Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Hi4RxXLolnYcAuMjIM6p_W-95rs.roa
File: Hi4RxXLolnYcAuMjIM6p_W-95rs.roa (raw, json)
Hash identifier: acN5CU3NRsklJYfssd/v8V35FxCS8foSqVGwSPBorx4=
Subject key identifier: 1E:2E:11:C5:72:E8:96:76:1C:02:E3:23:20:CE:A9:FD:6F:BD:E6:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802933FB7871DAC0FEAB09318EFD519
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Hi4RxXLolnYcAuMjIM6p_W-95rs.roa
Signing time: Tue 02 Jan 2024 02:31:00 +0000
ROA not before: Tue 02 Jan 2024 02:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211266
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:93:3f:b7:87:1d:ac:0f:ea:b0:93:18:ef:d5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e2e11c572e896761c02e32320cea9fd6fbde6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:d7:52:0f:6c:9f:f7:f1:02:51:c5:59:6b:
70:1a:2f:d4:56:2b:6d:af:96:10:1e:fc:3d:4a:fc:
29:de:4c:13:77:18:24:0d:9d:f3:06:25:b9:b2:92:
a9:5d:e9:5e:12:c3:60:2b:03:24:f4:4f:a0:02:ea:
2c:53:ef:13:f4:53:43:42:0c:44:4b:9c:eb:f6:c3:
dc:b5:53:a2:47:cb:5a:a5:ff:cf:54:5d:36:22:2f:
ef:4a:c0:8c:ae:ce:64:ef:e5:8a:b4:a6:41:6c:88:
c1:ee:63:25:a1:47:19:b3:06:45:99:b3:a9:7a:db:
c3:ae:57:fb:c3:d5:70:db:ba:44:ce:47:30:59:40:
5f:00:1f:a2:8b:86:4f:0c:ac:8b:69:a4:39:26:ba:
ca:bb:0d:24:82:a6:49:3f:5a:f2:c0:d8:d2:05:9f:
ac:a4:16:a2:1d:32:8e:a8:d3:c1:f4:69:31:fd:40:
30:b8:55:a2:e9:05:bb:d4:89:c0:88:22:48:f1:bc:
04:2f:b8:e3:48:4d:30:99:99:1d:5a:f6:3b:0c:8c:
b5:a0:aa:18:9e:e4:b7:f6:d9:aa:e5:1d:2b:00:f7:
64:10:59:70:08:90:d4:21:f8:a4:13:d6:78:56:7d:
59:62:a8:0b:26:dc:a4:08:eb:bd:8c:14:52:1a:55:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:11:C5:72:E8:96:76:1C:02:E3:23:20:CE:A9:FD:6F:BD:E6:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Hi4RxXLolnYcAuMjIM6p_W-95rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:80:e9:af:08:4d:5d:ab:44:35:cd:9e:72:c0:94:e1:d6:9b:
fb:b5:83:ec:92:99:db:d7:54:76:de:81:56:43:af:9a:6c:14:
77:b2:94:2c:1c:c8:03:5b:6c:7c:eb:ae:c0:a1:70:b9:77:a8:
cb:c8:49:6a:11:cb:a5:fa:50:8e:44:88:8e:ee:01:ab:5b:26:
32:e0:7a:98:d1:71:9d:da:03:69:d5:83:85:2d:27:76:4c:8f:
2b:6f:13:4f:85:a4:17:72:75:f5:e7:34:44:6a:f9:b3:bc:14:
41:04:15:56:a6:3f:29:ac:be:62:dc:34:da:d3:a5:79:0a:ca:
cb:7a:69:8b:af:f3:38:d1:62:e4:44:cd:02:40:92:37:66:51:
de:1e:68:5b:51:cf:ad:51:e0:28:bf:7c:5f:13:47:6a:de:ac:
b9:f1:00:dd:f2:aa:57:99:6d:21:86:20:0e:22:9b:3b:7b:73:
b4:1f:ea:be:f3:f7:14:9b:88:9f:7a:d3:ed:c6:8a:b0:4b:c0:
90:cf:f5:37:28:b3:6d:26:62:be:5c:48:02:1c:43:73:f4:b9:
b7:9d:d1:8d:24:7c:f7:7b:c3:e4:8d:17:db:c4:ab:6f:63:2e:
b9:c1:c6:11:55:9a:02:80:3f:8d:cb:2a:6f:6f:3a:e8:8c:06:
d4:ff:6a:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIApM/t4cdrA/qsJMY79UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTJlMTFjNTcyZTg5Njc2MWMwMmUzMjMyMGNlYTlmZDZmYmRlNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDPXUg9sn/fxAlHFWWtwGi/UVitt
r5YQHvw9Svwp3kwTdxgkDZ3zBiW5spKpXeleEsNgKwMk9E+gAuosU+8T9FNDQgxE
S5zr9sPctVOiR8tapf/PVF02Ii/vSsCMrs5k7+WKtKZBbIjB7mMloUcZswZFmbOp
etvDrlf7w9Vw27pEzkcwWUBfAB+ii4ZPDKyLaaQ5JrrKuw0kgqZJP1rywNjSBZ+s
pBaiHTKOqNPB9Gkx/UAwuFWi6QW71InAiCJI8bwEL7jjSE0wmZkdWvY7DIy1oKoY
nuS39tmq5R0rAPdkEFlwCJDUIfikE9Z4Vn1ZYqgLJtykCOu9jBRSGlW1wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4uEcVy6JZ2HALjIyDOqf1vvea7MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSGk0UnhYTG9sblljQXVNaklNNnBfVy05NXJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgWMA0G
CSqGSIb3DQEBCwUAA4IBAQBtgOmvCE1dq0Q1zZ5ywJTh1pv7tYPskpnb11R23oFW
Q6+abBR3spQsHMgDW2x8667AoXC5d6jLyElqEcul+lCORIiO7gGrWyYy4HqY0XGd
2gNp1YOFLSd2TI8rbxNPhaQXcnX15zREavmzvBRBBBVWpj8prL5i3DTa06V5CsrL
emmLr/M40WLkRM0CQJI3ZlHeHmhbUc+tUeAov3xfE0dq3qy58QDd8qpXmW0hhiAO
Ips7e3O0H+q+8/cUm4ifetPtxoqwS8CQz/U3KLNtJmK+XEgCHENz9Lm3ndGNJHz3
e8PkjRfbxKtvYy65wcYRVZoCgD+NyypvbzrojAbU/2ov
-----END CERTIFICATE-----
Generated at Sat May 4 18:43:58 2024 by rpki-client on console-ams.rpki-client.org