Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/RkbZG4lDoNdDkvXvJqsa9cK-_i0.roa
File: RkbZG4lDoNdDkvXvJqsa9cK-_i0.roa (raw, json)
Hash identifier: cfgU7k8XSxLWXOUwKPDq44MLV1gMFRHFYmWIUVH2Th4=
Subject key identifier: 46:46:D9:1B:89:43:A0:D7:43:92:F5:EF:26:AB:1A:F5:C2:BE:FE:2D
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 018CC3B736B8591CF45C86D4A3104DD87601
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/RkbZG4lDoNdDkvXvJqsa9cK-_i0.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41731
IP address blocks: 45.91.60.0/22 maxlen: 22
2001:678:4c8::/48 maxlen: 48
2a0e:bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:36:b8:59:1c:f4:5c:86:d4:a3:10:4d:d8:76:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4646d91b8943a0d74392f5ef26ab1af5c2befe2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:7b:9a:74:d5:a1:48:8e:56:98:78:36:46:
16:5d:21:fb:70:71:3e:3c:89:17:23:d1:c9:eb:08:
c3:af:26:1f:3f:62:24:33:e2:7f:04:d1:af:0e:55:
16:f4:ee:39:cf:56:cf:3b:de:24:fb:2e:94:f5:08:
f6:bc:4f:3d:b4:85:4a:38:a3:0c:7e:a6:16:c8:e3:
fb:35:92:e8:31:ce:d6:10:5a:c7:a7:87:16:bb:c8:
e6:76:f9:f0:9a:d0:41:1f:d7:76:ab:ff:e1:70:74:
97:e5:2f:f1:9e:e9:01:ed:c8:35:67:67:f6:93:cb:
d7:44:f8:35:ec:9b:79:83:88:1b:8f:7f:92:05:96:
e2:d1:a5:56:5b:a4:da:c2:64:0a:a6:ac:05:e0:ad:
17:92:1b:23:0b:f3:93:8b:5d:08:e3:3f:36:78:06:
5c:6d:aa:f8:6e:69:24:84:70:10:cb:37:35:32:9a:
c9:10:c6:56:f5:b9:be:b9:3b:94:f3:43:da:c9:85:
ac:ba:99:27:3c:f3:59:d8:d7:2b:19:6d:cc:cf:67:
cd:71:a1:90:9d:1a:dc:79:23:28:5d:1c:d7:64:c1:
7a:aa:08:8b:af:2c:db:4f:12:d3:fd:de:d7:2e:0d:
68:7b:4f:27:a4:ee:1a:c0:39:54:7c:78:8c:8d:6f:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:D9:1B:89:43:A0:D7:43:92:F5:EF:26:AB:1A:F5:C2:BE:FE:2D
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/RkbZG4lDoNdDkvXvJqsa9cK-_i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.60.0/22
IPv6:
2001:678:4c8::/48
2a0e:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:3b:26:37:37:f6:7f:1a:0d:47:46:37:e9:07:43:42:a3:a8:
bb:77:7f:a3:e5:c8:00:eb:9f:41:8c:17:45:83:f0:ed:f5:a0:
c0:fc:c5:7d:a6:7a:27:b8:5c:4e:e2:ea:af:33:0a:e6:e4:68:
f1:ca:fc:22:ae:9f:0c:c4:56:65:7f:11:bb:9b:91:4b:02:14:
ec:5b:e3:60:bd:ec:1f:a3:f0:6b:8e:cf:46:44:00:9a:ca:bc:
e8:ad:ef:f8:9a:05:bf:1a:4b:86:4b:5d:53:95:2a:1a:d3:21:
8b:25:c6:2a:59:1b:59:2a:90:79:3d:35:19:59:b5:d8:c0:4d:
8e:e2:4c:cd:ad:5f:da:b6:61:d9:0e:f4:80:44:c3:92:9c:c5:
2e:67:29:35:ab:5f:e4:d2:31:1d:77:21:7f:4a:29:02:d4:7d:
cd:84:55:77:69:45:80:ee:79:49:fc:0f:dd:37:ad:e9:b5:bc:
58:4d:56:16:fd:f8:c6:d8:d5:5f:85:fa:66:ef:29:ee:0a:5e:
5c:65:e5:ec:a4:08:ea:b1:3f:bc:1f:c7:3c:f7:2b:b6:ba:27:
c0:3f:95:f6:69:e6:7b:b3:5a:19:8e:01:37:36:b7:4e:1e:fa:
44:2f:c0:a6:08:19:e1:83:e7:f2:cf:64:69:ef:a2:5d:df:02:
0e:c2:3f:79
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzDtza4WRz0XIbUoxBN2HYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NWMxYjdkOWYwNGM3ZjA0MzI3ZTZjNDQ2NDE2ZTJmOGMz
MWQ1N2QwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQ2ZDkxYjg5NDNhMGQ3NDM5MmY1ZWYyNmFiMWFmNWMyYmVmZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEt7mnTVoUiOVph4NkYWXSH7cHE+
PIkXI9HJ6wjDryYfP2IkM+J/BNGvDlUW9O45z1bPO94k+y6U9Qj2vE89tIVKOKMM
fqYWyOP7NZLoMc7WEFrHp4cWu8jmdvnwmtBBH9d2q//hcHSX5S/xnukB7cg1Z2f2
k8vXRPg17Jt5g4gbj3+SBZbi0aVWW6TawmQKpqwF4K0XkhsjC/OTi10I4z82eAZc
bar4bmkkhHAQyzc1MprJEMZW9bm+uTuU80PayYWsupknPPNZ2NcrGW3Mz2fNcaGQ
nRrceSMoXRzXZMF6qgiLryzbTxLT/d7XLg1oe08npO4awDlUfHiMjW+OTQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEZG2RuJQ6DXQ5L17yarGvXCvv4tMB8GA1UdIwQY
MBaAFNZcG32fBMfwQyfmxEZBbi+MMdV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYt
MTEwZWE4NTg1MzU0LzEvUmtiWkc0bERvTmREa3ZYdkpxc2E5Y0stX2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NmQwNzItZDEyOS00MmJlLWE3NWYtMTEwZWE4NTg1MzU0
LzEvMWx3YmZaOEV4X0JESi1iRVJrRnVMNHd4MVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCLVs8MBYE
AgACMBADBwAgAQZ4BMgDBQMqDgvAMA0GCSqGSIb3DQEBCwUAA4IBAQA3OyY3N/Z/
Gg1HRjfpB0NCo6i7d3+j5cgA659BjBdFg/Dt9aDA/MV9pnonuFxO4uqvMwrm5Gjx
yvwirp8MxFZlfxG7m5FLAhTsW+Ngvewfo/Brjs9GRACayrzore/4mgW/GkuGS11T
lSoa0yGLJcYqWRtZKpB5PTUZWbXYwE2O4kzNrV/atmHZDvSARMOSnMUuZyk1q1/k
0jEddyF/SikC1H3NhFV3aUWA7nlJ/A/dN63ptbxYTVYW/fjG2NVfhfpm7ynuCl5c
ZeXspAjqsT+8H8c89yu2uifAP5X2aeZ7s1oZjgE3NrdOHvpEL8CmCBnhg+fyz2Rp
76Jd3wIOwj95
-----END CERTIFICATE-----
Generated at Sat Jun 29 01:57:14 2024 by rpki-client on console-ams.rpki-client.org