Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jxLCGdKpPClevl-sGZJVd1vD7R8.roa
File: jxLCGdKpPClevl-sGZJVd1vD7R8.roa (raw, json)
Hash identifier: pAPmg5dJmMSYQDzdgiqZQj3FYvebiYBmyAB7yK+XMA4=
Subject key identifier: 8F:12:C2:19:D2:A9:3C:29:5E:BE:5F:AC:19:92:55:77:5B:C3:ED:1F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D78F36D5E0A5F525047DD64B7508E3B93
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jxLCGdKpPClevl-sGZJVd1vD7R8.roa
Signing time: Mon 05 Feb 2024 11:07:15 +0000
ROA not before: Mon 05 Feb 2024 11:07:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 45.135.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:f3:6d:5e:0a:5f:52:50:47:dd:64:b7:50:8e:3b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 5 11:07:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f12c219d2a93c295ebe5fac199255775bc3ed1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:49:44:c3:6a:de:db:d2:4a:87:f7:8a:1f:
8a:b9:64:ef:b9:ba:65:98:9e:36:f5:f4:8e:96:bb:
ba:2a:cb:7a:6f:ff:a5:67:8d:1a:58:96:5e:be:77:
f9:9b:eb:bd:9a:22:cb:a3:c6:1f:9e:da:79:cf:2b:
16:05:18:65:8a:27:62:4c:06:9f:64:ae:fd:f8:37:
f8:13:a8:a0:6b:a9:58:87:c6:8b:5b:48:aa:30:6b:
6e:28:a6:76:f3:25:1c:e2:11:22:1f:b4:d9:29:8c:
74:c2:ab:5d:d5:71:ed:f0:87:5a:46:65:f3:e4:34:
b1:9b:97:92:26:01:56:cb:6a:a8:fb:37:95:c7:64:
a1:d2:95:82:24:24:34:9d:fa:fb:c5:6e:95:5b:68:
86:4d:a3:30:aa:bb:98:8f:5d:80:8b:dc:a6:6a:be:
07:46:16:0f:fe:3c:89:47:e5:b6:63:8f:80:2c:51:
4e:f4:e9:ed:d7:04:15:8e:b6:71:94:16:f8:c5:b5:
fc:27:a5:9c:ea:df:92:8c:69:44:35:a6:3d:83:e4:
7a:37:ce:3c:70:4d:3e:fd:4a:b5:cc:89:92:a0:ce:
41:8b:ef:86:15:45:65:f1:21:a1:20:9f:62:b8:9c:
69:ba:ff:1c:dc:61:fd:69:f6:a7:86:e3:da:2f:25:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:C2:19:D2:A9:3C:29:5E:BE:5F:AC:19:92:55:77:5B:C3:ED:1F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jxLCGdKpPClevl-sGZJVd1vD7R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.235.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ac:ac:05:d0:d0:33:ef:59:93:3a:47:7e:45:54:73:24:3e:
82:87:1e:0a:57:22:80:69:1f:22:f5:54:d3:02:14:96:b4:7f:
95:f7:c4:a7:42:8c:c5:f8:82:69:ca:5f:f5:5d:aa:cb:cb:26:
48:ed:4c:64:05:cb:e7:9e:af:27:ee:ee:37:7b:ba:57:8e:c7:
0c:50:f9:1e:e2:bd:01:76:d4:f8:a5:ba:a2:c1:25:96:e7:51:
0a:6c:90:ba:50:33:f4:18:c1:06:de:3d:d9:60:3c:93:c3:c3:
9c:82:25:fc:9d:d3:4d:21:50:92:01:a4:a3:56:f5:cf:53:7d:
6a:a4:99:27:c5:92:4d:7a:0d:81:ad:d3:97:ca:72:fc:68:6b:
ba:ad:83:f1:5e:d1:df:65:34:8d:b9:ac:a7:5a:18:fc:83:0b:
7a:3e:cc:49:92:f9:4a:5b:ef:1f:be:57:5c:31:ee:98:09:99:
95:76:47:1a:b7:0c:a7:1d:79:4c:d1:37:91:4d:10:a8:f2:ec:
9a:46:c0:9e:97:3f:27:1c:2e:5b:53:eb:1b:42:87:2b:d2:a6:
a8:10:31:90:a5:53:15:28:dc:de:dd:2f:60:be:ae:24:56:e7:
6b:81:05:06:ce:64:66:ef:dd:65:ca:75:f3:a8:bf:f9:c9:a4:
4c:d1:a3:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY14821eCl9SUEfdZLdQjjuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwMjA1MTEwNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjEyYzIxOWQyYTkzYzI5NWViZTVmYWMxOTkyNTU3NzViYzNlZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixVJRMNq3tvSSof3ih+KuWTvubpl
mJ429fSOlru6Kst6b/+lZ40aWJZevnf5m+u9miLLo8Yfntp5zysWBRhliidiTAaf
ZK79+Df4E6iga6lYh8aLW0iqMGtuKKZ28yUc4hEiH7TZKYx0wqtd1XHt8IdaRmXz
5DSxm5eSJgFWy2qo+zeVx2Sh0pWCJCQ0nfr7xW6VW2iGTaMwqruYj12Ai9ymar4H
RhYP/jyJR+W2Y4+ALFFO9Ont1wQVjrZxlBb4xbX8J6Wc6t+SjGlENaY9g+R6N848
cE0+/Uq1zImSoM5Bi++GFUVl8SGhIJ9iuJxpuv8c3GH9afanhuPaLyXXmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8SwhnSqTwpXr5frBmSVXdbw+0fMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvanhMQ0dkS3BQQ2xldmwtc0daSlZkMXZEN1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfrMA0G
CSqGSIb3DQEBCwUAA4IBAQAGrKwF0NAz71mTOkd+RVRzJD6Chx4KVyKAaR8i9VTT
AhSWtH+V98SnQozF+IJpyl/1XarLyyZI7UxkBcvnnq8n7u43e7pXjscMUPke4r0B
dtT4pbqiwSWW51EKbJC6UDP0GMEG3j3ZYDyTw8OcgiX8ndNNIVCSAaSjVvXPU31q
pJknxZJNeg2BrdOXynL8aGu6rYPxXtHfZTSNuaynWhj8gwt6PsxJkvlKW+8fvldc
Me6YCZmVdkcatwynHXlM0TeRTRCo8uyaRsCelz8nHC5bU+sbQocr0qaoEDGQpVMV
KNze3S9gvq4kVudrgQUGzmRm791lynXzqL/5yaRM0aNP
-----END CERTIFICATE-----
Generated at Tue May 7 21:01:17 2024 by rpki-client on console-fra.rpki-client.org