Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CiJcK7EQ0Gz47UhtNcw1iWkXG0Y.roa
File: CiJcK7EQ0Gz47UhtNcw1iWkXG0Y.roa (raw, json)
Hash identifier: 8o+mgYx1R3Oq4nEthcc94hVk3VmKjwnVl8BZ/KkLG2k=
Subject key identifier: 0A:22:5C:2B:B1:10:D0:6C:F8:ED:48:6D:35:CC:35:89:69:17:1B:46
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018DC6F597CA63FDEA8F62DE918336BBEF33
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CiJcK7EQ0Gz47UhtNcw1iWkXG0Y.roa
Signing time: Tue 20 Feb 2024 14:40:00 +0000
ROA not before: Tue 20 Feb 2024 14:40:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22781
IP address blocks: 45.146.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:f5:97:ca:63:fd:ea:8f:62:de:91:83:36:bb:ef:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Feb 20 14:40:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a225c2bb110d06cf8ed486d35cc358969171b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:f7:ab:b7:f9:d2:a6:35:6e:dc:10:bd:56:
c4:84:9f:d4:e1:80:cd:a1:0e:69:ef:7f:5f:85:bc:
8c:97:d4:c2:d4:d3:7b:39:72:ec:43:f6:6c:46:92:
8d:5b:4f:31:de:b2:e7:c8:71:97:f7:ad:7b:f9:73:
0e:20:25:06:7a:66:33:27:84:84:bd:fd:99:34:c3:
62:81:f3:f8:26:c1:d5:78:6d:7e:23:34:fb:ef:8a:
37:33:ed:9f:2b:d5:ff:39:6c:e0:25:03:01:cd:1d:
aa:e0:3b:d7:82:fa:46:92:27:8b:8a:2b:b9:ed:95:
c7:60:22:77:7f:53:68:d0:93:e0:58:64:5c:03:38:
35:7b:97:1f:db:c4:97:25:ff:9b:0f:b7:4c:60:8b:
77:4a:a4:31:70:88:31:c0:b5:75:fb:ef:b8:5f:fa:
99:69:7a:8d:06:8f:fc:ff:cd:ab:51:f3:0d:1f:11:
49:ae:5f:82:0f:1c:b8:41:ad:3c:b8:da:75:49:09:
06:35:72:b1:d9:ca:22:a5:4a:da:17:45:0e:25:6b:
f3:7d:7c:88:db:42:bf:86:5a:38:60:8d:aa:ca:9e:
8f:d8:f2:c2:e3:e2:8b:3f:93:a7:0f:88:19:ec:c7:
19:dd:bc:74:34:cc:3d:3d:23:b1:55:97:f9:82:c1:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:5C:2B:B1:10:D0:6C:F8:ED:48:6D:35:CC:35:89:69:17:1B:46
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/CiJcK7EQ0Gz47UhtNcw1iWkXG0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:87:ca:0e:88:c4:e9:3f:3f:01:10:9c:1c:22:21:4b:4f:49:
22:53:2b:dc:20:1e:a2:b8:c4:cd:0d:52:61:40:70:31:ae:83:
ab:9b:09:ab:71:36:2c:79:f2:b4:2c:87:96:55:c2:b5:3f:38:
47:2e:e8:62:13:a1:82:34:cf:16:66:2d:09:dc:e0:44:98:b1:
91:fa:64:ef:f0:ae:92:cf:ba:75:65:0f:bc:f9:64:e2:6d:a5:
23:26:21:da:dc:a5:21:e6:57:f5:d5:0c:38:66:b1:65:86:54:
e1:1f:61:fc:0d:a0:48:87:71:97:40:56:6a:62:fc:c6:ea:fb:
92:63:1c:ab:04:5e:af:7e:81:e0:92:27:e8:e6:67:d7:94:45:
ed:a4:89:22:54:de:67:9c:12:dd:f2:a4:7b:64:50:f5:d6:81:
3c:4e:a5:a0:55:74:86:88:ed:72:0b:e9:79:86:02:52:35:ee:
ac:ae:15:d7:8c:c2:6b:f5:16:c6:55:f8:93:9c:8c:cd:56:df:
29:a9:43:21:84:6f:b4:74:bf:3d:4d:fe:20:82:1c:6c:92:64:
6b:7f:97:a0:77:fa:0d:1f:8e:9d:e0:6d:50:cb:44:0b:00:4c:
79:a7:a2:2e:b4:02:72:1a:77:99:9c:ef:2a:2d:9e:d8:ef:f6:
81:62:f0:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3G9ZfKY/3qj2LekYM2u+8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjQwMjIwMTQ0MDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIyNWMyYmIxMTBkMDZjZjhlZDQ4NmQzNWNjMzU4OTY5MTcxYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xv3q7f50qY1btwQvVbEhJ/U4YDN
oQ5p739fhbyMl9TC1NN7OXLsQ/ZsRpKNW08x3rLnyHGX9617+XMOICUGemYzJ4SE
vf2ZNMNigfP4JsHVeG1+IzT774o3M+2fK9X/OWzgJQMBzR2q4DvXgvpGkieLiiu5
7ZXHYCJ3f1No0JPgWGRcAzg1e5cf28SXJf+bD7dMYIt3SqQxcIgxwLV1+++4X/qZ
aXqNBo/8/82rUfMNHxFJrl+CDxy4Qa08uNp1SQkGNXKx2coipUraF0UOJWvzfXyI
20K/hlo4YI2qyp6P2PLC4+KLP5OnD4gZ7McZ3bx0NMw9PSOxVZf5gsE9EwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoiXCuxENBs+O1IbTXMNYlpFxtGMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvQ2lKY0s3RVEwR3o0N1VodE5jdzFpV2tYRzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZLKMA0G
CSqGSIb3DQEBCwUAA4IBAQDHh8oOiMTpPz8BEJwcIiFLT0kiUyvcIB6iuMTNDVJh
QHAxroOrmwmrcTYsefK0LIeWVcK1PzhHLuhiE6GCNM8WZi0J3OBEmLGR+mTv8K6S
z7p1ZQ+8+WTibaUjJiHa3KUh5lf11Qw4ZrFlhlThH2H8DaBIh3GXQFZqYvzG6vuS
YxyrBF6vfoHgkifo5mfXlEXtpIkiVN5nnBLd8qR7ZFD11oE8TqWgVXSGiO1yC+l5
hgJSNe6srhXXjMJr9RbGVfiTnIzNVt8pqUMhhG+0dL89Tf4gghxskmRrf5egd/oN
H46d4G1Qy0QLAEx5p6IutAJyGneZnO8qLZ7Y7/aBYvBV
-----END CERTIFICATE-----
Generated at Sun May 19 07:02:44 2024 by rpki-client on console-ams.rpki-client.org