Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/c3qCeUX5sewKbngk_t5I_NiUo2I.roa
File: c3qCeUX5sewKbngk_t5I_NiUo2I.roa (raw, json)
Hash identifier: Rdwunb9+B8rIMrK4bKTaOup4VuNU0TQHxnsctckEo7s=
Subject key identifier: 73:7A:82:79:45:F9:B1:EC:0A:6E:78:24:FE:DE:48:FC:D8:94:A3:62
Certificate issuer: /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial: 018CC34966831F8ADFB57E48B2CB03DED226
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/c3qCeUX5sewKbngk_t5I_NiUo2I.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200697
IP address blocks: 45.134.241.0/24 maxlen: 24
45.134.242.0/24 maxlen: 24
45.134.243.0/24 maxlen: 24
45.134.240.0/24 maxlen: 24
2a07:4680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:66:83:1f:8a:df:b5:7e:48:b2:cb:03:de:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=737a827945f9b1ec0a6e7824fede48fcd894a362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:13:4f:1c:90:94:88:6d:23:23:75:ac:d7:
2c:cf:77:c1:b0:8d:96:41:35:67:34:bc:3e:fc:ff:
ef:71:89:b6:32:17:86:70:65:75:e7:e1:44:bd:5f:
1a:2a:51:e1:c6:aa:dc:a8:61:89:8a:e8:54:02:45:
99:a0:fb:b1:80:cf:af:49:6b:80:4c:38:5f:54:3d:
3d:e8:7a:45:fa:21:1a:7f:f7:d6:25:ec:e2:44:a2:
f2:6f:56:de:7c:3b:29:ae:ea:d3:ad:c5:9f:ae:38:
4f:22:2c:c3:30:40:c7:4e:bf:ee:da:fb:2b:cf:e6:
1c:6b:85:98:1d:8b:53:b7:ba:42:ee:e5:c0:88:06:
d2:02:aa:a7:bc:3e:67:73:4a:3a:1b:a9:1a:01:77:
5f:6a:1a:c3:8b:fe:72:19:ad:d2:0b:c3:20:c9:3d:
e7:2c:11:89:9e:ba:a2:f8:cf:d0:25:31:ad:72:1f:
b1:e8:75:1e:62:37:ff:55:07:c6:13:74:dd:53:d9:
40:31:2c:23:9d:a0:47:6a:47:6e:45:e9:3a:2f:2b:
52:a7:6c:81:3d:4c:6a:be:ec:fa:2b:b8:86:4d:de:
65:8d:12:5a:5b:8d:bd:32:2f:5f:89:f2:5b:0c:07:
a1:bd:32:6a:c1:a5:ea:9d:6e:c4:ba:e6:21:cb:e9:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:82:79:45:F9:B1:EC:0A:6E:78:24:FE:DE:48:FC:D8:94:A3:62
X509v3 Authority Key Identifier:
keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/c3qCeUX5sewKbngk_t5I_NiUo2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.240.0/22
IPv6:
2a07:4680::/32
Signature Algorithm: sha256WithRSAEncryption
a8:5b:01:b6:bd:6f:94:47:50:12:13:1a:51:09:7d:5e:0b:b6:
58:a6:bf:79:93:7a:bb:c0:12:0e:22:dd:fa:b9:a9:a8:3f:86:
23:b1:36:f5:0c:ce:78:38:0b:3b:31:a8:d3:41:1d:8a:c7:53:
25:eb:08:24:23:0a:c5:fa:29:f5:30:9d:47:68:f4:f1:22:99:
ce:9d:8c:a1:ed:27:20:d8:f9:3c:00:11:73:ed:4f:cc:b0:f0:
9d:08:b8:e8:d6:e3:a7:57:88:2d:bc:9c:7f:25:3b:0a:33:78:
b4:02:b9:ec:8c:de:43:fb:ab:a7:af:61:70:fd:59:54:c5:9e:
d0:ab:ab:a4:41:c0:9a:fd:17:9b:08:ad:12:7e:4e:fd:c9:0b:
5d:70:dd:7d:df:fc:eb:c4:a5:02:22:91:b4:9d:bb:f2:29:f4:
84:e1:2a:49:16:cc:df:0e:e9:3f:e9:03:3b:66:d2:7f:7f:da:
2f:4d:3d:57:1c:11:30:9f:21:cb:af:fa:66:b6:a4:25:43:6e:
cb:51:ba:b6:a2:e0:02:d5:70:3a:2e:43:8a:0f:9f:48:bc:75:
1c:0a:51:66:a4:0c:ab:c9:a3:60:0c:1b:7f:35:7c:0c:43:24:
06:30:0d:0a:57:91:cb:57:4a:d2:48:0d:58:ed:a7:fc:e7:08:
0c:19:2f:6f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDSWaDH4rftX5IsssD3tImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjk2YTgxMzcyMzU3YjVmMWVkN2M4MmNjYWE5OTNhOTgw
ZDU0ZTcwHhcNMjQwMTAxMDQzMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzdhODI3OTQ1ZjliMWVjMGE2ZTc4MjRmZWRlNDhmY2Q4OTRhMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp8TTxyQlIhtIyN1rNcsz3fBsI2W
QTVnNLw+/P/vcYm2MheGcGV15+FEvV8aKlHhxqrcqGGJiuhUAkWZoPuxgM+vSWuA
TDhfVD096HpF+iEaf/fWJeziRKLyb1befDsprurTrcWfrjhPIizDMEDHTr/u2vsr
z+Yca4WYHYtTt7pC7uXAiAbSAqqnvD5nc0o6G6kaAXdfahrDi/5yGa3SC8MgyT3n
LBGJnrqi+M/QJTGtch+x6HUeYjf/VQfGE3TdU9lAMSwjnaBHakduRek6LytSp2yB
PUxqvuz6K7iGTd5ljRJaW429Mi9fifJbDAehvTJqwaXqnW7EuuYhy+mLpQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHN6gnlF+bHsCm54JP7eSPzYlKNiMB8GA1UdIwQY
MBaAFIFpaoE3I1e18e18gsyqmTqYDVTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGIt
YzZiODgwMGFhODU4LzEvYzNxQ2VVWDVzZXdLYm5na190NUlfTmlVbzJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGItYzZiODgwMGFhODU4
LzEvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYbwMA0E
AgACMAcDBQAqB0aAMA0GCSqGSIb3DQEBCwUAA4IBAQCoWwG2vW+UR1ASExpRCX1e
C7ZYpr95k3q7wBIOIt36uamoP4YjsTb1DM54OAs7MajTQR2Kx1Ml6wgkIwrF+in1
MJ1HaPTxIpnOnYyh7Scg2Pk8ABFz7U/MsPCdCLjo1uOnV4gtvJx/JTsKM3i0Arns
jN5D+6unr2Fw/VlUxZ7Qq6ukQcCa/RebCK0Sfk79yQtdcN193/zrxKUCIpG0nbvy
KfSE4SpJFszfDuk/6QM7ZtJ/f9ovTT1XHBEwnyHLr/pmtqQlQ27LUbq2ouAC1XA6
LkOKD59IvHUcClFmpAyryaNgDBt/NXwMQyQGMA0KV5HLV0rSSA1Y7af85wgMGS9v
-----END CERTIFICATE-----
Generated at Sat Jun 15 11:08:32 2024 by rpki-client on console-ams.rpki-client.org