Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/10YKb98bOkjpW20GXrbBzE3ASRo.roa
File: 10YKb98bOkjpW20GXrbBzE3ASRo.roa (raw, json)
Hash identifier: RzVd1LF6A1gnzc77ynhMGzVG8EmOf+bATv9Krd4x570=
Subject key identifier: D7:46:0A:6F:DF:1B:3A:48:E9:5B:6D:06:5E:B6:C1:CC:4D:C0:49:1A
Certificate issuer: /CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Certificate serial: 018CC7276A4DF8227813A314D7DB4F0D0EAA
Authority key identifier: A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/10YKb98bOkjpW20GXrbBzE3ASRo.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51747
IP address blocks: 45.150.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.mft
rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6a:4d:f8:22:78:13:a3:14:d7:db:4f:0d:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7460a6fdf1b3a48e95b6d065eb6c1cc4dc0491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:8b:bd:dc:7c:fe:c5:8c:cc:67:ea:8a:c8:
9f:22:35:94:fa:e9:a7:1f:ad:d0:ac:cc:a6:38:af:
34:0a:2a:86:4d:ef:2d:06:9b:1b:42:ed:93:66:d3:
1b:bd:48:fd:b3:b4:41:5a:1e:86:68:0c:b4:83:5c:
a8:9c:43:61:2b:6e:07:9e:2e:39:91:dc:5f:4b:05:
9f:f8:54:38:49:30:a3:d9:65:55:58:17:e8:65:6c:
5d:b5:b4:46:85:33:0e:22:ca:4d:30:c0:64:d4:42:
fc:58:13:4b:41:2f:b1:2c:32:08:fa:5d:26:31:3e:
dd:0c:16:85:1a:b1:e1:cd:9d:ad:2e:4e:45:35:a0:
6a:08:ab:d7:59:b1:05:89:80:74:ca:37:bd:de:a0:
d7:33:74:01:63:18:37:bc:92:b9:b0:47:4f:a8:7b:
2e:54:32:d8:cf:f9:9e:83:1e:c8:01:92:92:56:e8:
33:90:4f:08:87:27:85:15:64:ae:e2:b1:2c:13:ee:
aa:54:c9:d9:6b:78:01:90:a0:b7:5e:d8:2a:6b:0d:
cb:c7:fd:80:16:6f:c9:59:8e:36:93:3d:15:59:b6:
49:f1:48:4a:12:70:a9:22:15:f5:72:c5:c7:3a:dc:
f2:73:27:a8:fb:08:f4:d3:c4:e5:57:85:69:22:1b:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:0A:6F:DF:1B:3A:48:E9:5B:6D:06:5E:B6:C1:CC:4D:C0:49:1A
X509v3 Authority Key Identifier:
keyid:A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/10YKb98bOkjpW20GXrbBzE3ASRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ca:46:ee:82:ec:66:c0:55:ef:01:36:8b:09:0b:43:d4:4b:
4c:dd:c0:e5:53:47:23:bd:90:30:7e:0c:87:9d:b4:0d:03:1f:
a5:74:63:bc:71:a6:27:f8:9d:38:37:53:d1:99:70:90:79:7a:
f1:20:22:12:02:a4:39:16:ef:2c:05:3d:cc:30:c7:89:11:61:
aa:34:33:c7:c1:3e:3e:eb:fd:3b:0c:4d:8f:5d:6a:ad:11:f0:
e0:d4:67:db:6c:ff:46:9c:36:f2:2e:9b:e0:7a:bc:5a:e3:94:
1e:5e:61:65:e2:72:16:f9:cb:a0:ca:65:15:39:06:79:5e:93:
5a:21:b2:10:56:e3:90:0e:b0:5c:c1:a2:8b:06:c7:ad:ca:d5:
83:31:02:f5:37:6c:39:7d:93:b2:1f:f8:16:6d:c7:82:d5:6f:
b9:fc:99:65:ca:ce:0a:ea:55:d4:dd:86:e7:3f:c5:41:b2:72:
a3:2f:7e:21:12:da:7a:5f:92:cf:3f:c6:58:ea:5b:6a:63:50:
5e:9f:6a:c3:7b:cd:16:73:bf:2d:a1:fd:c4:fb:1d:49:de:92:
c0:c7:b2:c3:70:00:dc:75:dc:fa:94:c2:1d:2c:e4:ff:fa:d9:
e4:15:f2:f5:00:40:87:3b:7e:cd:db:d2:02:f8:c8:82:ca:dc:
51:77:90:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJ2pN+CJ4E6MU19tPDQ6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMGM0NjQxY2M5ZmM5ZDIzYTJiNTU4OGE0ZWY1ZWUzODg0
Y2YxY2EwHhcNMjQwMTAxMjIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzQ2MGE2ZmRmMWIzYTQ4ZTk1YjZkMDY1ZWI2YzFjYzRkYzA0OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhKLvdx8/sWMzGfqisifIjWU+umn
H63QrMymOK80CiqGTe8tBpsbQu2TZtMbvUj9s7RBWh6GaAy0g1yonENhK24Hni45
kdxfSwWf+FQ4STCj2WVVWBfoZWxdtbRGhTMOIspNMMBk1EL8WBNLQS+xLDII+l0m
MT7dDBaFGrHhzZ2tLk5FNaBqCKvXWbEFiYB0yje93qDXM3QBYxg3vJK5sEdPqHsu
VDLYz/megx7IAZKSVugzkE8IhyeFFWSu4rEsE+6qVMnZa3gBkKC3Xtgqaw3Lx/2A
Fm/JWY42kz0VWbZJ8UhKEnCpIhX1csXHOtzycyeo+wj008TlV4VpIhuDVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdGCm/fGzpI6VttBl62wcxNwEkaMB8GA1UdIwQY
MBaAFKMMRkHMn8nSOitViKTvXuOITPHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3d4R1FjeWZ5ZEk2SzFXSXBPOWU0NGhNOGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YzMyYTYtNjI0Mi00Y2JiLTkxOGMt
Yzk3ZTVhNmIwYjU2LzEvMTBZS2I5OGJPa2pwVzIwR1hyYkJ6RTNBU1JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82YzMyYTYtNjI0Mi00Y2JiLTkxOGMtYzk3ZTVhNmIwYjU2
LzEvb3d4R1FjeWZ5ZEk2SzFXSXBPOWU0NGhNOGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZZIMA0G
CSqGSIb3DQEBCwUAA4IBAQBsykbuguxmwFXvATaLCQtD1EtM3cDlU0cjvZAwfgyH
nbQNAx+ldGO8caYn+J04N1PRmXCQeXrxICISAqQ5Fu8sBT3MMMeJEWGqNDPHwT4+
6/07DE2PXWqtEfDg1GfbbP9GnDbyLpvgerxa45QeXmFl4nIW+cugymUVOQZ5XpNa
IbIQVuOQDrBcwaKLBsetytWDMQL1N2w5fZOyH/gWbceC1W+5/Jllys4K6lXU3Ybn
P8VBsnKjL34hEtp6X5LPP8ZY6ltqY1Ben2rDe80Wc78tof3E+x1J3pLAx7LDcADc
ddz6lMIdLOT/+tnkFfL1AECHO37N29IC+MiCytxRd5BU
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:31:16 2024 by rpki-client on console-fra.rpki-client.org