Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5rN47ccox-42x5jEQxLH5pIkqzg.roa
File: 5rN47ccox-42x5jEQxLH5pIkqzg.roa (raw, json)
Hash identifier: 1/WONcTpWnOOVN4IP+AQak3mR75NSnQDoj/2n2Fn9PE=
Subject key identifier: E6:B3:78:ED:C7:28:C7:EE:36:C7:98:C4:43:12:C7:E6:92:24:AB:38
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E99A9E6376DF1E401F168DB52373
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5rN47ccox-42x5jEQxLH5pIkqzg.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39658
IP address blocks: 193.180.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e9:9a:9e:63:76:df:1e:40:1f:16:8d:b5:23:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6b378edc728c7ee36c798c44312c7e69224ab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9f:38:aa:ed:cb:f8:7f:ea:9b:28:ed:75:4e:
8b:98:cf:b0:30:1c:c9:e1:d0:39:5b:47:51:9f:df:
d6:d2:37:88:cf:d2:2d:ff:9a:51:b6:f1:1c:7a:e0:
e7:ae:98:61:4b:9a:3d:99:23:56:55:ad:70:75:e4:
17:6d:be:81:b4:19:9e:d9:25:a5:48:fe:dc:ab:e6:
6e:86:ce:62:b2:df:09:8f:e9:4a:fb:54:16:5f:0c:
d6:f9:d8:18:9c:0d:7f:cd:55:9a:78:1c:1f:3d:e7:
6f:02:c9:ee:e7:53:87:67:46:d3:91:c2:80:44:49:
9a:0b:39:61:30:1a:d3:83:f8:2d:c4:c2:e7:0e:78:
be:2a:26:14:d3:eb:ab:b0:59:02:0a:cb:a0:37:9e:
78:c9:d8:16:a5:c0:d1:77:0b:7f:7b:79:95:8a:ed:
64:41:4a:ca:20:17:7c:34:a0:76:0b:e1:2f:19:52:
76:87:49:ad:42:f0:f6:c6:9e:ea:9b:d2:9c:74:4d:
02:b6:59:9f:20:0c:1e:da:a9:b0:04:c6:06:6d:6a:
c3:e2:c8:d7:ea:cd:67:fe:04:7b:3a:0e:d7:52:6a:
c6:1b:4e:46:a6:cb:5b:89:6c:43:fa:da:06:40:f1:
28:b8:12:fc:5e:42:3f:c0:14:88:b1:06:76:ca:98:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:78:ED:C7:28:C7:EE:36:C7:98:C4:43:12:C7:E6:92:24:AB:38
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5rN47ccox-42x5jEQxLH5pIkqzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.124.0/24
Signature Algorithm: sha256WithRSAEncryption
67:90:ec:d3:f9:b1:8d:2d:92:72:d1:47:cd:68:16:1e:75:4a:
5c:92:6c:22:42:4d:62:cb:7e:69:3c:bb:eb:6e:86:13:1d:25:
79:25:f7:a8:c4:b2:4b:be:3e:df:8b:2c:9b:41:4e:37:12:52:
17:b2:e6:05:a8:1c:0d:24:99:19:60:e7:44:9a:52:d6:71:8f:
0d:16:a9:8f:df:79:87:0c:71:89:d0:c7:cf:1d:9e:26:d9:ad:
4a:05:f8:84:8a:30:75:dc:ad:9c:fd:fe:1f:90:3b:a4:8a:01:
03:bc:7e:9d:05:37:18:2a:eb:68:45:ff:88:13:34:e4:2d:11:
cf:a5:5b:f7:10:b9:5b:b6:01:9e:f3:46:93:e4:87:b0:e4:a9:
13:81:45:c1:a0:67:0c:d7:3a:6f:77:b4:6d:2c:78:0a:08:71:
64:06:f0:08:2d:61:39:cc:50:f0:4c:25:18:28:af:40:e1:53:
3d:50:a3:fe:df:60:19:20:42:69:26:67:95:29:78:41:52:56:
49:bc:69:62:fe:98:51:55:12:a3:f4:3d:52:fb:05:4f:f6:25:
eb:e6:5b:c8:72:74:d4:08:6a:59:11:06:50:15:1b:f1:64:92:
02:aa:ac:9d:bf:e3:75:a8:95:ea:1d:5c:a0:13:9b:25:dc:3c:
eb:58:36:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAumanmN23x5AHxaNtSNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIzNzhlZGM3MjhjN2VlMzZjNzk4YzQ0MzEyYzdlNjkyMjRhYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp84qu3L+H/qmyjtdU6LmM+wMBzJ
4dA5W0dRn9/W0jeIz9It/5pRtvEceuDnrphhS5o9mSNWVa1wdeQXbb6BtBme2SWl
SP7cq+Zuhs5ist8Jj+lK+1QWXwzW+dgYnA1/zVWaeBwfPedvAsnu51OHZ0bTkcKA
REmaCzlhMBrTg/gtxMLnDni+KiYU0+ursFkCCsugN554ydgWpcDRdwt/e3mViu1k
QUrKIBd8NKB2C+EvGVJ2h0mtQvD2xp7qm9KcdE0CtlmfIAwe2qmwBMYGbWrD4sjX
6s1n/gR7Og7XUmrGG05GpstbiWxD+toGQPEouBL8XkI/wBSIsQZ2ypiDnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOazeO3HKMfuNseYxEMSx+aSJKs4MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvNXJONDdjY294LTQyeDVqRVF4TEg1cElrcXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbR8MA0G
CSqGSIb3DQEBCwUAA4IBAQBnkOzT+bGNLZJy0UfNaBYedUpckmwiQk1iy35pPLvr
boYTHSV5JfeoxLJLvj7fiyybQU43ElIXsuYFqBwNJJkZYOdEmlLWcY8NFqmP33mH
DHGJ0MfPHZ4m2a1KBfiEijB13K2c/f4fkDukigEDvH6dBTcYKutoRf+IEzTkLRHP
pVv3ELlbtgGe80aT5Iew5KkTgUXBoGcM1zpvd7RtLHgKCHFkBvAILWE5zFDwTCUY
KK9A4VM9UKP+32AZIEJpJmeVKXhBUlZJvGli/phRVRKj9D1S+wVP9iXr5lvIcnTU
CGpZEQZQFRvxZJICqqydv+N1qJXqHVygE5sl3DzrWDa2
-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org