Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/w18onR4sS7cvDcjHqLa2mNJhs-0.roa
File: w18onR4sS7cvDcjHqLa2mNJhs-0.roa (raw, json)
Hash identifier: THWRDE75VK6bZg+/vca09jAWHLGwC9PkA/JxoaQG/tc=
Subject key identifier: C3:5F:28:9D:1E:2C:4B:B7:2F:0D:C8:C7:A8:B6:B6:98:D2:61:B3:ED
Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Certificate serial: 018CC64B85AD54B52D4F4AA05FCB20D2BB4C
Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/w18onR4sS7cvDcjHqLa2mNJhs-0.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208016
IP address blocks: 45.85.48.0/22 maxlen: 22
2a0e:b680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:85:ad:54:b5:2d:4f:4a:a0:5f:cb:20:d2:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c35f289d1e2c4bb72f0dc8c7a8b6b698d261b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6e:f9:74:60:f8:57:ba:26:16:36:53:52:04:
bf:fb:34:75:e6:9c:b7:1e:d0:cd:44:dc:78:ff:c2:
bf:b8:91:57:61:10:4e:3c:2c:ba:67:c3:27:e3:88:
1d:06:84:51:bc:89:fd:65:ad:17:b7:df:29:b1:88:
11:98:8d:24:2b:92:08:0e:aa:3e:e7:d1:c6:ff:54:
ed:20:b7:25:f3:a2:fb:cc:a1:e6:37:74:39:55:88:
1d:d5:9c:53:f8:06:10:2d:70:58:7d:d6:eb:38:76:
6e:0d:1e:93:7a:0c:fa:20:18:1b:52:83:30:65:98:
19:71:b8:46:e5:b1:e5:08:4d:e7:89:f5:85:1a:c6:
53:89:dc:6f:e7:b1:f7:94:a2:9f:79:53:2b:94:f1:
f5:bb:c6:91:e1:57:c9:5a:b1:b0:7b:2f:63:e1:a0:
d4:6f:60:fd:21:69:53:f0:24:13:99:b0:a5:fd:3b:
43:76:1a:a8:9e:b6:16:a1:df:e0:04:fa:8a:16:34:
aa:b0:fe:e2:ec:03:ac:7f:23:51:9b:4f:0c:02:0e:
4c:2c:3b:fe:63:af:20:13:61:f0:f3:82:61:9b:38:
9b:9f:06:1f:6d:37:df:be:a4:1f:90:32:a6:9a:50:
5d:90:6f:78:cd:63:7e:8a:5d:c4:b8:3c:16:0d:a3:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:28:9D:1E:2C:4B:B7:2F:0D:C8:C7:A8:B6:B6:98:D2:61:B3:ED
X509v3 Authority Key Identifier:
keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/w18onR4sS7cvDcjHqLa2mNJhs-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.48.0/22
IPv6:
2a0e:b680::/29
Signature Algorithm: sha256WithRSAEncryption
98:5f:37:71:3a:f0:72:3a:19:d6:86:27:41:c6:d7:65:fe:ad:
0f:ec:86:1c:33:15:9a:58:20:00:39:da:53:c9:07:b3:a3:ab:
95:19:4f:14:7e:05:75:44:31:63:19:3b:37:d6:06:3a:9d:9e:
b3:d4:87:d9:1e:a4:d0:0a:42:42:90:ed:a2:7c:d0:96:80:6a:
3b:ff:e4:12:0d:c7:62:bc:c2:a3:84:0c:e8:cc:55:4f:48:6d:
dc:39:2e:e5:a6:01:59:e3:62:d6:2d:2a:09:96:c7:05:85:28:
03:ac:6d:34:f4:57:26:67:91:52:3e:0c:30:a1:3b:34:2e:10:
0c:3b:a3:1b:c9:c8:24:f3:b1:f2:22:03:1e:15:99:1d:3e:b9:
7d:10:51:19:11:22:d3:d3:b6:14:6a:8f:22:ca:4b:9c:9d:35:
59:b4:65:9c:f6:65:ff:30:53:bb:20:04:d7:33:35:27:cb:2b:
e6:fc:0e:df:55:d0:27:96:86:04:87:3a:22:80:8d:dc:30:3a:
a2:f1:16:24:34:93:07:c6:c6:3a:46:79:e8:17:c9:a4:c2:1b:
4a:f2:3b:ab:81:b3:0f:f8:0a:51:6e:df:d3:e1:8b:f9:35:8a:
49:fe:1e:58:ee:59:c5:a8:8e:3d:e2:6e:d8:47:28:79:e5:ae:
88:cf:e6:c0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGS4WtVLUtT0qgX8sg0rtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx
YjRkZGEwHhcNMjQwMTAxMTgzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzVmMjg5ZDFlMmM0YmI3MmYwZGM4YzdhOGI2YjY5OGQyNjFiM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9m75dGD4V7omFjZTUgS/+zR15py3
HtDNRNx4/8K/uJFXYRBOPCy6Z8Mn44gdBoRRvIn9Za0Xt98psYgRmI0kK5IIDqo+
59HG/1TtILcl86L7zKHmN3Q5VYgd1ZxT+AYQLXBYfdbrOHZuDR6Tegz6IBgbUoMw
ZZgZcbhG5bHlCE3nifWFGsZTidxv57H3lKKfeVMrlPH1u8aR4VfJWrGwey9j4aDU
b2D9IWlT8CQTmbCl/TtDdhqonrYWod/gBPqKFjSqsP7i7AOsfyNRm08MAg5MLDv+
Y68gE2Hw84JhmzibnwYfbTffvqQfkDKmmlBdkG94zWN+il3EuDwWDaMXIwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMNfKJ0eLEu3Lw3Ix6i2tpjSYbPtMB8GA1UdIwQY
MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt
N2U5ODM3YTkyMjhjLzEvdzE4b25SNHNTN2N2RGNqSHFMYTJtTkpocy0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj
LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVUwMA0E
AgACMAcDBQMqDraAMA0GCSqGSIb3DQEBCwUAA4IBAQCYXzdxOvByOhnWhidBxtdl
/q0P7IYcMxWaWCAAOdpTyQezo6uVGU8UfgV1RDFjGTs31gY6nZ6z1IfZHqTQCkJC
kO2ifNCWgGo7/+QSDcdivMKjhAzozFVPSG3cOS7lpgFZ42LWLSoJlscFhSgDrG00
9FcmZ5FSPgwwoTs0LhAMO6Mbycgk87HyIgMeFZkdPrl9EFEZESLT07YUao8iykuc
nTVZtGWc9mX/MFO7IATXMzUnyyvm/A7fVdAnloYEhzoigI3cMDqi8RYkNJMHxsY6
RnnoF8mkwhtK8jurgbMP+ApRbt/T4Yv5NYpJ/h5Y7lnFqI494m7YRyh55a6Iz+bA
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:15:04 2024 by rpki-client on console-fra.rpki-client.org