Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2HtdbmzjI9O3JVt0NYTd5oo72H8.roa
File: 2HtdbmzjI9O3JVt0NYTd5oo72H8.roa (raw, json)
Hash identifier: HzWJf2lzaHeUgRmgXySme3nA6TkvqSTFGZTBi5Edt18=
Subject key identifier: D8:7B:5D:6E:6C:E3:23:D3:B7:25:5B:74:35:84:DD:E6:8A:3B:D8:7F
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018CC5DC0FCAC68981AA9D037B7523CDFC96
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2HtdbmzjI9O3JVt0NYTd5oo72H8.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 45.143.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0f:ca:c6:89:81:aa:9d:03:7b:75:23:cd:fc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d87b5d6e6ce323d3b7255b743584dde68a3bd87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:f9:1b:6a:34:33:4b:0a:00:40:82:31:fd:
51:69:98:66:81:31:14:d5:af:11:47:aa:81:94:7b:
7a:62:1e:32:30:9c:b6:34:52:22:3b:3e:7e:28:f0:
28:b1:70:77:e8:88:33:9c:f7:3c:f0:81:7d:74:46:
0f:55:52:de:d3:00:48:13:76:99:b4:3b:dc:f5:db:
9c:e2:64:b3:93:8f:b7:0a:0e:98:70:6c:eb:60:68:
d8:90:0f:5c:08:ab:08:d3:6d:96:c6:20:bd:12:6e:
2d:39:a1:f1:81:48:3d:3c:95:1e:4a:d9:19:15:01:
67:26:ec:fb:3b:5a:8f:d7:3a:f3:28:43:bf:30:c1:
de:e0:d2:13:0b:44:fd:2c:54:fe:59:a5:40:e1:fb:
c3:60:73:4a:84:cc:54:03:7c:f8:73:30:44:51:a8:
57:c8:19:32:d7:8f:82:47:3d:d5:7e:23:cc:15:34:
46:de:fa:ba:71:08:21:9c:99:19:db:e1:92:32:f2:
3a:d9:51:c5:90:f8:60:d1:10:9a:3c:a7:4b:29:f7:
ed:33:7e:17:c2:9c:d4:a6:d8:23:63:57:08:2d:d4:
a1:57:33:30:0c:e4:f6:27:8f:c7:c0:7d:37:35:1e:
46:15:71:0a:f8:99:54:48:3d:2e:cd:28:9d:ce:c6:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:5D:6E:6C:E3:23:D3:B7:25:5B:74:35:84:DD:E6:8A:3B:D8:7F
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/2HtdbmzjI9O3JVt0NYTd5oo72H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
Signature Algorithm: sha256WithRSAEncryption
82:01:39:2b:e1:e8:65:eb:dc:a7:3a:af:d0:62:af:99:13:31:
56:37:08:ed:e7:7a:4b:47:f1:e5:d5:80:b5:e9:13:f6:c1:7d:
22:a8:30:d2:ef:c9:b5:8c:de:92:63:a9:a1:80:b3:c2:3c:9e:
20:40:b1:a8:01:b8:68:09:df:c4:02:a5:c9:c2:75:f8:21:a8:
21:94:74:3d:d1:a5:89:66:af:cc:91:6b:f7:1b:37:33:08:ee:
fe:f8:c5:ce:c1:c0:44:89:3b:ed:3e:f0:e0:7d:5e:6a:ca:5d:
35:9f:b6:dd:41:a2:4a:71:51:82:55:82:54:bb:af:61:b9:98:
bf:42:1f:f6:59:ab:e4:aa:e4:5a:59:9a:b1:05:f9:a1:5b:b1:
bc:84:01:47:dd:75:fa:60:7e:5a:9f:44:1d:85:49:15:52:e2:
47:be:32:b2:91:aa:ed:c6:36:33:a0:43:4e:29:28:62:cc:a1:
7e:65:87:91:4e:ad:fe:2e:11:0e:e4:98:9c:27:78:87:7c:99:
44:dc:d3:40:ef:12:40:a0:b7:ad:80:36:4c:23:d4:78:3a:fc:
e8:52:86:88:7f:26:e3:f7:f5:b4:70:75:e5:65:59:44:4b:b8:
95:5b:8d:b7:e0:76:f0:88:1f:60:1d:1b:ad:23:40:fa:e0:8f:
b2:4d:d7:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3A/KxomBqp0De3UjzfyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwMTAxMTYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODdiNWQ2ZTZjZTMyM2QzYjcyNTViNzQzNTg0ZGRlNjhhM2JkODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuX5G2o0M0sKAECCMf1RaZhmgTEU
1a8RR6qBlHt6Yh4yMJy2NFIiOz5+KPAosXB36IgznPc88IF9dEYPVVLe0wBIE3aZ
tDvc9duc4mSzk4+3Cg6YcGzrYGjYkA9cCKsI022WxiC9Em4tOaHxgUg9PJUeStkZ
FQFnJuz7O1qP1zrzKEO/MMHe4NITC0T9LFT+WaVA4fvDYHNKhMxUA3z4czBEUahX
yBky14+CRz3VfiPMFTRG3vq6cQghnJkZ2+GSMvI62VHFkPhg0RCaPKdLKfftM34X
wpzUptgjY1cILdShVzMwDOT2J4/HwH03NR5GFXEK+JlUSD0uzSidzsaTiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNh7XW5s4yPTtyVbdDWE3eaKO9h/MB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvMkh0ZGJtempJOU8zSlZ0ME5ZVGQ1b283Mkg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+jMA0G
CSqGSIb3DQEBCwUAA4IBAQCCATkr4ehl69ynOq/QYq+ZEzFWNwjt53pLR/Hl1YC1
6RP2wX0iqDDS78m1jN6SY6mhgLPCPJ4gQLGoAbhoCd/EAqXJwnX4IaghlHQ90aWJ
Zq/MkWv3GzczCO7++MXOwcBEiTvtPvDgfV5qyl01n7bdQaJKcVGCVYJUu69huZi/
Qh/2WavkquRaWZqxBfmhW7G8hAFH3XX6YH5an0QdhUkVUuJHvjKykartxjYzoENO
KShizKF+ZYeRTq3+LhEO5JicJ3iHfJlE3NNA7xJAoLetgDZMI9R4OvzoUoaIfybj
9/W0cHXlZVlES7iVW4234HbwiB9gHRutI0D64I+yTdfs
-----END CERTIFICATE-----
Generated at Thu May 2 22:37:01 2024 by rpki-client on console-ams.rpki-client.org