Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/5KH4yEFihyvqe8lWBqRe_9majWA.roa
File: 5KH4yEFihyvqe8lWBqRe_9majWA.roa (raw, json)
Hash identifier: arc+c7jTrwTqn744fLPnOdN85JNk1CPvY1kTu+yyF2s=
Subject key identifier: E4:A1:F8:C8:41:62:87:2B:EA:7B:C9:56:06:A4:5E:FF:D9:9A:8D:60
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018CC5DC11B032A3C29F96A8E025FBDFB289
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/5KH4yEFihyvqe8lWBqRe_9majWA.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.184.0/24 maxlen: 32
138.124.183.0/24 maxlen: 32
138.124.180.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:11:b0:32:a3:c2:9f:96:a8:e0:25:fb:df:b2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4a1f8c84162872bea7bc95606a45effd99a8d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:8e:56:bc:4f:a1:80:74:65:cb:16:ff:fb:
1b:91:0e:3e:3d:a8:02:e7:d2:7b:3e:cc:9c:7e:8c:
5a:53:b1:d8:7d:00:e3:89:cf:5d:b8:50:5b:fe:08:
fd:8a:da:3c:c0:ab:3a:88:92:7f:70:ed:9d:69:6f:
9f:a3:f3:1e:45:9c:5e:c9:ad:19:fe:66:54:6a:cd:
c5:06:8a:e4:90:5a:96:23:11:2c:9e:d6:77:a3:fa:
96:1a:cc:84:9c:aa:f3:4e:94:ac:91:f2:74:ac:fa:
8c:c4:79:f9:53:7e:b3:94:0f:75:de:e1:f1:eb:7e:
ac:a0:d0:39:a8:5f:0f:08:0c:72:4f:d3:cb:94:e3:
88:3b:aa:1e:9c:c2:03:da:99:58:51:fc:74:1b:86:
24:91:1e:71:08:ce:05:51:82:2e:02:21:c1:64:52:
cc:3f:57:f0:a1:14:82:fc:9b:fb:f3:67:a7:dd:1b:
94:a5:4e:e7:0c:93:73:8a:e7:a9:00:18:56:a8:43:
52:8b:93:e3:14:31:67:e9:ce:bb:0f:3e:96:2d:87:
b3:85:be:b6:34:dd:a6:6d:a0:02:3c:8f:62:e0:3d:
d5:c0:6a:0b:c0:fe:7c:f1:9b:26:96:19:0e:c8:08:
86:d1:49:fc:ad:f2:19:af:63:dc:7c:80:20:28:6f:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A1:F8:C8:41:62:87:2B:EA:7B:C9:56:06:A4:5E:FF:D9:9A:8D:60
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/5KH4yEFihyvqe8lWBqRe_9majWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
Signature Algorithm: sha256WithRSAEncryption
65:c9:45:17:3f:f8:62:00:4e:34:0e:52:92:c3:9f:8e:a9:2b:
de:4a:a0:60:79:a9:8d:52:c7:05:e8:d4:d0:bb:36:1e:42:c3:
d0:5d:d0:96:95:b3:ae:72:a0:af:7c:c4:bc:82:38:6e:52:00:
60:d6:46:5e:d6:5d:81:fe:33:d3:f4:3c:9b:f7:0b:ee:c1:27:
6b:01:72:d7:50:87:10:24:f0:11:c8:5d:10:99:f4:5d:a0:ac:
e2:27:cb:81:e3:d4:73:57:69:c8:11:d8:ca:94:8b:31:c9:da:
4a:30:8c:cc:22:5f:2c:a4:e6:51:30:f6:84:ff:63:dc:14:60:
5c:73:82:ca:69:75:95:75:d2:59:b6:f6:b9:3d:57:37:60:c9:
dc:0c:68:a9:a0:c8:73:7a:86:fb:09:4a:06:86:b9:1d:8d:de:
3f:f1:2b:03:02:65:18:92:b0:5f:ef:1c:04:2b:21:e1:ee:8c:
08:a3:b4:a8:3d:fd:8c:5f:47:af:8e:f9:1a:25:bf:a6:4b:05:
36:36:c3:88:fe:3b:99:49:56:83:b0:85:37:a0:fa:3f:d5:2e:
b9:f5:bd:28:85:f3:b3:85:13:30:c6:37:c8:bb:c2:a5:9a:00:
0d:0c:ff:7b:a2:ca:36:20:7b:a9:56:1c:5d:8c:65:1c:71:dd:
2e:ff:56:1d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzF3BGwMqPCn5ao4CX737KJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTJhMWFjODkxMGNmNWM4NjVkZTViMDIzMWIwOWQwNGUx
MTMyZjMwHhcNMjQwMTAxMTYyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGExZjhjODQxNjI4NzJiZWE3YmM5NTYwNmE0NWVmZmQ5OWE4ZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhGOVrxPoYB0ZcsW//sbkQ4+PagC
59J7PsycfoxaU7HYfQDjic9duFBb/gj9ito8wKs6iJJ/cO2daW+fo/MeRZxeya0Z
/mZUas3FBorkkFqWIxEsntZ3o/qWGsyEnKrzTpSskfJ0rPqMxHn5U36zlA913uHx
636soNA5qF8PCAxyT9PLlOOIO6oenMID2plYUfx0G4YkkR5xCM4FUYIuAiHBZFLM
P1fwoRSC/Jv782en3RuUpU7nDJNziuepABhWqENSi5PjFDFn6c67Dz6WLYezhb62
NN2mbaACPI9i4D3VwGoLwP588ZsmlhkOyAiG0Un8rfIZr2PcfIAgKG9LdQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOSh+MhBYocr6nvJVgakXv/Zmo1gMB8GA1UdIwQY
MBaAFN6SoayJEM9chl3lsCMbCdBOETLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQt
NjllMzM3ODg0Y2M5LzEvNUtINHlFRmloeXZxZThsV0JxUmVfOW1haldBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80Mzc3ZDYtNTE1Yy00MjBhLTkxMzQtNjllMzM3ODg0Y2M5
LzEvM3BLaHJJa1F6MXlHWGVXd0l4c0owRTRSTXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAiny0MAwD
BACKfLcDBACKfLgwDQYJKoZIhvcNAQELBQADggEBAGXJRRc/+GIATjQOUpLDn46p
K95KoGB5qY1SxwXo1NC7Nh5Cw9Bd0JaVs65yoK98xLyCOG5SAGDWRl7WXYH+M9P0
PJv3C+7BJ2sBctdQhxAk8BHIXRCZ9F2grOIny4Hj1HNXacgR2MqUizHJ2kowjMwi
Xyyk5lEw9oT/Y9wUYFxzgsppdZV10lm29rk9VzdgydwMaKmgyHN6hvsJSgaGuR2N
3j/xKwMCZRiSsF/vHAQrIeHujAijtKg9/YxfR6+O+Rolv6ZLBTY2w4j+O5lJVoOw
hTeg+j/VLrn1vSiF87OFEzDGN8i7wqWaAA0M/3uiyjYge6lWHF2MZRxx3S7/Vh0=
-----END CERTIFICATE-----
Generated at Sun Jun 23 02:40:53 2024 by rpki-client on console-ams.rpki-client.org