Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5bROO6OssbmARJZL02hbbUExW_g.roa
File: 5bROO6OssbmARJZL02hbbUExW_g.roa (raw, json)
Hash identifier: rnvI+xsV9bH1GNElL0/D4h5O2d8QUlgTWw36XQ9zzUQ=
Subject key identifier: E5:B4:4E:3B:A3:AC:B1:B9:80:44:96:4B:D3:68:5B:6D:41:31:5B:F8
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018D88EFD585F15095FFAD7B4543742E6EA1
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5bROO6OssbmARJZL02hbbUExW_g.roa
Signing time: Thu 08 Feb 2024 13:37:15 +0000
ROA not before: Thu 08 Feb 2024 13:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 89.249.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 12:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:ef:d5:85:f1:50:95:ff:ad:7b:45:43:74:2e:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Feb 8 13:37:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5b44e3ba3acb1b98044964bd3685b6d41315bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:be:55:f0:da:d3:92:2d:fd:ed:59:20:d9:
f1:d4:fd:74:a4:25:42:e0:0a:2f:c5:d8:cf:47:27:
0c:79:a5:7e:c1:63:c3:4c:9b:95:a8:c8:f9:de:15:
db:9e:ae:84:8f:d2:18:ea:2a:1b:e9:62:6d:52:03:
9c:64:c8:17:2c:52:24:30:17:30:46:41:3a:07:56:
0e:8d:00:04:a6:16:ea:26:c7:37:11:72:7f:9b:74:
dc:ab:c6:6f:7b:c5:bc:93:b9:55:44:72:09:c7:1e:
5d:51:79:9e:6f:0b:98:3a:b2:9e:76:54:29:cc:7f:
b3:5b:86:14:fc:a4:a9:9b:5a:10:d6:22:d0:bd:fb:
c5:d2:9c:55:f2:b0:67:c5:91:bf:78:6b:94:e0:fe:
14:9e:e8:08:5b:75:24:46:48:08:20:75:64:42:eb:
63:92:27:33:ad:18:95:36:06:73:7c:f9:84:da:67:
59:c6:6b:34:8b:dd:e7:a2:22:b4:85:7a:e6:3c:a1:
88:ce:16:32:68:f5:e7:48:ae:6f:db:4c:a5:e2:16:
e4:71:31:db:8e:d1:fa:4b:c5:c9:3e:32:75:a6:67:
8f:50:8e:eb:76:1a:ef:34:07:ca:ec:9e:f2:a7:35:
19:4b:1b:f0:5b:96:9b:75:46:51:54:8d:e0:4d:bc:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:4E:3B:A3:AC:B1:B9:80:44:96:4B:D3:68:5B:6D:41:31:5B:F8
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/5bROO6OssbmARJZL02hbbUExW_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.203.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2a:89:2e:32:06:f0:cb:b8:c8:51:ba:02:26:32:c5:36:57:
a3:b4:45:7e:a3:bb:d2:c1:cd:59:fa:e9:29:cf:e4:15:46:68:
06:9c:ba:ca:a8:47:82:91:4e:2a:ed:25:86:23:33:dc:3d:80:
d3:64:8f:75:54:1c:0f:57:b7:0c:30:ac:44:a2:1b:e5:ee:6e:
cb:97:bf:8b:bb:fa:ac:aa:b5:fd:87:17:fc:3c:6d:49:89:f0:
13:71:f8:e1:06:01:28:7e:ed:92:e8:a4:62:b0:5e:4b:3e:85:
eb:c4:a7:82:12:09:14:8e:59:e7:36:c6:f8:9f:55:96:69:bb:
1d:ef:a2:05:e2:ed:b8:55:26:e7:ef:6e:da:88:bd:ee:71:11:
43:9e:21:5e:d2:c9:08:90:71:8e:6f:09:a4:a4:4a:d4:38:be:
9f:60:5b:c9:da:9d:7f:44:7f:c5:60:f7:e1:1b:21:53:20:07:
07:62:fb:03:06:71:6b:22:9f:60:ae:59:1e:c0:8e:dd:ad:c4:
fb:93:80:48:dc:14:1d:17:e8:fb:e4:d3:b6:fb:71:f7:e1:89:
1c:57:25:0b:c7:1a:63:2f:69:99:7b:42:8d:51:7c:13:3e:86:
ce:f3:14:d1:c5:7e:e5:c6:30:c2:2f:98:e0:f5:c8:26:b1:fe:
13:3b:0b:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2I79WF8VCV/617RUN0Lm6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjQwMjA4MTMzNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWI0NGUzYmEzYWNiMWI5ODA0NDk2NGJkMzY4NWI2ZDQxMzE1YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2G+VfDa05It/e1ZINnx1P10pCVC
4AovxdjPRycMeaV+wWPDTJuVqMj53hXbnq6Ej9IY6iob6WJtUgOcZMgXLFIkMBcw
RkE6B1YOjQAEphbqJsc3EXJ/m3Tcq8Zve8W8k7lVRHIJxx5dUXmebwuYOrKedlQp
zH+zW4YU/KSpm1oQ1iLQvfvF0pxV8rBnxZG/eGuU4P4UnugIW3UkRkgIIHVkQutj
kiczrRiVNgZzfPmE2mdZxms0i93noiK0hXrmPKGIzhYyaPXnSK5v20yl4hbkcTHb
jtH6S8XJPjJ1pmePUI7rdhrvNAfK7J7ypzUZSxvwW5abdUZRVI3gTbzqRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOW0TjujrLG5gESWS9NoW21BMVv4MB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvNWJST082T3NzYm1BUkpaTDAyaGJiVUV4V19nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnLMA0G
CSqGSIb3DQEBCwUAA4IBAQCSKokuMgbwy7jIUboCJjLFNlejtEV+o7vSwc1Z+ukp
z+QVRmgGnLrKqEeCkU4q7SWGIzPcPYDTZI91VBwPV7cMMKxEohvl7m7Ll7+Lu/qs
qrX9hxf8PG1JifATcfjhBgEofu2S6KRisF5LPoXrxKeCEgkUjlnnNsb4n1WWabsd
76IF4u24VSbn727aiL3ucRFDniFe0skIkHGObwmkpErUOL6fYFvJ2p1/RH/FYPfh
GyFTIAcHYvsDBnFrIp9grlkewI7drcT7k4BI3BQdF+j75NO2+3H34YkcVyULxxpj
L2mZe0KNUXwTPobO8xTRxX7lxjDCL5jg9cgmsf4TOwuF
-----END CERTIFICATE-----
Generated at Sun Apr 28 16:33:32 2024 by rpki-client on console-fra.rpki-client.org