Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/pEPSRV3ZWsC-Zv7_5Fu2pdGP-O4.roa
File: pEPSRV3ZWsC-Zv7_5Fu2pdGP-O4.roa (raw, json)
Hash identifier: w8ssJdw6BF11+51Icr24SHhM0vKTePmKTVv//Di8Bo8=
Subject key identifier: A4:43:D2:45:5D:D9:5A:C0:BE:66:FE:FF:E4:5B:B6:A5:D1:8F:F8:EE
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 018CC6B857F4E25DDD7F037F2B21F75063B5
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/pEPSRV3ZWsC-Zv7_5Fu2pdGP-O4.roa
Signing time: Mon 01 Jan 2024 20:30:19 +0000
ROA not before: Mon 01 Jan 2024 20:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62319
IP address blocks: 193.104.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:57:f4:e2:5d:dd:7f:03:7f:2b:21:f7:50:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jan 1 20:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a443d2455dd95ac0be66feffe45bb6a5d18ff8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:7b:07:a5:50:9b:af:e3:b6:c8:19:a0:45:
95:70:89:60:c5:2f:b2:b8:73:e1:95:96:88:d5:e7:
b4:8b:3a:fd:f3:c0:d0:6b:55:17:86:46:f8:de:8d:
77:89:6b:92:e6:28:2c:ce:50:44:d7:ed:a4:2d:ad:
6f:8d:15:e0:b8:0a:1c:f2:87:48:cf:10:11:3d:00:
c6:b2:08:ac:53:30:81:4b:cc:96:a5:d2:9a:e7:43:
2e:49:95:b4:b0:ee:40:1d:b1:94:38:70:af:c2:ea:
c5:f2:52:bd:b4:6d:eb:89:7e:6b:95:c0:6c:b8:31:
63:3b:75:94:c2:98:07:2b:4a:1a:94:5b:ef:c9:9c:
1b:5d:b6:47:c3:0b:be:6d:51:ce:26:86:b8:c5:89:
96:9e:f8:d1:cd:43:ae:92:0e:56:05:a1:6e:d7:f9:
5b:ea:18:aa:65:99:5e:a6:fd:1c:0b:a7:98:d4:0e:
71:ba:88:a8:1c:74:40:cb:9d:07:ec:92:01:bc:83:
03:67:68:4f:bb:9f:8d:05:50:4e:be:70:b7:06:47:
0d:97:16:b3:bf:30:7f:a3:69:6d:9c:e5:44:bc:ce:
b9:ec:0c:57:bf:62:b9:f9:34:cc:98:33:74:6c:db:
12:8c:3b:cb:b6:7b:f4:41:2e:64:5d:f2:3a:be:ee:
c4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:D2:45:5D:D9:5A:C0:BE:66:FE:FF:E4:5B:B6:A5:D1:8F:F8:EE
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/pEPSRV3ZWsC-Zv7_5Fu2pdGP-O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.171.0/24
Signature Algorithm: sha256WithRSAEncryption
36:46:42:bb:f9:e5:21:49:56:4f:ec:11:a4:84:f8:15:f6:7a:
2f:fe:05:29:90:c0:f1:52:64:e0:f5:a5:ad:68:32:ef:02:42:
70:2f:0e:fa:a1:c6:7d:d5:0e:87:d0:68:4f:08:6a:9d:e4:7b:
28:0b:0c:ce:4e:e0:7f:b0:8e:da:54:1b:0d:58:58:f8:4d:07:
7b:bf:30:4e:ef:22:db:59:24:01:d9:42:fc:e2:8f:f1:85:75:
51:16:5c:d9:bc:37:b1:d7:18:18:3a:9f:c4:d1:63:b0:dd:e1:
ee:6d:a6:6f:b4:9d:eb:51:13:3d:8b:ae:e0:9e:a7:d3:84:eb:
02:ed:09:27:00:64:ef:72:76:fc:0c:e8:9b:cc:15:b2:18:be:
70:23:0c:1a:d9:7c:ba:1d:69:63:36:dc:9e:35:96:d5:41:f6:
d6:e3:c2:f7:41:fe:1d:a3:37:39:57:0a:5a:c4:38:15:86:ae:
2d:1a:be:0e:fc:f3:b2:2d:14:f5:13:f6:c2:7d:05:20:e8:fb:
2c:b2:49:31:6d:5c:f0:e7:2c:00:73:8a:dc:5e:c3:c1:9d:37:
04:64:d6:c8:4e:57:c5:f1:4d:29:e2:31:5a:16:ed:79:a5:07:
04:99:47:37:f8:26:cb:41:91:4a:bf:4b:b4:4e:8d:47:f3:0c:
ba:38:e0:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuFf04l3dfwN/KyH3UGO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjQwMTAxMjAzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDQzZDI0NTVkZDk1YWMwYmU2NmZlZmZlNDViYjZhNWQxOGZmOGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKJ7B6VQm6/jtsgZoEWVcIlgxS+y
uHPhlZaI1ee0izr988DQa1UXhkb43o13iWuS5igszlBE1+2kLa1vjRXguAoc8odI
zxARPQDGsgisUzCBS8yWpdKa50MuSZW0sO5AHbGUOHCvwurF8lK9tG3riX5rlcBs
uDFjO3WUwpgHK0oalFvvyZwbXbZHwwu+bVHOJoa4xYmWnvjRzUOukg5WBaFu1/lb
6hiqZZlepv0cC6eY1A5xuoioHHRAy50H7JIBvIMDZ2hPu5+NBVBOvnC3BkcNlxaz
vzB/o2ltnOVEvM657AxXv2K5+TTMmDN0bNsSjDvLtnv0QS5kXfI6vu7EYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRD0kVd2VrAvmb+/+RbtqXRj/juMB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvcEVQU1JWM1pXc0MtWnY3XzVGdTJwZEdQLU80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWirMA0G
CSqGSIb3DQEBCwUAA4IBAQA2RkK7+eUhSVZP7BGkhPgV9nov/gUpkMDxUmTg9aWt
aDLvAkJwLw76ocZ91Q6H0GhPCGqd5HsoCwzOTuB/sI7aVBsNWFj4TQd7vzBO7yLb
WSQB2UL84o/xhXVRFlzZvDex1xgYOp/E0WOw3eHubaZvtJ3rURM9i67gnqfThOsC
7QknAGTvcnb8DOibzBWyGL5wIwwa2Xy6HWljNtyeNZbVQfbW48L3Qf4dozc5Vwpa
xDgVhq4tGr4O/POyLRT1E/bCfQUg6PssskkxbVzw5ywAc4rcXsPBnTcEZNbITlfF
8U0p4jFaFu15pQcEmUc3+CbLQZFKv0u0To1H8wy6OODt
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:49 2024 by rpki-client on console-fra.rpki-client.org