Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r23uU1vX16WxMoNFiJAJE4NE9Vs.roa
File: r23uU1vX16WxMoNFiJAJE4NE9Vs.roa (raw, json)
Hash identifier: AJf//Imoq9z35YzbmfP4D10aKzYuEgkMmZzLlzd3Ig8=
Subject key identifier: AF:6D:EE:53:5B:D7:D7:A5:B1:32:83:45:88:90:09:13:83:44:F5:5B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018CC86FA789C61400E00911DBEB2D601C6A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r23uU1vX16WxMoNFiJAJE4NE9Vs.roa
Signing time: Tue 02 Jan 2024 04:30:09 +0000
ROA not before: Tue 02 Jan 2024 04:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 45.86.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:a7:89:c6:14:00:e0:09:11:db:eb:2d:60:1c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 04:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af6dee535bd7d7a5b1328345889009138344f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:59:37:74:78:26:c6:88:98:0e:ab:ce:98:
0c:38:46:97:b7:e4:61:23:0b:b0:78:5d:d9:4f:4a:
3a:53:7e:2e:e6:24:fa:83:0b:d7:43:94:11:21:14:
67:e0:35:cf:fc:1a:e6:3b:74:e3:46:0e:f0:c3:5e:
53:3c:bc:f0:54:a8:00:21:37:23:3f:17:70:dc:5b:
af:a1:7d:db:bc:85:83:b5:55:bf:e6:07:e1:46:fb:
a8:e1:7d:65:84:95:28:7e:4c:e5:7a:6d:0c:23:ab:
8d:03:e8:ee:5f:0f:85:88:ac:2f:75:8f:0e:ba:56:
34:97:75:50:69:dd:58:7e:e5:40:17:1f:ed:3f:79:
49:a7:c5:d7:f7:a9:67:18:27:b1:3c:d3:53:a7:09:
3d:f6:92:31:b0:8b:2e:3f:b7:e4:f3:d8:b5:d5:32:
13:03:b4:48:17:be:5e:05:e0:b3:b1:ca:54:41:4c:
d8:ff:0f:b9:01:19:41:c6:1b:ed:e3:11:1c:01:3b:
75:13:1e:08:49:e0:c6:e1:6e:36:cf:42:07:ed:a7:
81:63:3b:67:1f:35:cf:f5:14:c9:25:b8:ad:bb:d8:
6a:f2:63:4c:74:62:ea:0a:86:e8:b3:fb:10:07:67:
11:93:c2:91:1d:67:48:10:1e:01:ab:ea:f9:fc:5e:
0d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:EE:53:5B:D7:D7:A5:B1:32:83:45:88:90:09:13:83:44:F5:5B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/r23uU1vX16WxMoNFiJAJE4NE9Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:21:90:d0:5a:1b:61:64:08:b2:cc:b7:ea:83:50:4e:63:ac:
29:ba:fa:ee:9b:1a:53:4a:4a:7f:14:88:47:d9:05:24:d5:91:
a2:b3:13:0e:8d:00:12:27:32:23:3f:30:93:33:69:2b:26:3e:
51:b7:d2:81:bb:f9:53:b5:3b:80:2b:78:e4:84:81:af:4b:f5:
3e:3b:ba:0f:21:ed:5a:53:f2:51:53:41:6e:e7:93:36:eb:fa:
4f:7e:f7:d2:a8:eb:c6:ea:e9:be:93:c3:39:13:40:17:68:9c:
04:0f:bb:2e:17:dd:bf:60:ee:5b:bc:6c:a4:a5:34:c0:29:eb:
4d:08:df:84:6d:9f:b4:c3:f8:eb:57:e7:06:c7:94:3c:c6:93:
37:ea:d4:3d:cf:a4:5c:2b:c6:23:c8:ca:94:6b:cb:3c:60:a0:
b0:d2:ce:36:74:c8:9e:6a:d5:4e:10:5b:00:cc:e9:a3:80:e7:
58:65:75:36:23:7e:b9:7b:b6:1f:5b:1d:25:1d:7c:e7:3d:b4:
67:32:fb:70:c5:3d:ff:45:36:c4:7e:46:f3:a2:fc:6e:d9:fa:
bd:d8:82:cf:ea:1a:87:62:ce:d1:f9:38:ec:4b:95:fd:4f:99:
2c:12:70:12:c7:99:90:1f:05:71:13:43:7d:47:9f:05:ca:6c:
d6:3e:73:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb6eJxhQA4AkR2+stYBxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjZkZWU1MzViZDdkN2E1YjEzMjgzNDU4ODkwMDkxMzgzNDRmNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqFZN3R4JsaImA6rzpgMOEaXt+Rh
IwuweF3ZT0o6U34u5iT6gwvXQ5QRIRRn4DXP/BrmO3TjRg7ww15TPLzwVKgAITcj
Pxdw3FuvoX3bvIWDtVW/5gfhRvuo4X1lhJUofkzlem0MI6uNA+juXw+FiKwvdY8O
ulY0l3VQad1YfuVAFx/tP3lJp8XX96lnGCexPNNTpwk99pIxsIsuP7fk89i11TIT
A7RIF75eBeCzscpUQUzY/w+5ARlBxhvt4xEcATt1Ex4ISeDG4W42z0IH7aeBYztn
HzXP9RTJJbitu9hq8mNMdGLqCobos/sQB2cRk8KRHWdIEB4Bq+r5/F4NIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9t7lNb19elsTKDRYiQCRODRPVbMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvcjIzdVUxdlgxNld4TW9ORmlKQUpFNE5FOVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVbLMA0G
CSqGSIb3DQEBCwUAA4IBAQB9IZDQWhthZAiyzLfqg1BOY6wpuvrumxpTSkp/FIhH
2QUk1ZGisxMOjQASJzIjPzCTM2krJj5Rt9KBu/lTtTuAK3jkhIGvS/U+O7oPIe1a
U/JRU0Fu55M26/pPfvfSqOvG6um+k8M5E0AXaJwED7suF92/YO5bvGykpTTAKetN
CN+EbZ+0w/jrV+cGx5Q8xpM36tQ9z6RcK8YjyMqUa8s8YKCw0s42dMieatVOEFsA
zOmjgOdYZXU2I365e7YfWx0lHXznPbRnMvtwxT3/RTbEfkbzovxu2fq92ILP6hqH
Ys7R+TjsS5X9T5ksEnASx5mQHwVxE0N9R58FymzWPnM8
-----END CERTIFICATE-----
Generated at Sat May 4 03:11:00 2024 by rpki-client on console-fra.rpki-client.org