Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/izJG9GyIWGEt_SH_UE8PmIUb-F8.roa
File: izJG9GyIWGEt_SH_UE8PmIUb-F8.roa (raw, json)
Hash identifier: bbU2qGjERVpUdc9MO39MaDKO8oo597xy7z0/N8WUkm0=
Subject key identifier: 8B:32:46:F4:6C:88:58:61:2D:FD:21:FF:50:4F:0F:98:85:1B:F8:5F
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 018CC50057D6694E117E2651185AB18189D9
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/izJG9GyIWGEt_SH_UE8PmIUb-F8.roa
Signing time: Mon 01 Jan 2024 12:29:43 +0000
ROA not before: Mon 01 Jan 2024 12:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211732
IP address blocks: 45.157.148.0/24 maxlen: 24
45.157.148.0/23 maxlen: 23
45.157.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:57:d6:69:4e:11:7e:26:51:18:5a:b1:81:89:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jan 1 12:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b3246f46c8858612dfd21ff504f0f98851bf85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:84:6c:75:a6:e0:cc:e1:42:f0:67:42:91:
04:71:05:f6:47:24:39:5d:58:18:d6:c0:78:27:9b:
f8:e3:f2:00:85:a7:7b:25:94:ae:d1:10:50:9d:19:
e9:61:47:03:39:ff:2a:c0:ce:e0:05:25:d2:d0:ca:
34:e9:c0:b3:22:78:b4:02:b6:4e:cc:91:28:02:53:
52:77:8a:7c:81:da:dc:6e:07:39:39:87:46:b1:7e:
f0:aa:2b:42:f5:b8:ce:b4:85:3f:10:fc:cf:ac:5c:
6f:29:a3:96:c7:02:e4:20:03:4e:e6:43:fd:3a:1b:
12:d8:77:ce:9e:46:c9:02:13:3a:35:5d:a7:47:70:
6c:57:08:6e:92:a0:6e:c9:d8:bf:07:d4:08:14:9c:
0d:1f:ec:32:07:aa:7f:81:86:5d:38:66:57:a0:41:
11:9c:70:b2:16:15:7c:88:2e:18:02:67:fd:f9:bd:
2c:2a:8c:1d:98:c1:e6:14:c0:46:1c:39:dc:9f:6f:
fb:61:96:a1:c3:fa:0b:75:3a:d6:a3:40:d2:cc:f6:
6f:c3:23:e3:7f:3b:ea:03:7e:ed:d2:33:82:3f:96:
25:cf:7f:16:92:06:fe:d5:d1:98:26:c8:fb:f7:6f:
a0:a1:51:3d:99:a7:c3:d8:70:1f:72:08:30:60:92:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:46:F4:6C:88:58:61:2D:FD:21:FF:50:4F:0F:98:85:1B:F8:5F
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/izJG9GyIWGEt_SH_UE8PmIUb-F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.148.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:5b:e5:5c:4c:ec:a0:cc:52:10:0d:bc:dd:5b:6e:16:bc:21:
b5:8a:ac:b1:e9:aa:07:9e:73:d7:5e:3e:c5:6b:5c:d6:e0:e5:
00:dd:26:ee:0e:ef:9a:94:e5:53:cc:6a:05:64:22:8f:8d:94:
7e:25:3e:98:a3:9e:98:d0:f1:80:94:75:21:23:55:23:e9:02:
8a:8b:55:01:1f:61:18:03:63:a4:8c:d2:b4:bd:bc:52:b3:60:
ea:b6:bd:8e:2f:96:28:67:ea:e9:2d:93:5a:a2:44:a7:2c:a5:
1e:33:18:6d:62:3d:85:3b:63:1c:21:a0:5b:06:a3:e3:2a:04:
ae:e6:b0:2e:2e:50:71:1c:43:56:e4:97:e6:d1:65:6b:5e:58:
c7:24:b6:e9:cb:c3:93:96:d6:36:f3:f7:7a:ab:43:d4:a8:6f:
8b:03:b5:ab:cd:8d:e1:91:91:06:54:26:d2:d6:da:d7:4a:34:
66:67:0c:fe:ae:19:9a:9c:be:06:fb:b9:b4:39:cf:90:f5:82:
1d:e0:bc:29:c8:b6:7f:3f:d6:df:a2:52:4f:cc:02:18:36:5d:
ba:ee:37:95:e7:24:79:a5:ac:57:72:0e:9b:0d:9a:91:40:94:
7b:6b:85:7e:93:9a:c8:6e:7a:82:f5:e6:ce:26:eb:f4:1b:8c:
24:49:33:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAFfWaU4RfiZRGFqxgYnZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGU5Zjc1YzczMjZmNzY1Yzg5NjZjMmVkYzAwYTk4MmE1
ZWE3ZjAwHhcNMjQwMTAxMTIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjMyNDZmNDZjODg1ODYxMmRmZDIxZmY1MDRmMGY5ODg1MWJmODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTWEbHWm4MzhQvBnQpEEcQX2RyQ5
XVgY1sB4J5v44/IAhad7JZSu0RBQnRnpYUcDOf8qwM7gBSXS0Mo06cCzIni0ArZO
zJEoAlNSd4p8gdrcbgc5OYdGsX7wqitC9bjOtIU/EPzPrFxvKaOWxwLkIANO5kP9
OhsS2HfOnkbJAhM6NV2nR3BsVwhukqBuydi/B9QIFJwNH+wyB6p/gYZdOGZXoEER
nHCyFhV8iC4YAmf9+b0sKowdmMHmFMBGHDncn2/7YZahw/oLdTrWo0DSzPZvwyPj
fzvqA37t0jOCP5Ylz38Wkgb+1dGYJsj792+goVE9mafD2HAfcggwYJKBuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsyRvRsiFhhLf0h/1BPD5iFG/hfMB8GA1UdIwQY
MBaAFCNOn3XHMm92XIlmwu3ACpgqXqfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQt
NzdkZWUyZDc5YWU0LzEvaXpKRzlHeUlXR0V0X1NIX1VFOFBtSVViLUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82MzVhMGQtOTIxZi00NzExLWI3ZDQtNzdkZWUyZDc5YWU0
LzEvSTA2ZmRjY3liM1pjaVdiQzdjQUttQ3BlcF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ2UMA0G
CSqGSIb3DQEBCwUAA4IBAQCyW+VcTOygzFIQDbzdW24WvCG1iqyx6aoHnnPXXj7F
a1zW4OUA3SbuDu+alOVTzGoFZCKPjZR+JT6Yo56Y0PGAlHUhI1Uj6QKKi1UBH2EY
A2OkjNK0vbxSs2Dqtr2OL5YoZ+rpLZNaokSnLKUeMxhtYj2FO2McIaBbBqPjKgSu
5rAuLlBxHENW5Jfm0WVrXljHJLbpy8OTltY28/d6q0PUqG+LA7WrzY3hkZEGVCbS
1trXSjRmZwz+rhmanL4G+7m0Oc+Q9YId4LwpyLZ/P9bfolJPzAIYNl267jeV5yR5
paxXcg6bDZqRQJR7a4V+k5rIbnqC9ebOJuv0G4wkSTOC
-----END CERTIFICATE-----
Generated at Sun May 19 15:36:24 2024 by rpki-client on console-ams.rpki-client.org