Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tMtsWFNZXjcMRR8uw83t_r_icZE.roa
File: tMtsWFNZXjcMRR8uw83t_r_icZE.roa (raw, json)
Hash identifier: L5gxL/WXrHNEhFV6K9a9UeaYyjsxQldO0ZcGqATNeWo=
Subject key identifier: B4:CB:6C:58:53:59:5E:37:0C:45:1F:2E:C3:CD:ED:FE:BF:E2:71:91
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018CC5DC106E15BB5EE4D95CFFB9C9F5F0D2
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tMtsWFNZXjcMRR8uw83t_r_icZE.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22168
IP address blocks: 45.143.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:10:6e:15:bb:5e:e4:d9:5c:ff:b9:c9:f5:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4cb6c5853595e370c451f2ec3cdedfebfe27191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:a5:01:c1:fe:44:1a:ee:62:6a:bc:22:14:
5e:f0:44:72:c1:cc:99:a0:35:ff:84:5c:cc:ed:ba:
8e:af:66:89:24:f5:38:a9:b5:8f:3b:6f:3b:d0:3c:
06:09:2c:6b:68:6c:a8:2d:74:fd:48:11:7d:66:27:
2c:2a:60:58:98:06:5d:73:da:f3:17:52:c5:8b:79:
45:ff:23:9f:2a:1c:0f:5b:07:96:65:f1:fa:a4:0a:
d0:5f:5c:cf:49:22:51:cd:12:94:e9:52:3a:66:a9:
ea:0a:3f:cd:a8:01:f3:2b:73:a7:c9:bd:aa:80:71:
22:55:55:d2:c0:7b:34:96:93:07:89:0b:11:53:a4:
22:7f:49:dd:06:46:61:5c:11:28:64:19:a3:6f:74:
00:89:00:14:16:1e:74:c2:ab:f8:e2:5a:09:da:66:
ca:e1:8f:26:6f:6a:ec:f5:4d:7b:5a:d2:43:cf:85:
88:f4:9b:3a:45:45:73:00:34:c2:ee:d2:2f:e9:4a:
06:ad:05:3b:88:58:a1:af:f9:aa:86:46:d9:4b:8a:
17:ec:eb:91:0d:8d:d6:7a:4c:47:b5:8b:bd:5a:31:
93:7b:f8:33:59:1b:d7:23:8d:c1:9f:56:12:f2:6e:
e5:5f:b8:a9:fb:29:7e:df:95:b4:53:e6:85:46:98:
82:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:6C:58:53:59:5E:37:0C:45:1F:2E:C3:CD:ED:FE:BF:E2:71:91
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/tMtsWFNZXjcMRR8uw83t_r_icZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:40:04:bf:ee:bb:2b:c1:a5:39:e8:6f:4f:72:57:1e:aa:53:
3c:ea:2f:91:a8:53:82:5b:67:96:4a:83:f5:48:f1:ae:33:fa:
fd:b7:b5:31:b3:55:20:13:5a:46:2a:2f:4d:b4:f2:e5:c0:d5:
f2:0c:c4:32:bf:3a:1c:c6:af:d3:31:f1:eb:ef:1e:92:0c:42:
77:2c:6b:6a:b8:fb:8b:52:ef:8c:3f:b3:51:bd:b1:f4:1c:bb:
cb:9d:5f:0b:89:ee:de:8a:4e:32:65:11:fd:f9:42:03:69:4f:
cc:6f:6b:bb:d6:6b:c7:e4:88:c6:dd:b4:4d:a6:77:cf:b1:76:
de:ba:ee:c1:16:93:fe:de:83:74:31:f9:92:72:e7:02:df:62:
8b:7f:f3:74:83:7e:ed:46:d6:19:eb:4e:9c:e8:72:39:99:34:
ef:43:d4:6e:87:ca:67:8b:8e:d2:1b:56:eb:51:53:c5:8c:13:
09:a9:ff:02:58:0d:aa:f0:0c:af:43:50:ab:82:46:3d:23:7a:
e4:ea:3b:7c:e1:d9:65:53:4a:ee:19:b8:52:92:a3:43:13:b1:
cf:a7:fe:6c:68:60:af:0d:8c:5f:31:c5:af:35:b5:36:f3:55:
14:ba:96:e7:81:33:4e:2c:84:e1:dc:b7:29:73:d0:1d:00:99:
cf:09:3e:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3BBuFbte5Nlc/7nJ9fDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwMTAxMTYyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGNiNmM1ODUzNTk1ZTM3MGM0NTFmMmVjM2NkZWRmZWJmZTI3MTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PilAcH+RBruYmq8IhRe8ERywcyZ
oDX/hFzM7bqOr2aJJPU4qbWPO2870DwGCSxraGyoLXT9SBF9ZicsKmBYmAZdc9rz
F1LFi3lF/yOfKhwPWweWZfH6pArQX1zPSSJRzRKU6VI6ZqnqCj/NqAHzK3Onyb2q
gHEiVVXSwHs0lpMHiQsRU6Qif0ndBkZhXBEoZBmjb3QAiQAUFh50wqv44loJ2mbK
4Y8mb2rs9U17WtJDz4WI9Js6RUVzADTC7tIv6UoGrQU7iFihr/mqhkbZS4oX7OuR
DY3WekxHtYu9WjGTe/gzWRvXI43Bn1YS8m7lX7ip+yl+35W0U+aFRpiCAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLTLbFhTWV43DEUfLsPN7f6/4nGRMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvdE10c1dGTlpYamNNUlI4dXc4M3Rfcl9pY1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+gMA0G
CSqGSIb3DQEBCwUAA4IBAQBbQAS/7rsrwaU56G9PclceqlM86i+RqFOCW2eWSoP1
SPGuM/r9t7Uxs1UgE1pGKi9NtPLlwNXyDMQyvzocxq/TMfHr7x6SDEJ3LGtquPuL
Uu+MP7NRvbH0HLvLnV8Lie7eik4yZRH9+UIDaU/Mb2u71mvH5IjG3bRNpnfPsXbe
uu7BFpP+3oN0MfmScucC32KLf/N0g37tRtYZ606c6HI5mTTvQ9Ruh8pni47SG1br
UVPFjBMJqf8CWA2q8AyvQ1CrgkY9I3rk6jt84dllU0ruGbhSkqNDE7HPp/5saGCv
DYxfMcWvNbU281UUupbngTNOLITh3Lcpc9AdAJnPCT5L
-----END CERTIFICATE-----
Generated at Thu May 2 19:21:18 2024 by rpki-client on console-fra.rpki-client.org