Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa
File: NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa (raw, json)
Hash identifier: WukUTE+nKWHprtk5cf1YfbwbziTk9i1jdIuZyqBuYVI=
Subject key identifier: 36:44:07:9D:77:C1:A5:47:37:0C:CB:96:DB:D4:7E:A8:B0:4A:C0:64
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC8015AA866AC9C11C6876D52CD8B32BE
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa
Signing time: Tue 02 Jan 2024 02:29:41 +0000
ROA not before: Tue 02 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140224
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/23 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.155.222.0/23 maxlen: 24
45.140.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5a:a8:66:ac:9c:11:c6:87:6d:52:cd:8b:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3644079d77c1a547370ccb96dbd47ea8b04ac064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:73:4a:0c:9e:f2:fe:09:2d:f1:3a:6e:19:
b7:d7:ee:21:45:31:b0:32:5c:b6:86:db:c7:bc:eb:
ed:23:cb:4b:0f:cf:ee:4d:57:bb:88:df:1b:de:64:
fa:d7:86:d2:5c:52:30:d2:72:b6:46:d4:2a:a1:33:
28:b9:5e:32:99:76:c4:8d:e7:62:43:e3:9c:86:10:
4c:65:7c:9a:71:36:bb:ed:10:22:53:fc:67:3d:30:
56:fb:90:87:c1:c5:78:f0:d6:76:f6:63:0b:ea:d2:
03:49:e0:b6:ec:16:68:00:17:2c:93:bd:10:75:dc:
bd:05:79:5f:bf:43:61:96:29:41:1a:56:7e:1b:21:
f5:51:d5:84:53:27:34:33:2e:95:07:11:ea:cc:09:
1e:ae:e9:46:70:ef:10:62:14:28:b6:90:bb:05:b7:
0a:1b:be:c0:87:a2:d7:cf:26:be:11:87:cd:93:d2:
d0:3a:89:7a:ac:0b:9c:f5:d3:d2:da:82:55:f6:e2:
68:1f:83:e4:47:78:cf:cc:53:d0:54:d9:d4:8f:fc:
b2:27:79:54:b9:5e:29:0e:9d:8f:fb:dc:dd:31:83:
cf:f7:aa:0f:b1:40:03:d4:e0:5c:86:49:78:f0:8d:
ea:41:0c:a0:db:ff:fe:36:cc:62:a2:13:17:29:e5:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:07:9D:77:C1:A5:47:37:0C:CB:96:DB:D4:7E:A8:B0:4A:C0:64
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
30:31:9c:36:6a:91:3c:f9:74:2a:e3:97:39:59:64:d4:df:5e:
9a:67:f7:02:8d:2f:77:21:34:e6:47:e2:77:36:9c:30:71:a8:
14:ca:ed:be:32:2a:00:30:28:20:f6:e8:b3:38:94:2e:4f:1d:
b3:a4:44:fd:67:0e:39:e2:39:7a:b7:cb:7d:bc:04:07:50:52:
48:3c:71:1b:bb:43:f5:72:44:82:63:0b:63:ba:52:a7:20:23:
58:5d:d8:d0:68:c2:ca:b7:a4:ef:96:a8:fe:21:a2:aa:eb:71:
5c:ce:30:25:3f:4d:e4:54:93:e8:d7:b0:1f:48:58:5b:86:46:
df:9c:63:37:ed:55:8b:d0:3e:fe:60:f4:e9:30:0b:72:2c:1d:
ad:3c:d0:1b:e1:2d:6b:96:46:9b:2a:d1:63:3b:ed:d2:8f:32:
00:a8:24:3a:65:43:af:02:29:c7:67:e9:71:92:2a:4e:81:21:
43:80:f9:97:82:cc:84:cb:ad:58:de:6a:ca:f4:af:e9:96:dd:
e5:9a:74:fe:46:47:01:f3:77:3e:b0:27:b6:46:a9:58:8b:ae:
c5:ca:e2:0e:0b:00:00:01:56:da:c2:36:69:09:d7:28:4b:1f:
05:59:49:ee:3b:de:0c:e0:fb:b1:03:40:b7:c5:8d:7b:c8:92:
ec:79:d7:0d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzIAVqoZqycEcaHbVLNizK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMmRkOWZlNjI4YjZiYzEwMTQxZGUwMjQxNzY2YTFiN2E2
MzE5M2YwHhcNMjQwMTAyMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjQ0MDc5ZDc3YzFhNTQ3MzcwY2NiOTZkYmQ0N2VhOGIwNGFjMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQpzSgye8v4JLfE6bhm31+4hRTGw
Mly2htvHvOvtI8tLD8/uTVe7iN8b3mT614bSXFIw0nK2RtQqoTMouV4ymXbEjedi
Q+OchhBMZXyacTa77RAiU/xnPTBW+5CHwcV48NZ29mML6tIDSeC27BZoABcsk70Q
ddy9BXlfv0NhlilBGlZ+GyH1UdWEUyc0My6VBxHqzAkerulGcO8QYhQotpC7BbcK
G77Ah6LXzya+EYfNk9LQOol6rAuc9dPS2oJV9uJoH4PkR3jPzFPQVNnUj/yyJ3lU
uV4pDp2P+9zdMYPP96oPsUAD1OBchkl48I3qQQyg2//+NsxiohMXKeUs5wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDZEB513waVHNwzLltvUfqiwSsBkMB8GA1UdIwQY
MBaAFFst2f5ii2vBAUHeAkF2aht6Yxk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEt
MGQ3YjU1MWY4MjhjLzEvTmtRSG5YZkJwVWMzRE11VzI5Ui1xTEJLd0dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEtMGQ3YjU1MWY4Mjhj
LzEvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVGAAwQC
LVtQAwQBLYd0AwQBLYxYAwQBLZveMA0GCSqGSIb3DQEBCwUAA4IBAQAwMZw2apE8
+XQq45c5WWTU316aZ/cCjS93ITTmR+J3NpwwcagUyu2+MioAMCgg9uizOJQuTx2z
pET9Zw454jl6t8t9vAQHUFJIPHEbu0P1ckSCYwtjulKnICNYXdjQaMLKt6Tvlqj+
IaKq63FczjAlP03kVJPo17AfSFhbhkbfnGM37VWL0D7+YPTpMAtyLB2tPNAb4S1r
lkabKtFjO+3SjzIAqCQ6ZUOvAinHZ+lxkipOgSFDgPmXgsyEy61Y3mrK9K/plt3l
mnT+RkcB83c+sCe2RqlYi67FyuIOCwAAAVbawjZpCdcoSx8FWUnuO94M4PuxA0C3
xY17yJLsedcN
-----END CERTIFICATE-----
Generated at Sat May 4 00:52:41 2024 by rpki-client on console-ams.rpki-client.org