Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/D83icq4Y-22TLbd4uxl-PGrKfq8.roa
File: D83icq4Y-22TLbd4uxl-PGrKfq8.roa (raw, json)
Hash identifier: cUw5VC6bbIxB++KvaTJzVREi6M9YA6aXwQHf9YV849I=
Subject key identifier: 0F:CD:E2:72:AE:18:FB:6D:93:2D:B7:78:BB:19:7E:3C:6A:CA:7E:AF
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 018CC42461927A02A32212E775A1CE8155E8
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/D83icq4Y-22TLbd4uxl-PGrKfq8.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57743
IP address blocks: 45.136.53.0/24 maxlen: 24
45.136.52.0/24 maxlen: 24
45.136.55.0/24 maxlen: 24
45.136.54.0/24 maxlen: 24
2a07:df40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:61:92:7a:02:a3:22:12:e7:75:a1:ce:81:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fcde272ae18fb6d932db778bb197e3c6aca7eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:8a:75:7f:37:78:13:0a:6c:44:dc:b2:e8:
33:63:45:25:c1:fd:6e:2d:c3:24:52:a1:25:d8:1d:
2a:95:65:1d:55:7d:f5:8c:24:d2:3f:9c:b3:be:94:
cd:1e:0a:67:8e:d3:fc:e1:5d:d1:d0:b3:e3:de:91:
06:de:42:54:4c:74:bb:91:71:9c:bd:0d:e1:d5:92:
68:ce:56:c7:44:6b:0e:35:ce:12:d9:d8:0f:11:60:
e6:58:55:0a:e9:4a:97:6b:b9:70:35:ba:29:94:f1:
59:6d:d4:a2:62:0b:88:4b:44:bd:61:9c:87:ce:ff:
a8:16:d5:e9:38:f1:88:01:2a:49:98:84:9e:1d:da:
9f:c5:96:a6:51:5a:8c:4c:4d:c0:73:f6:d3:50:df:
be:90:e6:66:82:b8:e2:0e:69:3c:34:00:dd:de:f0:
94:d7:e1:d7:70:d4:c9:e0:84:58:52:cf:2f:64:3f:
e4:e1:90:a4:9d:9b:2f:28:56:38:00:bf:cb:56:74:
fa:1c:ce:9e:1d:7d:98:1c:fd:bd:09:8e:9f:0c:11:
95:03:fa:ca:09:81:7f:62:47:1d:b7:1e:1f:00:ca:
01:e1:a1:8c:54:84:01:54:d8:45:80:a4:e3:0e:b0:
43:96:08:cc:ee:39:42:d3:e3:8b:40:83:4e:dd:75:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:E2:72:AE:18:FB:6D:93:2D:B7:78:BB:19:7E:3C:6A:CA:7E:AF
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/D83icq4Y-22TLbd4uxl-PGrKfq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.52.0/22
IPv6:
2a07:df40::/29
Signature Algorithm: sha256WithRSAEncryption
97:59:8c:68:32:77:31:e3:be:3c:b8:c4:6e:af:4e:9d:06:43:
d5:56:43:78:c3:85:6d:5b:a2:6a:6c:98:e3:5e:a6:09:2a:b4:
31:e2:4e:50:25:9c:2c:c7:8d:8b:45:c5:06:8d:c2:54:92:6f:
43:c8:94:0c:cd:12:59:1f:ac:d8:b1:47:39:bc:40:4a:c1:2f:
c3:7d:11:aa:9c:46:64:3d:81:7e:7a:88:cb:91:60:76:f9:d6:
8a:90:69:c3:b7:88:0a:58:1d:c8:96:df:ee:79:47:69:e8:f4:
c8:83:fe:0f:e4:b4:a5:b1:a6:84:dc:e8:31:7e:5d:2c:e8:6d:
f1:ed:60:cb:6a:61:fb:9e:e3:69:af:66:0e:e1:1c:d6:80:96:
82:7d:59:63:f2:0a:9a:6f:88:31:59:24:99:6a:76:5b:0d:97:
a3:1b:27:ae:a2:ff:f8:6a:e4:d0:a6:d0:00:a9:10:9f:2a:76:
1a:e9:74:de:7a:3e:d0:2c:1c:32:52:c3:15:e0:22:ca:6d:8f:
c6:54:7a:51:43:aa:79:c4:eb:3f:c4:29:53:ff:ff:15:70:f5:
3a:b4:23:b0:63:20:05:56:13:fd:0c:4d:9b:5b:30:59:11:cf:
7f:90:1e:10:f2:a7:54:6c:74:09:c9:30:cb:f0:f3:3f:e2:e7:
6f:76:d8:66
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEJGGSegKjIhLndaHOgVXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTk5NjZjMGVhNWRmM2E5ODdmODM2NTUyNGI1MTI4Y2Jh
N2ZjOTAwHhcNMjQwMTAxMDgyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmNkZTI3MmFlMThmYjZkOTMyZGI3NzhiYjE5N2UzYzZhY2E3ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAWKdX83eBMKbETcsugzY0Ulwf1u
LcMkUqEl2B0qlWUdVX31jCTSP5yzvpTNHgpnjtP84V3R0LPj3pEG3kJUTHS7kXGc
vQ3h1ZJozlbHRGsONc4S2dgPEWDmWFUK6UqXa7lwNboplPFZbdSiYguIS0S9YZyH
zv+oFtXpOPGIASpJmISeHdqfxZamUVqMTE3Ac/bTUN++kOZmgrjiDmk8NADd3vCU
1+HXcNTJ4IRYUs8vZD/k4ZCknZsvKFY4AL/LVnT6HM6eHX2YHP29CY6fDBGVA/rK
CYF/Ykcdtx4fAMoB4aGMVIQBVNhFgKTjDrBDlgjM7jlC0+OLQINO3XXmxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA/N4nKuGPttky23eLsZfjxqyn6vMB8GA1UdIwQY
MBaAFC4ZlmwOpd86mH+DZVJLUSjLp/yQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMt
MzZiNWRkYTlmYmU4LzEvRDgzaWNxNFktMjJUTGJkNHV4bC1QR3JLZnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMtMzZiNWRkYTlmYmU4
LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYg0MA0E
AgACMAcDBQMqB99AMA0GCSqGSIb3DQEBCwUAA4IBAQCXWYxoMncx4748uMRur06d
BkPVVkN4w4VtW6JqbJjjXqYJKrQx4k5QJZwsx42LRcUGjcJUkm9DyJQMzRJZH6zY
sUc5vEBKwS/DfRGqnEZkPYF+eojLkWB2+daKkGnDt4gKWB3Ilt/ueUdp6PTIg/4P
5LSlsaaE3Ogxfl0s6G3x7WDLamH7nuNpr2YO4RzWgJaCfVlj8gqab4gxWSSZanZb
DZejGyeuov/4auTQptAAqRCfKnYa6XTeej7QLBwyUsMV4CLKbY/GVHpRQ6p5xOs/
xClT//8VcPU6tCOwYyAFVhP9DE2bWzBZEc9/kB4Q8qdUbHQJyTDL8PM/4udvdthm
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:44 2024 by rpki-client on console-ams.rpki-client.org