Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TEEBIKjyZjsL4IHdkeos_ZQhLHk.roa
File: TEEBIKjyZjsL4IHdkeos_ZQhLHk.roa (raw, json)
Hash identifier: 4m7gS+Q8l5JkSeeTFFMxtdK3t1ncM+Zd0HRh7tUh6Nw=
Subject key identifier: 4C:41:01:20:A8:F2:66:3B:0B:E0:81:DD:91:EA:2C:FD:94:21:2C:79
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0190078A2CFE3C67C4C9CC86823872B8324D
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TEEBIKjyZjsL4IHdkeos_ZQhLHk.roa
Signing time: Tue 11 Jun 2024 13:43:34 +0000
ROA not before: Tue 11 Jun 2024 13:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 5.144.180.0/24 maxlen: 24
5.178.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:8a:2c:fe:3c:67:c4:c9:cc:86:82:38:72:b8:32:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jun 11 13:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c410120a8f2663b0be081dd91ea2cfd94212c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:7f:c1:2d:32:d1:69:d7:b9:f7:46:1f:b3:
ad:32:d9:16:76:4e:46:79:53:29:cc:a5:0a:50:86:
41:47:82:cc:35:95:4c:58:0e:76:31:2d:d3:d9:cd:
dd:31:47:2e:16:f2:85:c2:7f:b0:ff:01:51:fd:d8:
9c:cc:3f:9a:7e:90:d6:41:f8:23:3d:3e:8f:39:8c:
b4:fe:3c:ad:70:d0:8e:d9:06:b4:f0:f1:f5:6e:8b:
14:6c:ee:51:38:dc:67:71:cc:6b:0a:ae:38:b1:7e:
01:46:21:5e:2a:3e:28:0b:d8:b6:78:ce:09:45:15:
2f:0b:68:46:d7:59:06:fb:8a:f4:4d:de:50:5a:67:
04:a3:31:a4:fa:42:8f:22:1d:bd:37:67:5f:06:10:
df:6c:dd:d4:bb:60:45:38:6b:64:32:42:40:24:30:
80:d2:70:b0:d4:ed:89:ee:33:a0:26:2a:e9:92:c9:
4d:34:6d:8a:69:d0:bd:75:b7:0a:f3:cf:31:13:7b:
5f:a4:a7:01:17:08:3f:97:5b:8f:78:e3:05:08:74:
13:e2:05:fc:6b:63:4a:2e:3d:1e:32:7f:ef:f0:d6:
70:fe:da:3b:7b:44:76:57:36:8a:6a:74:f3:7c:17:
ef:6c:2e:43:26:af:81:f3:61:4e:9f:5e:53:c2:2c:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:01:20:A8:F2:66:3B:0B:E0:81:DD:91:EA:2C:FD:94:21:2C:79
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/TEEBIKjyZjsL4IHdkeos_ZQhLHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.180.0/24
5.178.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:96:0c:57:01:32:49:ce:69:70:a9:0f:8d:86:3d:35:44:b3:
37:24:b0:ed:19:9b:1e:8c:d0:a6:de:80:ed:ff:c5:14:f3:d7:
c0:f1:6f:12:33:6d:7a:c5:d7:b4:fc:28:29:8d:f1:f3:7b:6c:
41:33:41:4e:51:2f:4d:01:1a:a0:06:c7:38:01:ec:ab:eb:e0:
bd:91:af:36:81:d7:0f:2b:be:55:d3:5a:1f:5a:8c:81:b2:a2:
2c:f8:47:03:a1:22:1d:6d:69:75:ff:b3:43:02:d5:d9:d1:d0:
ea:9d:fd:67:64:9b:5e:88:b0:15:67:03:aa:6b:ef:0a:14:c7:
6f:b4:39:77:8f:25:05:50:c7:8b:be:31:4c:64:d0:10:66:61:
fe:69:c1:74:f5:fd:4d:ce:b8:97:9b:f6:af:22:c1:cf:b2:04:
fc:ac:75:c9:c7:08:0c:88:e6:a8:a0:1b:e9:30:26:9a:6f:9c:
a7:57:4a:bb:cb:a4:ce:f8:cc:ba:91:83:eb:cf:4e:aa:68:22:
0e:7d:da:fe:41:79:74:cb:6e:77:9b:6d:1b:c0:2a:66:c4:57:
23:6a:79:69:4e:87:0c:24:fe:8c:c0:e0:cf:5b:e0:f3:55:ae:
07:b7:dd:f3:7c:f9:33:b7:3e:43:a1:ef:94:f3:51:2b:f8:aa:
11:ac:2e:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAHiiz+PGfEycyGgjhyuDJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQwNjExMTM0MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQxMDEyMGE4ZjI2NjNiMGJlMDgxZGQ5MWVhMmNmZDk0MjEyYzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIR/wS0y0WnXufdGH7OtMtkWdk5G
eVMpzKUKUIZBR4LMNZVMWA52MS3T2c3dMUcuFvKFwn+w/wFR/diczD+afpDWQfgj
PT6POYy0/jytcNCO2Qa08PH1bosUbO5RONxnccxrCq44sX4BRiFeKj4oC9i2eM4J
RRUvC2hG11kG+4r0Td5QWmcEozGk+kKPIh29N2dfBhDfbN3Uu2BFOGtkMkJAJDCA
0nCw1O2J7jOgJirpkslNNG2KadC9dbcK888xE3tfpKcBFwg/l1uPeOMFCHQT4gX8
a2NKLj0eMn/v8NZw/to7e0R2VzaKanTzfBfvbC5DJq+B82FOn15TwixTzQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFExBASCo8mY7C+CB3ZHqLP2UISx5MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvVEVFQklLanlaanNMNElIZGtlb3NfWlFoTEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZC0AwQA
BbJqMA0GCSqGSIb3DQEBCwUAA4IBAQAPlgxXATJJzmlwqQ+Nhj01RLM3JLDtGZse
jNCm3oDt/8UU89fA8W8SM216xde0/CgpjfHze2xBM0FOUS9NARqgBsc4Aeyr6+C9
ka82gdcPK75V01ofWoyBsqIs+EcDoSIdbWl1/7NDAtXZ0dDqnf1nZJteiLAVZwOq
a+8KFMdvtDl3jyUFUMeLvjFMZNAQZmH+acF09f1NzriXm/avIsHPsgT8rHXJxwgM
iOaooBvpMCaab5ynV0q7y6TO+My6kYPrz06qaCIOfdr+QXl0y253m20bwCpmxFcj
anlpTocMJP6MwODPW+DzVa4Ht93zfPkztz5Doe+U81Er+KoRrC4a
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:36:02 2024 by rpki-client on console-ams.rpki-client.org