Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ePuuLI6JOaOrltvDHLsTvzAdfhM.roa
File: ePuuLI6JOaOrltvDHLsTvzAdfhM.roa (raw, json)
Hash identifier: dEnIeQJt3oS+3oA7KifW7KV/zfNDSL4qpwRiWWvA5nY=
Subject key identifier: 78:FB:AE:2C:8E:89:39:A3:AB:96:DB:C3:1C:BB:13:BF:30:1D:7E:13
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC50040DB2C69EF60F99B150DBAC20D38
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ePuuLI6JOaOrltvDHLsTvzAdfhM.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209759
IP address blocks: 5.181.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:40:db:2c:69:ef:60:f9:9b:15:0d:ba:c2:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78fbae2c8e8939a3ab96dbc31cbb13bf301d7e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:24:5e:a6:7a:a1:7b:1e:00:e0:74:62:ae:
4c:a5:46:aa:42:5e:85:6d:60:7e:6e:2e:a8:85:6d:
e6:e6:3d:cf:95:d7:fe:c8:76:db:62:ea:5a:ca:41:
8b:1b:9a:31:3e:5c:f3:5c:86:34:9e:4a:88:ba:dd:
34:f3:3a:08:e9:be:14:44:ce:7c:7e:d3:52:aa:61:
67:61:cb:4d:af:93:5d:70:73:57:37:13:3a:92:18:
87:02:35:39:ab:45:8f:17:7b:8e:7a:26:07:42:be:
40:96:5e:e9:80:92:41:d4:7c:5a:b5:10:d9:15:f3:
6c:ff:37:2a:77:62:92:13:c0:0b:ea:86:66:cf:15:
96:7c:d9:70:92:2e:51:f1:6b:0e:f2:c8:7d:6c:6d:
e4:ff:65:1f:73:b5:0c:6a:d9:18:11:90:c2:2d:ed:
12:f6:a0:8d:64:84:02:01:4c:1d:87:fe:61:82:e6:
67:36:85:27:34:4b:0b:7a:9f:c8:bd:88:fa:3c:01:
7e:28:40:11:8a:65:88:47:a8:05:a7:ca:28:e6:52:
c4:68:e9:19:f8:bd:95:70:0e:40:69:11:3a:41:ea:
6d:06:74:1a:67:97:6f:5c:41:c8:d8:9a:20:a1:86:
01:c9:a6:40:d5:50:2f:01:68:ca:3e:d0:ac:10:ad:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:AE:2C:8E:89:39:A3:AB:96:DB:C3:1C:BB:13:BF:30:1D:7E:13
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ePuuLI6JOaOrltvDHLsTvzAdfhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:53:58:86:c7:48:d1:e3:c6:4d:96:c5:b1:0d:05:f2:9e:fc:
46:d5:02:fe:b5:f3:55:1f:05:81:79:af:25:81:2f:f6:dc:53:
04:3e:d3:92:7d:5e:3d:23:13:cb:39:1c:7d:19:3a:c1:bc:d9:
3b:b3:47:80:40:2f:38:3f:5a:b2:44:8d:d1:4b:12:92:00:b9:
fc:1b:38:a5:3f:aa:2e:1e:ec:2e:c7:78:38:0b:fa:21:69:53:
07:c8:e4:15:19:42:5b:12:53:05:e0:57:92:56:22:76:bc:5d:
cb:67:34:31:2c:17:10:84:90:32:93:09:6b:b8:aa:68:24:d7:
91:fe:73:83:62:b6:97:50:ed:e3:da:a6:e9:7b:92:2d:90:04:
f4:0f:cb:41:a4:bd:75:82:bd:1f:e0:de:f4:cc:d1:e6:02:43:
08:bc:ea:a6:b5:cd:19:56:0f:04:da:f6:f9:43:ce:af:2e:f7:
12:14:79:2e:3a:44:fa:46:30:27:72:79:0f:87:c5:46:67:ea:
f1:92:50:d0:e9:cc:55:96:17:76:74:c3:b1:bb:9f:e4:7f:02:
3b:c9:52:1a:e4:cc:e1:bd:de:b3:02:46:7c:cf:8a:b9:71:3b:
11:5b:d1:57:69:f2:2c:ce:ab:a5:47:85:63:d8:2d:fb:ab:93:
6a:cd:d4:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAEDbLGnvYPmbFQ26wg04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjQwMTAxMTIyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGZiYWUyYzhlODkzOWEzYWI5NmRiYzMxY2JiMTNiZjMwMWQ3ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlEkXqZ6oXseAOB0Yq5MpUaqQl6F
bWB+bi6ohW3m5j3Pldf+yHbbYupaykGLG5oxPlzzXIY0nkqIut008zoI6b4URM58
ftNSqmFnYctNr5NdcHNXNxM6khiHAjU5q0WPF3uOeiYHQr5All7pgJJB1HxatRDZ
FfNs/zcqd2KSE8AL6oZmzxWWfNlwki5R8WsO8sh9bG3k/2Ufc7UMatkYEZDCLe0S
9qCNZIQCAUwdh/5hguZnNoUnNEsLep/IvYj6PAF+KEARimWIR6gFp8oo5lLEaOkZ
+L2VcA5AaRE6QeptBnQaZ5dvXEHI2JogoYYByaZA1VAvAWjKPtCsEK2S2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHj7riyOiTmjq5bbwxy7E78wHX4TMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvZVB1dUxJNkpPYU9ybHR2REhMc1R2ekFkZmhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbUAMA0G
CSqGSIb3DQEBCwUAA4IBAQAsU1iGx0jR48ZNlsWxDQXynvxG1QL+tfNVHwWBea8l
gS/23FMEPtOSfV49IxPLORx9GTrBvNk7s0eAQC84P1qyRI3RSxKSALn8GzilP6ou
Huwux3g4C/ohaVMHyOQVGUJbElMF4FeSViJ2vF3LZzQxLBcQhJAykwlruKpoJNeR
/nODYraXUO3j2qbpe5ItkAT0D8tBpL11gr0f4N70zNHmAkMIvOqmtc0ZVg8E2vb5
Q86vLvcSFHkuOkT6RjAncnkPh8VGZ+rxklDQ6cxVlhd2dMOxu5/kfwI7yVIa5Mzh
vd6zAkZ8z4q5cTsRW9FXafIszqulR4Vj2C37q5NqzdTN
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:13:13 2024 by rpki-client on console-ams.rpki-client.org