Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ztjH7U9ZVQmo-fOL8w83DikQ7-o.roa
File: ztjH7U9ZVQmo-fOL8w83DikQ7-o.roa (raw, json)
Hash identifier: cYsskIAB66XVhfVIGffNwgWXBg/gbePv9Du1UOd/J2c=
Subject key identifier: CE:D8:C7:ED:4F:59:55:09:A8:F9:F3:8B:F3:0F:37:0E:29:10:EF:EA
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018F138A1A869812EC18B6E1546D4FEB825F
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ztjH7U9ZVQmo-fOL8w83DikQ7-o.roa
Signing time: Thu 25 Apr 2024 04:36:08 +0000
ROA not before: Thu 25 Apr 2024 04:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.143.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:8a:1a:86:98:12:ec:18:b6:e1:54:6d:4f:eb:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 25 04:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced8c7ed4f595509a8f9f38bf30f370e2910efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:77:cd:9e:e0:90:39:25:2f:02:50:f0:7f:
2a:8c:e1:6c:a8:95:af:8e:95:4f:d6:e5:41:d8:94:
1b:66:aa:ee:4e:cf:95:10:07:bd:1f:fd:32:2a:8c:
b8:74:9c:b3:4a:aa:58:f3:b7:93:d3:08:cc:84:41:
23:ad:f8:bb:20:0c:31:b0:2a:67:35:8f:bc:01:d4:
e5:9f:a5:eb:fa:57:e8:d4:c7:cb:59:e6:34:60:d9:
d8:41:d9:b2:21:7f:9f:45:00:5a:01:8b:de:4e:b7:
75:f1:ed:36:29:2d:62:7d:28:e1:84:a1:27:29:af:
2a:55:12:dc:d1:09:2f:93:32:8d:e1:74:46:c3:5f:
00:0b:1d:ad:48:c4:f3:d2:f9:bc:78:4c:9c:9c:4f:
5a:6a:37:b5:03:21:f9:fc:e8:53:5a:ed:a7:0c:10:
fc:5e:56:b0:83:de:76:1e:c1:1c:84:45:ab:08:a6:
dd:4f:cb:8d:5b:3f:ec:01:f0:43:74:49:dd:84:c9:
78:ba:32:00:97:a6:76:7b:91:f7:1d:3f:f7:78:84:
9d:d4:29:da:32:58:6a:bb:1a:bb:e3:65:67:a4:eb:
34:9e:69:72:1c:d7:93:5a:81:9c:c0:1f:96:4c:0c:
78:ad:6e:a1:d6:56:d7:13:2f:13:5b:1a:ec:aa:d7:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:C7:ED:4F:59:55:09:A8:F9:F3:8B:F3:0F:37:0E:29:10:EF:EA
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/ztjH7U9ZVQmo-fOL8w83DikQ7-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:61:20:41:d0:b7:5b:46:6e:ae:eb:59:3b:73:df:4f:bd:d7:
d0:fd:9b:2d:5d:c8:9e:be:7b:34:29:fd:d3:b9:ae:7b:83:7f:
f3:d0:58:04:97:43:36:9c:91:23:98:58:4f:df:a2:35:3e:00:
fc:04:bd:23:be:e9:a1:9e:5e:61:4f:42:c2:93:1f:e7:bb:a7:
98:f9:b7:2f:76:93:ac:56:eb:fb:7f:59:29:47:8a:23:08:1d:
cf:9d:f4:98:b4:4d:92:33:3f:8e:4b:2f:bd:18:4e:8a:7b:41:
9d:36:b2:cb:ea:b4:ee:a2:fb:5e:3e:a6:74:87:d9:bf:8e:85:
ef:9a:a9:cf:d8:05:53:62:6c:c7:7d:81:23:94:1f:99:85:40:
ce:df:3f:ea:69:93:61:d1:73:03:f7:09:af:63:c8:c8:49:99:
ea:89:80:13:61:c8:90:e6:7f:5c:94:fb:86:13:3c:13:0b:79:
00:a8:8a:95:d5:db:a2:06:52:44:0d:b8:a8:7c:ac:b6:78:8a:
52:97:56:fb:dd:6d:a2:bd:6b:f3:1b:7c:b3:46:9f:25:0e:da:
9b:73:e9:b4:6b:f0:0a:ff:58:21:83:24:b9:84:97:2d:b6:12:
d5:6e:3a:6e:82:ab:90:ad:e1:76:e8:d0:92:d9:ea:d7:95:fd:
7a:7f:11:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8TihqGmBLsGLbhVG1P64JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwNDI1MDQzNjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWQ4YzdlZDRmNTk1NTA5YThmOWYzOGJmMzBmMzcwZTI5MTBlZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WN3zZ7gkDklLwJQ8H8qjOFsqJWv
jpVP1uVB2JQbZqruTs+VEAe9H/0yKoy4dJyzSqpY87eT0wjMhEEjrfi7IAwxsCpn
NY+8AdTln6Xr+lfo1MfLWeY0YNnYQdmyIX+fRQBaAYveTrd18e02KS1ifSjhhKEn
Ka8qVRLc0QkvkzKN4XRGw18ACx2tSMTz0vm8eEycnE9aaje1AyH5/OhTWu2nDBD8
Xlawg952HsEchEWrCKbdT8uNWz/sAfBDdEndhMl4ujIAl6Z2e5H3HT/3eISd1Cna
Mlhquxq742VnpOs0nmlyHNeTWoGcwB+WTAx4rW6h1lbXEy8TWxrsqtdHSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7Yx+1PWVUJqPnzi/MPNw4pEO/qMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvenRqSDdVOVpWUW1vLWZPTDh3ODNEaWtRNy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+hMA0G
CSqGSIb3DQEBCwUAA4IBAQAOYSBB0LdbRm6u61k7c99PvdfQ/ZstXcievns0Kf3T
ua57g3/z0FgEl0M2nJEjmFhP36I1PgD8BL0jvumhnl5hT0LCkx/nu6eY+bcvdpOs
Vuv7f1kpR4ojCB3PnfSYtE2SMz+OSy+9GE6Ke0GdNrLL6rTuovtePqZ0h9m/joXv
mqnP2AVTYmzHfYEjlB+ZhUDO3z/qaZNh0XMD9wmvY8jISZnqiYATYciQ5n9clPuG
EzwTC3kAqIqV1duiBlJEDbiofKy2eIpSl1b73W2ivWvzG3yzRp8lDtqbc+m0a/AK
/1ghgyS5hJctthLVbjpugquQreF26NCS2erXlf16fxH9
-----END CERTIFICATE-----
Generated at Wed May 8 03:14:15 2024 by rpki-client on console-ams.rpki-client.org