Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/xkZpH4BGEouWAdy-TYgg7XXr23g.roa
File: xkZpH4BGEouWAdy-TYgg7XXr23g.roa (raw, json)
Hash identifier: RsJyso//P0Kv1QvwUW/fWOWIUK++aD5oLT7elFV+Jbk=
Subject key identifier: C6:46:69:1F:80:46:12:8B:96:01:DC:BE:4D:88:20:ED:75:EB:DB:78
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 018CC8DCFC550C6030343797853AD3F4D980
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/xkZpH4BGEouWAdy-TYgg7XXr23g.roa
Signing time: Tue 02 Jan 2024 06:29:34 +0000
ROA not before: Tue 02 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.13.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:fc:55:0c:60:30:34:37:97:85:3a:d3:f4:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jan 2 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c646691f8046128b9601dcbe4d8820ed75ebdb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:e9:dc:e5:df:e9:5c:90:37:71:39:c0:03:
a1:4f:b2:76:15:c8:6b:d5:69:09:c9:9e:56:64:44:
26:78:86:a3:75:62:82:e2:fe:57:a6:63:13:43:6c:
99:41:ff:6b:25:aa:95:b7:bf:f1:a7:37:ef:a3:fa:
9e:d5:03:f4:fe:63:5b:a3:5f:ed:53:14:ab:ec:4c:
9c:af:43:4f:4c:2f:71:96:5a:f3:9d:8e:ec:91:7f:
66:5f:1c:63:b8:f1:c0:7d:4e:6d:dc:2a:61:9e:6e:
79:67:f1:2e:29:a7:f9:90:b0:7a:9b:0c:ea:be:33:
61:3a:4a:1a:1c:16:d9:77:33:0f:65:8d:8b:12:42:
31:fe:17:f6:61:b3:d0:18:26:3d:cd:f5:29:7a:69:
75:c8:b9:c1:fb:f7:6d:44:e8:10:a6:7d:50:59:29:
ed:a5:d6:e9:f1:26:5c:f2:b5:d5:54:c9:e4:7b:e6:
2a:99:e0:55:da:a0:ef:73:1d:94:33:ac:0c:b5:e9:
2d:b3:80:49:3d:3e:59:7c:77:c7:d7:42:15:3e:35:
e8:f1:cd:2d:75:34:03:a0:cf:b8:88:bc:ec:56:ac:
b8:ea:12:ad:23:48:6f:e4:6e:a6:72:5e:59:38:b1:
2b:dd:3b:dd:99:ab:03:74:78:4c:34:87:74:1b:e9:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:69:1F:80:46:12:8B:96:01:DC:BE:4D:88:20:ED:75:EB:DB:78
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/xkZpH4BGEouWAdy-TYgg7XXr23g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:63:1a:a0:a5:4a:32:b3:d1:26:cb:19:37:e5:7b:aa:2d:90:
a8:29:a7:1d:b7:89:fc:49:f6:6a:1e:8e:98:76:a3:b7:1c:8c:
74:21:6b:b2:91:e6:a7:2c:03:55:15:b8:47:1c:9d:aa:21:ed:
36:88:fb:92:3c:37:4c:61:84:22:80:f7:f4:5f:8b:fb:22:79:
50:ec:13:87:d7:6d:bc:a0:e3:1a:1a:89:4c:ca:b7:b8:71:d5:
9c:d0:6f:87:28:cf:02:c2:17:6a:b6:ba:44:28:61:df:69:a2:
fa:37:34:a4:37:ef:5f:08:dc:1c:5b:4a:cd:aa:0e:2e:fb:03:
7a:d9:be:11:32:eb:90:40:ee:cc:f2:a0:64:56:5c:39:3c:0f:
86:fa:78:68:af:c7:46:ba:2d:ed:ff:83:59:a8:1e:45:52:67:
c9:8c:fb:3a:a4:b7:13:0c:40:8e:ef:49:2a:8a:64:4a:ee:90:
ff:9f:72:ac:29:7d:23:41:d5:05:76:15:d9:b1:45:cd:9d:23:
e1:a0:18:28:b4:42:f2:85:02:a4:4b:1a:28:35:43:18:55:73:
3e:a8:22:7c:ed:60:0a:01:72:ae:68:c1:c2:86:19:bd:ad:d9:
b3:f5:54:71:7d:a1:8a:38:b2:0b:b0:34:ce:81:28:f9:39:5d:
7c:c1:46:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3PxVDGAwNDeXhTrT9NmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz
N2EwYzYwHhcNMjQwMTAyMDYyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjQ2NjkxZjgwNDYxMjhiOTYwMWRjYmU0ZDg4MjBlZDc1ZWJkYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0/p3OXf6VyQN3E5wAOhT7J2Fchr
1WkJyZ5WZEQmeIajdWKC4v5XpmMTQ2yZQf9rJaqVt7/xpzfvo/qe1QP0/mNbo1/t
UxSr7Eycr0NPTC9xllrznY7skX9mXxxjuPHAfU5t3Cphnm55Z/EuKaf5kLB6mwzq
vjNhOkoaHBbZdzMPZY2LEkIx/hf2YbPQGCY9zfUpeml1yLnB+/dtROgQpn1QWSnt
pdbp8SZc8rXVVMnke+YqmeBV2qDvcx2UM6wMtekts4BJPT5ZfHfH10IVPjXo8c0t
dTQDoM+4iLzsVqy46hKtI0hv5G6mcl5ZOLEr3TvdmasDdHhMNId0G+nkdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZGaR+ARhKLlgHcvk2IIO1169t4MB8GA1UdIwQY
MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt
OGI0NzkzZjkwZjE1LzEveGtacEg0QkdFb3VXQWR5LVRZZ2c3WFhyMjNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1
LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1kMA0G
CSqGSIb3DQEBCwUAA4IBAQCjYxqgpUoys9Emyxk35XuqLZCoKacdt4n8SfZqHo6Y
dqO3HIx0IWuykeanLANVFbhHHJ2qIe02iPuSPDdMYYQigPf0X4v7InlQ7BOH1228
oOMaGolMyre4cdWc0G+HKM8CwhdqtrpEKGHfaaL6NzSkN+9fCNwcW0rNqg4u+wN6
2b4RMuuQQO7M8qBkVlw5PA+G+nhor8dGui3t/4NZqB5FUmfJjPs6pLcTDECO70kq
imRK7pD/n3KsKX0jQdUFdhXZsUXNnSPhoBgotELyhQKkSxooNUMYVXM+qCJ87WAK
AXKuaMHChhm9rdmz9VRxfaGKOLILsDTOgSj5OV18wUYQ
-----END CERTIFICATE-----
Generated at Thu May 2 18:28:10 2024 by rpki-client on console-ams.rpki-client.org