Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/R5UwZ_uXDF_GJGsPfthGBrO02RM.roa
File: R5UwZ_uXDF_GJGsPfthGBrO02RM.roa (raw, json)
Hash identifier: lCU1Lv9rX1goK/+v904YRH9Tz/hjcPCF+07D5V5uDrA=
Subject key identifier: 47:95:30:67:FB:97:0C:5F:C6:24:6B:0F:7E:D8:46:06:B3:B4:D9:13
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 018CC348CFCDE3AAA39AC8D05F6885E3C9FC
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/R5UwZ_uXDF_GJGsPfthGBrO02RM.roa
Signing time: Mon 01 Jan 2024 04:29:38 +0000
ROA not before: Mon 01 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3169
IP address blocks: 37.140.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:cf:cd:e3:aa:a3:9a:c8:d0:5f:68:85:e3:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 1 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47953067fb970c5fc6246b0f7ed84606b3b4d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:c3:36:7f:e5:7a:20:65:3a:3f:f0:ef:d0:
fd:d9:26:3d:07:26:00:f3:3d:99:ef:39:49:93:f5:
f9:29:11:44:ee:e2:65:34:69:f9:84:bb:3a:f6:ea:
33:fc:a2:b6:47:4d:12:bc:07:00:e7:a1:e9:4f:67:
de:00:6b:67:00:1a:97:d2:90:36:d6:2b:c1:ff:01:
be:9d:93:d0:d6:8c:95:a4:ea:9e:be:09:db:55:9a:
99:29:ce:c9:3d:53:74:67:d8:48:39:79:d9:96:10:
29:aa:a5:f4:92:71:e7:40:6d:1a:54:ad:85:c8:20:
9d:70:50:cb:44:04:42:53:ce:43:2e:86:b6:2a:38:
c3:81:f9:56:4f:ae:7c:1e:c1:63:10:27:77:3c:08:
6d:66:ae:a4:59:b1:b8:9f:71:98:a9:35:0c:5d:ef:
27:40:13:1f:8c:62:33:1f:42:0e:40:30:4a:b2:b9:
24:f8:59:c2:21:26:bf:c1:4c:f9:e3:95:78:a0:c0:
52:5e:f2:1b:32:c1:a2:6b:43:2b:d4:cd:6d:5a:4b:
98:18:dd:9f:0c:86:49:92:e7:ca:76:84:20:00:79:
97:7a:ea:f0:7c:f4:56:08:88:4e:18:2e:9f:9e:af:
95:8e:65:14:11:77:25:db:8a:c6:5a:4b:67:0a:0b:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:30:67:FB:97:0C:5F:C6:24:6B:0F:7E:D8:46:06:B3:B4:D9:13
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/R5UwZ_uXDF_GJGsPfthGBrO02RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f0:c6:48:a0:d0:21:93:f6:5f:d5:ae:f7:f7:f6:a2:f1:45:
0a:c3:f7:76:d0:48:4e:3a:35:e9:14:00:84:a8:c8:ef:de:14:
6b:d1:fa:66:25:03:62:54:77:5e:c0:7d:8d:74:c4:b2:bb:41:
53:12:80:50:2b:67:0d:77:58:d4:7a:f4:87:f0:0c:37:da:de:
0f:0c:5f:77:65:58:f8:0a:73:eb:b9:0c:0b:18:af:c5:47:26:
be:eb:83:95:77:4d:05:23:a0:de:0b:85:62:30:0f:80:0f:df:
bd:6b:bb:1b:c1:b7:ee:fb:ec:f1:58:fd:57:51:5c:3b:59:47:
c5:d8:83:e0:5e:cf:06:9d:82:4f:54:3a:cc:88:99:cb:0e:30:
67:24:df:06:7a:c4:1d:62:75:96:31:1f:3d:dc:ca:f4:4d:ca:
73:d2:c6:78:25:25:43:01:7e:ba:6a:8c:03:1b:d6:b7:ef:68:
c7:8b:9e:d4:c4:bc:93:e0:d9:23:ba:74:e4:a7:39:06:66:b3:
48:ab:36:a4:40:d3:ec:4c:52:20:31:9f:ae:e9:30:0b:9b:66:
1d:a3:be:90:87:7f:7e:e4:fd:98:7e:90:47:54:ec:66:7b:5c:
a1:3a:e7:df:1e:1f:d7:b8:b3:0a:9b:00:1f:17:16:d4:16:70:
cc:c1:69:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSM/N46qjmsjQX2iF48n8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk
NjNhYjgwHhcNMjQwMTAxMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Nzk1MzA2N2ZiOTcwYzVmYzYyNDZiMGY3ZWQ4NDYwNmIzYjRkOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLDNn/leiBlOj/w79D92SY9ByYA
8z2Z7zlJk/X5KRFE7uJlNGn5hLs69uoz/KK2R00SvAcA56HpT2feAGtnABqX0pA2
1ivB/wG+nZPQ1oyVpOqevgnbVZqZKc7JPVN0Z9hIOXnZlhApqqX0knHnQG0aVK2F
yCCdcFDLRARCU85DLoa2KjjDgflWT658HsFjECd3PAhtZq6kWbG4n3GYqTUMXe8n
QBMfjGIzH0IOQDBKsrkk+FnCISa/wUz545V4oMBSXvIbMsGia0Mr1M1tWkuYGN2f
DIZJkufKdoQgAHmXeurwfPRWCIhOGC6fnq+VjmUUEXcl24rGWktnCgs4qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeVMGf7lwxfxiRrD37YRgaztNkTMB8GA1UdIwQY
MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt
YzRhY2I4OTY5YzQ5LzEvUjVVd1pfdVhERl9HSkdzUGZ0aEdCck8wMlJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5
LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYzZMA0G
CSqGSIb3DQEBCwUAA4IBAQBa8MZIoNAhk/Zf1a739/ai8UUKw/d20EhOOjXpFACE
qMjv3hRr0fpmJQNiVHdewH2NdMSyu0FTEoBQK2cNd1jUevSH8Aw32t4PDF93ZVj4
CnPruQwLGK/FRya+64OVd00FI6DeC4ViMA+AD9+9a7sbwbfu++zxWP1XUVw7WUfF
2IPgXs8GnYJPVDrMiJnLDjBnJN8GesQdYnWWMR893Mr0Tcpz0sZ4JSVDAX66aowD
G9a372jHi57UxLyT4NkjunTkpzkGZrNIqzakQNPsTFIgMZ+u6TALm2Ydo76Qh39+
5P2YfpBHVOxme1yhOuffHh/XuLMKmwAfFxbUFnDMwWnP
-----END CERTIFICATE-----
Generated at Sun Jun 23 19:04:37 2024 by rpki-client on console-fra.rpki-client.org