Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/KiyU1CerUwL9bnZw3_crUzhYBcI.roa
File: KiyU1CerUwL9bnZw3_crUzhYBcI.roa (raw, json)
Hash identifier: JQMhSmPH5ncM53OwQlSblW6gFsmKFivTqVwlCYuF8iI=
Subject key identifier: 2A:2C:94:D4:27:AB:53:02:FD:6E:76:70:DF:F7:2B:53:38:58:05:C2
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500AE8158BCF58DF1E2BFC74967FDE8
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/KiyU1CerUwL9bnZw3_crUzhYBcI.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 45.132.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ae:81:58:bc:f5:8d:f1:e2:bf:c7:49:67:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a2c94d427ab5302fd6e7670dff72b53385805c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:ee:10:5a:66:8e:46:b7:40:d6:f4:8b:dd:
11:af:47:47:9c:ce:18:db:1c:d4:62:b1:82:91:37:
f9:68:5c:ad:03:2a:de:a2:1e:9e:33:1d:cc:bb:40:
a3:eb:9d:8a:84:15:39:4d:e5:65:97:ce:be:44:dd:
f2:a0:8e:c3:b8:f7:20:51:45:93:9e:18:b7:3f:96:
4e:80:80:7d:60:88:ca:ee:12:ad:8b:2c:27:db:9d:
38:3e:7e:87:c3:b4:b9:3d:4b:b8:f6:7e:8c:f7:a8:
a6:86:83:b4:08:86:7a:db:d8:19:0a:eb:ef:f0:14:
8d:1f:28:65:f7:19:6a:83:47:6e:70:5d:f7:f8:79:
36:f7:3f:f4:aa:45:76:c1:43:2c:15:d8:d7:02:fb:
71:7b:d3:51:65:5e:93:0a:2d:82:81:12:22:db:eb:
de:a5:5f:94:2a:b9:e9:86:7a:9c:81:17:25:dc:21:
d4:1d:6a:1f:d6:17:3b:4c:27:87:b7:7e:e4:55:3b:
26:e5:25:51:b8:77:1e:0f:b6:67:43:ec:38:b5:1c:
6e:f4:72:c4:59:f9:f5:37:37:de:61:fd:92:74:7b:
11:48:78:f5:34:64:b4:b7:72:69:c5:f6:0e:50:b7:
fa:de:a5:18:e2:b8:ef:00:b8:ae:aa:25:42:bd:37:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2C:94:D4:27:AB:53:02:FD:6E:76:70:DF:F7:2B:53:38:58:05:C2
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/KiyU1CerUwL9bnZw3_crUzhYBcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
Signature Algorithm: sha256WithRSAEncryption
43:cc:84:8e:c7:f5:fe:e6:d3:52:6e:53:11:7c:86:a2:46:ab:
c8:f6:2f:c9:0c:1e:ee:56:d3:5f:b7:ec:9b:2c:96:84:9b:3a:
f3:38:46:64:e0:ca:09:2a:89:70:e4:1e:a7:32:f2:cb:2f:62:
dd:61:69:d0:cb:fa:94:d2:10:53:2f:f7:38:11:74:41:3b:b8:
3e:99:c7:62:dd:a5:e8:10:96:35:60:db:dd:da:21:6e:c7:74:
54:28:2a:52:d1:78:20:f1:e5:9b:3f:7e:3c:a1:76:8a:f7:a7:
74:f0:b2:3c:75:88:33:52:93:13:e6:6e:43:a9:19:78:da:fa:
1a:2c:83:e8:4e:77:49:f2:c2:c7:fa:d4:5f:fc:32:fd:39:cb:
f7:d6:49:1c:a3:bd:fd:c5:7c:62:2d:af:e3:0b:29:0c:60:e3:
75:4f:3c:5b:5e:03:db:61:38:dd:1d:c6:bd:84:6d:5f:36:0e:
43:49:4f:7b:4e:b9:b0:92:44:d1:8c:d7:ed:ef:85:2e:03:82:
a0:93:39:62:7d:b8:44:83:e8:d4:71:79:7a:58:fd:90:f2:9c:
16:73:b6:69:9d:7f:c1:f9:3a:12:d1:b2:69:79:cf:b5:53:41:
ed:66:96:db:ed:d2:24:ac:a1:67:d5:fb:88:c3:e3:87:b8:f3:
4b:8b:2e:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAK6BWLz1jfHiv8dJZ/3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwMTAxMTIzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTJjOTRkNDI3YWI1MzAyZmQ2ZTc2NzBkZmY3MmI1MzM4NTgwNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+TuEFpmjka3QNb0i90Rr0dHnM4Y
2xzUYrGCkTf5aFytAyreoh6eMx3Mu0Cj652KhBU5TeVll86+RN3yoI7DuPcgUUWT
nhi3P5ZOgIB9YIjK7hKtiywn2504Pn6Hw7S5PUu49n6M96imhoO0CIZ629gZCuvv
8BSNHyhl9xlqg0ducF33+Hk29z/0qkV2wUMsFdjXAvtxe9NRZV6TCi2CgRIi2+ve
pV+UKrnphnqcgRcl3CHUHWof1hc7TCeHt37kVTsm5SVRuHceD7ZnQ+w4tRxu9HLE
Wfn1NzfeYf2SdHsRSHj1NGS0t3JpxfYOULf63qUY4rjvALiuqiVCvTeVqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCoslNQnq1MC/W52cN/3K1M4WAXCMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvS2l5VTFDZXJVd0w5Ym5adzNfY3JVemhZQmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYRQMA0G
CSqGSIb3DQEBCwUAA4IBAQBDzISOx/X+5tNSblMRfIaiRqvI9i/JDB7uVtNft+yb
LJaEmzrzOEZk4MoJKolw5B6nMvLLL2LdYWnQy/qU0hBTL/c4EXRBO7g+mcdi3aXo
EJY1YNvd2iFux3RUKCpS0Xgg8eWbP348oXaK96d08LI8dYgzUpMT5m5DqRl42voa
LIPoTndJ8sLH+tRf/DL9Ocv31kkco739xXxiLa/jCykMYON1TzxbXgPbYTjdHca9
hG1fNg5DSU97TrmwkkTRjNft74UuA4KgkzlifbhEg+jUcXl6WP2Q8pwWc7ZpnX/B
+ToS0bJpec+1U0HtZpbb7dIkrKFn1fuIw+OHuPNLiy7M
-----END CERTIFICATE-----
Generated at Sun May 5 00:26:58 2024 by rpki-client on console-ams.rpki-client.org