Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3-JqQdUtm1KKTqoNe21sg3ez9NA.roa
File: 3-JqQdUtm1KKTqoNe21sg3ez9NA.roa (raw, json)
Hash identifier: vNnuowo8HfQsArhHpGFbfgPUJpMiTkhVZOmyJ1Qa1RI=
Subject key identifier: DF:E2:6A:41:D5:2D:9B:52:8A:4E:AA:0D:7B:6D:6C:83:77:B3:F4:D0
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA5F26FB6EC0BCD9DDF9F02732C10
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3-JqQdUtm1KKTqoNe21sg3ez9NA.roa
Signing time: Tue 02 Jan 2024 04:30:09 +0000
ROA not before: Tue 02 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31122
IP address blocks: 45.139.254.0/23 maxlen: 24
45.88.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a5:f2:6f:b6:ec:0b:cd:9d:df:9f:02:73:2c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfe26a41d52d9b528a4eaa0d7b6d6c8377b3f4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:4c:90:75:cd:39:c1:2e:93:c4:01:31:87:
35:6a:6d:e3:c8:cc:f6:b0:e0:1f:05:1b:00:6f:bf:
d7:c3:1a:61:9c:7c:3d:d0:85:ea:ea:b3:b2:49:28:
55:e7:7b:3a:dd:b9:f4:f0:19:20:ad:50:36:9e:d6:
10:89:7f:22:e2:a2:0f:43:96:e7:36:b6:23:24:3e:
41:f1:92:a2:c8:4f:5d:9b:54:42:6b:12:51:d3:3d:
a5:04:4e:d3:50:93:eb:28:f7:a2:58:d4:9d:7a:ba:
28:6b:2d:54:44:6d:a7:e6:63:31:dd:02:59:27:5f:
c0:fa:f4:c3:a8:72:05:2e:ee:4e:3a:78:4b:50:55:
6b:e0:df:72:1a:aa:89:0c:ae:93:bc:f0:ed:36:9a:
eb:e2:83:bf:7f:8a:b9:09:4e:62:d0:82:89:99:df:
8d:9c:f5:5d:12:40:ac:70:0f:40:3f:20:31:3c:08:
4a:9a:2c:59:d7:5d:69:62:2b:73:04:a8:02:47:57:
8e:a8:dd:f7:10:3c:38:6a:7b:86:f7:b0:4c:1e:f9:
42:63:24:48:13:56:d9:78:85:33:27:40:68:03:ac:
22:92:b0:df:98:af:cc:5d:ec:51:c4:33:a4:77:1d:
39:58:34:3c:52:8b:5d:65:3b:55:01:23:65:ca:f6:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:6A:41:D5:2D:9B:52:8A:4E:AA:0D:7B:6D:6C:83:77:B3:F4:D0
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3-JqQdUtm1KKTqoNe21sg3ez9NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.139.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:51:ee:12:fa:3e:f8:f7:6f:0d:6b:63:d2:41:78:16:f3:a5:
9e:54:16:1d:fa:f9:07:5e:22:1c:12:cf:7e:b9:d0:bf:f1:1c:
ee:02:f1:11:c4:ea:d2:ad:a1:3e:eb:da:f2:e1:8e:c4:3e:47:
6d:a4:43:2e:3c:1f:51:3d:15:83:14:d2:be:26:90:70:26:b8:
bb:9c:44:fc:34:9d:6d:e7:e9:f6:9b:6d:6a:8b:8c:4b:45:4c:
bb:fd:c0:e1:9d:17:b0:64:01:75:66:12:1b:fb:35:de:c1:d7:
01:e8:6e:ee:e8:f7:f6:c5:cc:7e:2f:02:00:c3:10:aa:12:ac:
b9:9a:15:95:ff:d1:c0:95:ac:1e:80:eb:eb:1a:d4:c0:89:45:
c0:6f:f8:d0:df:f7:72:e9:30:d1:2c:dc:8f:da:0b:a5:bb:56:
e8:c6:13:d5:c7:7e:34:bf:07:be:6a:22:df:67:d8:40:32:d4:
2f:9c:51:fd:1f:83:68:a7:73:09:8b:fd:1e:19:8f:3e:be:6f:
5b:04:07:12:b7:ed:38:3c:69:f8:a3:0d:b2:36:b6:9a:db:77:
18:61:5f:ef:bc:11:79:31:b6:a2:13:15:4f:3d:b3:6c:39:b0:
1f:06:81:db:ae:f0:4b:c7:62:26:a9:5e:14:fe:c9:2d:b3:e6:
f4:78:26:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIb6Xyb7bsC82d358CcywQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmUyNmE0MWQ1MmQ5YjUyOGE0ZWFhMGQ3YjZkNmM4Mzc3YjNmNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRpMkHXNOcEuk8QBMYc1am3jyMz2
sOAfBRsAb7/XwxphnHw90IXq6rOySShV53s63bn08BkgrVA2ntYQiX8i4qIPQ5bn
NrYjJD5B8ZKiyE9dm1RCaxJR0z2lBE7TUJPrKPeiWNSderooay1URG2n5mMx3QJZ
J1/A+vTDqHIFLu5OOnhLUFVr4N9yGqqJDK6TvPDtNprr4oO/f4q5CU5i0IKJmd+N
nPVdEkCscA9APyAxPAhKmixZ111pYitzBKgCR1eOqN33EDw4anuG97BMHvlCYyRI
E1bZeIUzJ0BoA6wikrDfmK/MXexRxDOkdx05WDQ8UotdZTtVASNlyvabVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN/iakHVLZtSik6qDXttbIN3s/TQMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvMy1KcVFkVXRtMUtLVHFvTmUyMXNnM2V6OU5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVj2AwQB
LYv+MA0GCSqGSIb3DQEBCwUAA4IBAQBPUe4S+j74928Na2PSQXgW86WeVBYd+vkH
XiIcEs9+udC/8RzuAvERxOrSraE+69ry4Y7EPkdtpEMuPB9RPRWDFNK+JpBwJri7
nET8NJ1t5+n2m21qi4xLRUy7/cDhnRewZAF1ZhIb+zXewdcB6G7u6Pf2xcx+LwIA
wxCqEqy5mhWV/9HAlawegOvrGtTAiUXAb/jQ3/dy6TDRLNyP2gulu1boxhPVx340
vwe+aiLfZ9hAMtQvnFH9H4Nop3MJi/0eGY8+vm9bBAcSt+04PGn4ow2yNraa23cY
YV/vvBF5MbaiExVPPbNsObAfBoHbrvBLx2ImqV4U/skts+b0eCag
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:48 2024 by rpki-client on console-fra.rpki-client.org