Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/thtWTNLO2qPb7usv4Vg_0xbrH08.roa
File: thtWTNLO2qPb7usv4Vg_0xbrH08.roa (raw, json)
Hash identifier: u1hL8o3fdnzfL/M6JIQxV6fHCwpuq5fwZbN1/NvvMNk=
Subject key identifier: B6:1B:56:4C:D2:CE:DA:A3:DB:EE:EB:2F:E1:58:3F:D3:16:EB:1F:4F
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0192C89F9EF390EF4F8CCB50FD210321C6CD
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/thtWTNLO2qPb7usv4Vg_0xbrH08.roa
Signing time: Sat 26 Oct 2024 11:39:17 +0000
ROA not before: Sat 26 Oct 2024 11:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395793
IP address blocks: 45.149.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:9f:9e:f3:90:ef:4f:8c:cb:50:fd:21:03:21:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 26 11:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b61b564cd2cedaa3dbeeeb2fe1583fd316eb1f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:98:4f:78:78:82:4a:8d:ae:fd:3b:e8:3d:
25:a1:11:bf:08:49:1e:b5:67:2c:01:5e:2d:86:7b:
51:5f:64:05:b8:c8:ac:36:47:b4:be:5f:e2:fd:52:
69:90:d7:5c:13:60:3f:f8:de:51:ae:34:cc:86:b6:
65:c1:0a:05:9d:7b:40:bb:ab:6c:26:59:fc:69:1c:
dd:3d:1a:28:40:7b:d2:25:aa:ee:c8:4a:6e:75:2b:
94:a7:c0:2b:f5:02:6d:60:86:39:e0:41:a4:c4:71:
97:c7:37:82:8a:ef:a2:cd:ba:5a:de:f4:c5:3f:e1:
c9:0f:90:c6:51:b0:32:a3:4e:65:d1:64:24:f2:ed:
a1:4a:6e:04:99:c2:ad:0c:79:41:3c:06:8e:ad:4e:
e6:5e:3f:c2:0d:26:69:d4:c1:87:3f:6e:54:9e:cd:
72:db:41:6e:94:a7:6b:73:55:29:46:9b:8e:cd:18:
e2:b3:15:9b:9e:a8:18:96:a3:8b:25:e4:24:cc:a4:
d2:0d:37:17:5d:20:7f:a3:4b:82:09:c4:41:4d:25:
67:58:07:a4:45:20:2b:39:fe:6b:33:25:4d:3f:1f:
b2:6d:e5:38:d9:05:07:11:8a:b9:bb:9e:e5:b6:51:
57:54:86:30:08:73:00:e7:bd:84:c3:84:2f:b5:a9:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:56:4C:D2:CE:DA:A3:DB:EE:EB:2F:E1:58:3F:D3:16:EB:1F:4F
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/thtWTNLO2qPb7usv4Vg_0xbrH08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ab:3d:96:05:bd:2e:a2:95:d2:47:81:af:ad:0b:88:f4:df:
13:49:52:25:de:1a:06:83:35:7f:78:e9:44:4c:68:ac:87:81:
ec:40:8e:d7:e8:c0:69:9a:4a:74:9a:77:5a:f4:e9:bc:87:dc:
d6:d6:5b:3b:48:b6:4e:06:b4:0b:0f:bf:ac:98:47:ad:74:12:
a3:a7:9e:58:de:5e:6e:d4:fd:2a:14:76:e1:14:19:f4:65:55:
ab:68:06:cb:f2:7d:df:69:ae:29:be:a5:04:d1:3b:e2:f8:13:
f2:b2:88:2d:36:c7:3e:b9:34:f6:c1:47:09:73:6e:3d:df:78:
5d:0d:95:d2:f8:a0:05:2b:3c:5a:3b:ad:bc:51:8a:2b:37:49:
37:52:73:56:17:fb:28:92:7b:31:f2:4d:ff:91:1b:ea:02:eb:
bc:37:97:0b:60:c2:b2:fb:44:8e:8d:98:c2:da:96:22:33:0e:
90:4b:0e:2b:93:e3:4d:4a:13:e3:fd:05:7d:e0:3b:77:47:f6:
c0:55:58:c8:9a:86:6d:be:76:63:fe:8a:21:f5:d6:09:46:df:
94:a3:b8:ba:2e:05:5f:19:11:18:14:7d:68:e9:a3:25:bd:8d:
b2:97:ce:32:66:eb:4d:28:83:2c:ab:7e:45:e3:6c:27:12:58:
0d:11:b4:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLIn57zkO9PjMtQ/SEDIcbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjQxMDI2MTEzOTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjFiNTY0Y2QyY2VkYWEzZGJlZWViMmZlMTU4M2ZkMzE2ZWIxZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqYT3h4gkqNrv076D0loRG/CEke
tWcsAV4thntRX2QFuMisNke0vl/i/VJpkNdcE2A/+N5RrjTMhrZlwQoFnXtAu6ts
Jln8aRzdPRooQHvSJaruyEpudSuUp8Ar9QJtYIY54EGkxHGXxzeCiu+izbpa3vTF
P+HJD5DGUbAyo05l0WQk8u2hSm4EmcKtDHlBPAaOrU7mXj/CDSZp1MGHP25Uns1y
20FulKdrc1UpRpuOzRjisxWbnqgYlqOLJeQkzKTSDTcXXSB/o0uCCcRBTSVnWAek
RSArOf5rMyVNPx+ybeU42QUHEYq5u57ltlFXVIYwCHMA572Ew4QvtakYyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLYbVkzSztqj2+7rL+FYP9MW6x9PMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvdGh0V1ROTE8ycVBiN3VzdjRWZ18weGJySDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUGMA0G
CSqGSIb3DQEBCwUAA4IBAQBmqz2WBb0uopXSR4GvrQuI9N8TSVIl3hoGgzV/eOlE
TGish4HsQI7X6MBpmkp0mnda9Om8h9zW1ls7SLZOBrQLD7+smEetdBKjp55Y3l5u
1P0qFHbhFBn0ZVWraAbL8n3faa4pvqUE0Tvi+BPysogtNsc+uTT2wUcJc24933hd
DZXS+KAFKzxaO628UYorN0k3UnNWF/soknsx8k3/kRvqAuu8N5cLYMKy+0SOjZjC
2pYiMw6QSw4rk+NNShPj/QV94Dt3R/bAVVjImoZtvnZj/ooh9dYJRt+Uo7i6LgVf
GREYFH1o6aMlvY2yl84yZutNKIMsq35F42wnElgNEbTb
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:54 2024 by rpki-client on console-fra.rpki-client.org