Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5sp-GAl6xjlqtaZuHac8VDZR_54.roa
File: 5sp-GAl6xjlqtaZuHac8VDZR_54.roa (raw, json)
Hash identifier: D5WJ/IiZ/lBRvZ8DOh/BYwNIfPSgKioQFMeyU41dB84=
Subject key identifier: E6:CA:7E:18:09:7A:C6:39:6A:B5:A6:6E:1D:A7:3C:54:36:51:FF:9E
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 018CCA2B54E4772A1B80304F961C4EE7C758
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5sp-GAl6xjlqtaZuHac8VDZR_54.roa
Signing time: Tue 02 Jan 2024 12:34:46 +0000
ROA not before: Tue 02 Jan 2024 12:34:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50427
IP address blocks: 185.112.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:54:e4:77:2a:1b:80:30:4f:96:1c:4e:e7:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jan 2 12:34:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ca7e18097ac6396ab5a66e1da73c543651ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:72:46:18:3f:d5:73:da:d6:a2:a5:70:07:
5e:7b:2e:f1:f6:ba:8c:86:6b:88:99:b2:bc:0f:1a:
2b:38:ba:ac:08:91:dd:6f:28:ea:e6:0c:b8:37:12:
ec:2e:45:72:1f:e2:0e:3b:79:b3:33:14:16:bf:3f:
5a:d3:7e:c0:b2:5f:94:5e:89:8a:08:21:b8:9f:aa:
1d:d9:17:c6:3b:42:bf:b7:ef:65:af:96:53:89:55:
55:d1:37:bf:b8:a2:c3:f7:e4:d0:60:2c:9a:ca:21:
38:10:7a:0e:ae:f7:d2:42:d8:3b:9f:84:c8:90:b1:
4f:25:ff:97:7d:aa:b3:80:17:94:00:bb:f4:15:66:
b8:e4:7f:4d:ad:f3:e1:65:70:6e:06:a3:8a:de:2d:
18:3e:ec:10:dc:56:fe:d6:c8:89:59:0a:56:36:7f:
70:b8:5f:ed:50:94:bb:72:c1:be:64:53:4b:88:63:
c6:9a:bc:5e:5e:bf:1a:41:a1:75:35:1b:ad:f9:23:
16:ee:8f:5a:dd:ed:01:17:95:9f:a7:a8:7a:e7:8d:
a8:fe:82:bc:5a:cf:21:d3:2f:0f:56:65:2f:6d:f3:
b8:b4:77:e9:2a:6a:85:4f:ed:56:14:28:fe:6d:a0:
ea:3b:32:65:5e:ba:00:5a:25:99:63:be:c6:39:73:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:7E:18:09:7A:C6:39:6A:B5:A6:6E:1D:A7:3C:54:36:51:FF:9E
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/5sp-GAl6xjlqtaZuHac8VDZR_54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f8:29:aa:26:99:58:47:44:ac:dc:31:26:03:b0:a5:f1:6d:
8a:b1:f2:bd:7e:d1:25:60:ae:14:a7:39:d7:ab:f7:c7:e0:87:
8d:88:cd:f8:0c:fd:74:b0:9c:e3:c5:7c:0b:40:0a:7c:78:e3:
84:8e:7b:f5:09:4f:90:c6:66:ee:b7:78:34:7e:d1:89:62:26:
6b:91:f0:bb:fe:b3:53:12:a9:01:bb:68:31:49:0c:3b:4c:88:
c9:e0:8b:25:ee:44:96:39:38:ed:ba:0e:4f:e8:a0:d8:f2:44:
29:ea:a8:ba:57:3d:a5:56:87:00:a1:6c:0e:bb:7e:48:82:c7:
ff:b9:8e:35:99:f8:cf:88:b9:3a:31:00:be:d4:56:97:76:37:
c6:4c:28:f6:1b:02:57:16:99:4e:5e:6d:19:b3:9c:58:f1:45:
ef:e4:c1:f2:8f:54:a8:68:9f:64:68:1a:66:b9:3c:7c:f8:a9:
81:2c:13:e4:ed:af:22:9a:16:19:7e:8f:11:03:3b:64:e6:5e:
35:5d:22:92:0b:c5:2d:d7:36:84:a3:e6:2c:c9:d8:1a:09:e1:
44:b9:25:24:c5:3a:2e:e5:44:e7:30:d1:3c:ae:fe:7b:c6:09:
d9:a3:5e:0c:51:5b:42:a7:61:31:b7:a7:4b:dd:53:03:87:df:
f9:a6:c2:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK1TkdyobgDBPlhxO58dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjQwMTAyMTIzNDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmNhN2UxODA5N2FjNjM5NmFiNWE2NmUxZGE3M2M1NDM2NTFmZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIRyRhg/1XPa1qKlcAdeey7x9rqM
hmuImbK8DxorOLqsCJHdbyjq5gy4NxLsLkVyH+IOO3mzMxQWvz9a037Asl+UXomK
CCG4n6od2RfGO0K/t+9lr5ZTiVVV0Te/uKLD9+TQYCyayiE4EHoOrvfSQtg7n4TI
kLFPJf+XfaqzgBeUALv0FWa45H9NrfPhZXBuBqOK3i0YPuwQ3Fb+1siJWQpWNn9w
uF/tUJS7csG+ZFNLiGPGmrxeXr8aQaF1NRut+SMW7o9a3e0BF5Wfp6h6542o/oK8
Ws8h0y8PVmUvbfO4tHfpKmqFT+1WFCj+baDqOzJlXroAWiWZY77GOXP5awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObKfhgJesY5arWmbh2nPFQ2Uf+eMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvNXNwLUdBbDZ4amxxdGFadUhhYzhWRFpSXzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXDgMA0G
CSqGSIb3DQEBCwUAA4IBAQAq+CmqJplYR0Ss3DEmA7Cl8W2KsfK9ftElYK4UpznX
q/fH4IeNiM34DP10sJzjxXwLQAp8eOOEjnv1CU+Qxmbut3g0ftGJYiZrkfC7/rNT
EqkBu2gxSQw7TIjJ4Isl7kSWOTjtug5P6KDY8kQp6qi6Vz2lVocAoWwOu35Igsf/
uY41mfjPiLk6MQC+1FaXdjfGTCj2GwJXFplOXm0Zs5xY8UXv5MHyj1SoaJ9kaBpm
uTx8+KmBLBPk7a8imhYZfo8RAztk5l41XSKSC8Ut1zaEo+YsydgaCeFEuSUkxTou
5UTnMNE8rv57xgnZo14MUVtCp2Ext6dL3VMDh9/5psKl
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:37:35 2024 by rpki-client on console-fra.rpki-client.org