Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/05MdHrAlZ1X3jIdIXqfgqgDemQg.roa
File: 05MdHrAlZ1X3jIdIXqfgqgDemQg.roa (raw, json)
Hash identifier: hkAAsCLRUQJCufIPLXiwcvjklAqvZbF2Y1kme4WuNh0=
Subject key identifier: D3:93:1D:1E:B0:25:67:55:F7:8C:87:48:5E:A7:E0:AA:00:DE:99:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A759DFF437FD361EFF13089191E4A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/05MdHrAlZ1X3jIdIXqfgqgDemQg.roa
Signing time: Tue 02 Jan 2024 12:33:49 +0000
ROA not before: Tue 02 Jan 2024 12:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47540
IP address blocks: 195.58.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:75:9d:ff:43:7f:d3:61:ef:f1:30:89:19:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3931d1eb0256755f78c87485ea7e0aa00de9908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:3c:d3:5b:56:d9:de:fb:4a:9f:98:24:19:
6b:8e:0d:25:0c:e5:80:ae:7b:19:ea:64:43:10:25:
d6:82:ef:a9:7a:a9:5f:87:ef:2e:4f:d3:2c:5b:40:
37:71:ac:cc:b5:2d:51:63:fc:55:e4:e0:f5:8f:d6:
50:22:00:37:3e:e5:04:fb:16:e6:f8:e5:32:d4:b8:
6a:3c:94:cd:a4:6a:6e:79:7d:62:04:f1:b8:aa:9e:
f4:c0:bd:6f:69:05:d5:d6:fb:66:69:48:a3:d8:72:
65:85:ab:ab:f5:c1:2c:c3:43:5c:66:9c:ba:da:23:
8a:3c:0d:df:ee:56:3e:75:e3:ce:4f:db:8a:93:66:
7b:7a:4e:19:53:cf:b9:48:78:55:90:2b:1c:76:58:
aa:06:f3:54:0b:63:b1:98:9c:6b:d4:d6:e5:ba:21:
79:ea:3a:86:45:74:6f:a1:0e:6c:c9:2a:fe:d0:5c:
77:d8:c9:c3:dc:fc:6a:01:3e:58:41:70:c7:92:18:
c2:16:50:c1:98:d7:84:56:57:50:5f:84:23:b8:68:
09:a7:2d:51:cc:2b:a2:f2:9e:a1:fb:f6:76:c5:86:
2c:59:5b:f4:81:bf:32:c7:2d:ba:da:3f:de:88:36:
57:93:9e:17:69:29:6d:f8:ca:d1:3a:03:c9:e9:42:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:93:1D:1E:B0:25:67:55:F7:8C:87:48:5E:A7:E0:AA:00:DE:99:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/05MdHrAlZ1X3jIdIXqfgqgDemQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.53.0/24
Signature Algorithm: sha256WithRSAEncryption
03:61:f9:09:52:60:dd:be:98:c6:d5:8e:84:41:2a:ad:56:fe:
d9:99:e1:ac:ec:f7:be:fc:7f:22:23:66:f1:9c:09:cc:b3:90:
c1:db:bd:d0:96:66:06:53:42:00:c4:dd:71:ff:bc:bf:93:b8:
ec:a7:c3:94:d5:59:f4:42:cf:22:98:a0:f8:b7:23:01:fc:0a:
25:06:23:38:4d:01:03:45:8c:28:e7:cc:57:64:b8:e1:da:9f:
b7:cf:b5:5a:e6:bd:e9:b3:79:4e:44:76:89:34:b8:e2:6c:45:
db:a0:8c:51:bb:74:2a:1e:4f:db:99:71:5e:07:ab:d9:4a:3a:
5e:75:3f:9b:5f:75:2e:52:72:f4:58:52:81:41:1f:d6:53:53:
06:07:54:e2:3e:36:81:21:f6:b4:67:03:da:e8:0e:5d:d3:d8:
59:18:e2:4f:ea:ca:94:80:94:2b:f0:14:d0:f2:6f:2a:a8:71:
23:ad:76:00:1c:45:f1:13:6d:33:06:61:11:89:88:9b:17:0f:
de:81:af:0a:1c:21:1f:a4:e4:25:0f:a5:1c:76:fc:83:41:0d:
18:06:c8:d7:88:ac:68:72:d3:da:4f:f3:8a:e7:96:f9:06:81:
4a:b0:ad:ac:f9:5d:b5:0a:2f:63:ab:f4:9c:ce:74:35:9a:5a:
30:71:b7:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKnWd/0N/02Hv8TCJGR5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzkzMWQxZWIwMjU2NzU1Zjc4Yzg3NDg1ZWE3ZTBhYTAwZGU5OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs0801tW2d77Sp+YJBlrjg0lDOWA
rnsZ6mRDECXWgu+peqlfh+8uT9MsW0A3cazMtS1RY/xV5OD1j9ZQIgA3PuUE+xbm
+OUy1LhqPJTNpGpueX1iBPG4qp70wL1vaQXV1vtmaUij2HJlhaur9cEsw0NcZpy6
2iOKPA3f7lY+dePOT9uKk2Z7ek4ZU8+5SHhVkCscdliqBvNUC2OxmJxr1NbluiF5
6jqGRXRvoQ5sySr+0Fx32MnD3PxqAT5YQXDHkhjCFlDBmNeEVldQX4QjuGgJpy1R
zCui8p6h+/Z2xYYsWVv0gb8yxy262j/eiDZXk54XaSlt+MrROgPJ6UKJVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOTHR6wJWdV94yHSF6n4KoA3pkIMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMDVNZEhyQWxaMVgzaklkSVhxZmdxZ0RlbVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzo1MA0G
CSqGSIb3DQEBCwUAA4IBAQADYfkJUmDdvpjG1Y6EQSqtVv7ZmeGs7Pe+/H8iI2bx
nAnMs5DB273QlmYGU0IAxN1x/7y/k7jsp8OU1Vn0Qs8imKD4tyMB/AolBiM4TQED
RYwo58xXZLjh2p+3z7Va5r3ps3lORHaJNLjibEXboIxRu3QqHk/bmXFeB6vZSjpe
dT+bX3UuUnL0WFKBQR/WU1MGB1TiPjaBIfa0ZwPa6A5d09hZGOJP6sqUgJQr8BTQ
8m8qqHEjrXYAHEXxE20zBmERiYibFw/ega8KHCEfpOQlD6UcdvyDQQ0YBsjXiKxo
ctPaT/OK55b5BoFKsK2s+V21Ci9jq/ScznQ1mlowcbds
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:14:49 2024 by rpki-client on console-ams.rpki-client.org