Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SBk61j-a2tvXzPIpblrVLwBLpTs.roa
File: SBk61j-a2tvXzPIpblrVLwBLpTs.roa (raw, json)
Hash identifier: 4U/fXof/QLXWyv2OPXmA/D83VYD3E8U+hutj0DwkGiI=
Subject key identifier: 48:19:3A:D6:3F:9A:DA:DB:D7:CC:F2:29:6E:5A:D5:2F:00:4B:A5:3B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D796C462E6D8E64874F30139FCF30822E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SBk61j-a2tvXzPIpblrVLwBLpTs.roa
Signing time: Mon 05 Feb 2024 13:19:15 +0000
ROA not before: Mon 05 Feb 2024 13:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39134
IP address blocks: 45.133.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:6c:46:2e:6d:8e:64:87:4f:30:13:9f:cf:30:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 5 13:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48193ad63f9adadbd7ccf2296e5ad52f004ba53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:a0:b4:cc:e6:c5:a1:31:3a:d5:c9:f6:89:
89:a5:13:cc:1b:10:79:05:01:2d:12:f5:69:a1:22:
c5:7b:01:6d:52:6f:6a:52:82:a1:51:7f:a2:4a:06:
bb:c0:07:18:96:8d:f6:4d:59:63:03:bf:59:80:9a:
40:39:db:5e:c4:b5:d3:c1:68:0c:1a:0b:05:30:cc:
5c:fd:6c:7c:5d:da:52:cd:aa:a4:89:87:6b:1e:37:
f1:45:27:85:a1:e2:d5:b4:08:8a:41:26:a1:a3:51:
d2:f6:a0:e5:2f:d0:32:e9:7e:b0:9c:02:43:2b:0e:
66:38:ea:d5:34:2e:d8:5e:4c:77:8a:a7:ae:40:53:
70:e2:83:d0:3f:66:ba:c4:22:84:39:bc:8b:b1:04:
2e:cd:5e:fa:cd:84:51:3d:24:02:05:41:ef:55:c4:
58:aa:ac:a8:4d:40:e7:96:53:f6:a2:13:99:40:4f:
63:1c:cc:23:09:96:b2:91:a0:0d:86:7b:d3:c5:aa:
76:80:b2:5c:5b:54:1e:d1:82:81:57:09:bd:9d:dc:
8a:bf:9b:d7:f3:be:ba:83:fd:50:81:d1:3b:95:94:
bf:b2:23:34:77:25:30:9f:c8:d2:5e:89:fd:e3:09:
63:25:51:e0:0b:e1:5f:1c:b9:cf:f1:b0:7e:87:90:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:19:3A:D6:3F:9A:DA:DB:D7:CC:F2:29:6E:5A:D5:2F:00:4B:A5:3B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/SBk61j-a2tvXzPIpblrVLwBLpTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.234.0/24
Signature Algorithm: sha256WithRSAEncryption
19:81:0f:1a:0e:77:de:ad:54:80:4d:fd:4e:e5:36:1f:3c:31:
06:83:74:b4:36:ad:35:78:61:13:2d:4f:af:8d:83:9d:17:34:
fd:f4:44:50:f1:d7:0a:e9:2b:17:47:2e:1f:c8:7b:e4:ef:40:
10:82:9e:6e:af:07:6e:da:72:35:35:6c:d7:c2:bc:e3:ea:6c:
1d:63:26:be:1b:0d:d6:84:e7:2b:92:f9:e9:a6:73:bc:01:66:
66:d5:a5:6b:99:9e:41:9e:ca:f1:df:2d:62:39:d0:55:7c:e7:
30:ae:2b:05:9b:30:da:a3:71:26:2f:94:fd:04:b4:01:07:01:
b4:15:54:ab:a6:cf:4c:91:74:d2:b6:65:f6:69:87:8a:99:60:
ab:e7:f1:50:85:34:aa:b9:8f:9d:df:f0:f3:38:a9:aa:59:6d:
9f:22:27:5e:10:30:99:7c:44:ef:a2:13:d5:6c:7d:75:c0:e4:
f0:71:1c:a7:48:1b:e9:35:a2:9d:f2:e7:a7:52:b8:69:f1:5d:
e1:a2:49:35:c9:c8:9b:1e:e7:ba:f5:de:0e:1e:06:ce:0d:49:
cb:fb:4c:d6:ad:cf:1e:03:c8:d8:91:84:eb:fa:10:90:64:ba:
cd:53:cc:e0:a8:dc:7f:69:32:d1:f5:8a:af:cb:4d:81:0b:23:
92:95:3f:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY15bEYubY5kh08wE5/PMIIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwMjA1MTMxOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODE5M2FkNjNmOWFkYWRiZDdjY2YyMjk2ZTVhZDUyZjAwNGJhNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6gtMzmxaExOtXJ9omJpRPMGxB5
BQEtEvVpoSLFewFtUm9qUoKhUX+iSga7wAcYlo32TVljA79ZgJpAOdtexLXTwWgM
GgsFMMxc/Wx8XdpSzaqkiYdrHjfxRSeFoeLVtAiKQSaho1HS9qDlL9Ay6X6wnAJD
Kw5mOOrVNC7YXkx3iqeuQFNw4oPQP2a6xCKEObyLsQQuzV76zYRRPSQCBUHvVcRY
qqyoTUDnllP2ohOZQE9jHMwjCZaykaANhnvTxap2gLJcW1Qe0YKBVwm9ndyKv5vX
8766g/1QgdE7lZS/siM0dyUwn8jSXon94wljJVHgC+FfHLnP8bB+h5CadQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgZOtY/mtrb18zyKW5a1S8AS6U7MB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvU0JrNjFqLWEydHZYelBJcGJsclZMd0JMcFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYXqMA0G
CSqGSIb3DQEBCwUAA4IBAQAZgQ8aDnferVSATf1O5TYfPDEGg3S0Nq01eGETLU+v
jYOdFzT99ERQ8dcK6SsXRy4fyHvk70AQgp5urwdu2nI1NWzXwrzj6mwdYya+Gw3W
hOcrkvnppnO8AWZm1aVrmZ5Bnsrx3y1iOdBVfOcwrisFmzDao3EmL5T9BLQBBwG0
FVSrps9MkXTStmX2aYeKmWCr5/FQhTSquY+d3/DzOKmqWW2fIideEDCZfETvohPV
bH11wOTwcRynSBvpNaKd8uenUrhp8V3hokk1ycibHue69d4OHgbODUnL+0zWrc8e
A8jYkYTr+hCQZLrNU8zgqNx/aTLR9Yqvy02BCyOSlT+9
-----END CERTIFICATE-----
Generated at Sun May 19 19:45:33 2024 by rpki-client on console-fra.rpki-client.org