:93:9d:fe:05:ae:f1:52:
af:aa:d4:68:a3:94:1f:a9:a8:0f:c5:bb:80:05:5c:4e:7a:ca:
38:8a:84:e7:af:44:c0:9d:c0:76:a6:ed:d4:61:89:94:ca:dc:
7b:1d:d8:64:c6:f2:d2:54:f7:75:ae:e0:dd:fb:8b:69:d1:d2:
dd:35:dd:27:9b:10:bc:9e:32:ae:d9:5f:6b:cd:a7:05:ee:a7:
2f:1f:52:a7:36:c9:ba:69:ff:6b:15:9a:b7:49:75:e2:e6:04:
e0:06:e3:23:47:16:f4:99:1e:11:44:94:57:81:8f:f8:15:24:
48:cf:8a:ea:37:66:19:c2:33:cb:ea:b6:46:76:f0:95:3e:ed:
ff:f3:0e:a7:fc:04:32:15:d3:79:0d:db:02:de:ed:aa:ae:5b:
1b:07:00:fa:a1:b4:04:a2:1f:1d:97:cb:1f:71:48:e1:29:9a:
79:f4:fe:31:ea:e4:0b:d5:b2:cd:e8:27:de:ee:56:b8:8e:a9:
b6:d4:d1:43:c0:8a:46:63:c0:03:c8:2d:32:10:b8:ee:41:fc:
e6:04:4f:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb8K7SyHxde+VcZQ0wSKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjQwMTAyMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2EyYmQ5OTJmYWI3NjFkY2FlNGY2NTdlNjcyOTA1MTBhMTkyOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizz6Bfxr22t7PQSw0ev+UHp8Z3fp
PoLCt6dIs6rSvB/zKhrVobwmj57lc3BsN4ReHre6/qf2oAPtQRVS4dKgjUubHwn3
MC/mY5MLeDQqishrO9ilg6P+HrGKdErhbNzxfjssxNZzGvJh0ppmmeGHITRgau9D
LInFWvhgrckWIAEr+dNHEwM+VwGHBi5RcaWhy8lhGmqtF2Mgv8GJzAY90SGHc4YR
w3xWL0aGISTNFYndug1KCkZCOzsiTRwYROy+PYhOxYqf1MOEhFJB9vit8nha4Ey3
5I+KdhpP5eIuTelpeMGQdxvI74E/b+vpLJUJbDz/1u4C6HRk1WETxl/hCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAeivZkvq3YdyuT2V+ZykFEKGSn1MB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvQjZLOW1TLXJkaDNLNVBaWDVuS1FVUW9aS2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPXMA0G
CSqGSIb3DQEBCwUAA4IBAQBLx9Qodoth/m7THRZ3tHrdOQthXznTMhxut6En2HD4
m/5lQobcWCBVUfykOoMc1ZOd/gWu8VKvqtRoo5QfqagPxbuABVxOeso4ioTnr0TA
ncB2pu3UYYmUytx7HdhkxvLSVPd1ruDd+4tp0dLdNd0nmxC8njKu2V9rzacF7qcv
H1KnNsm6af9rFZq3SXXi5gTgBuMjRxb0mR4RRJRXgY/4FSRIz4rqN2YZwjPL6rZG
dvCVPu3/8w6n/AQyFdN5DdsC3u2qrlsbBwD6obQEoh8dl8sfcUjhKZp59P4x6uQL
1bLN6Cfe7la4jqm21NFDwIpGY8ADyC0yELjuQfzmBE8a
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:04:54 2024 by rpki-client on console-ams.rpki-client.org