Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa
File: aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa (raw, json)
Hash identifier: 1r2NqSkaTKAULV+uJ4jzjyU4jbhvSFPcU0nEVlGifdQ=
Subject key identifier: 69:61:FE:B8:2E:19:49:64:6E:E6:BB:B8:6D:CD:96:52:06:7E:5E:78
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 018CC5DCE6A3A247CAACFB121D262DE14279
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa
Signing time: Mon 01 Jan 2024 16:30:37 +0000
ROA not before: Mon 01 Jan 2024 16:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52157
IP address blocks: 5.100.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:e6:a3:a2:47:ca:ac:fb:12:1d:26:2d:e1:42:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Jan 1 16:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6961feb82e1949646ee6bbb86dcd9652067e5e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:f8:51:1f:98:52:72:20:3b:3b:94:6e:ce:
e3:10:73:06:3b:8d:75:ac:d8:97:40:bf:b4:f8:34:
23:6e:64:b1:b9:94:83:13:38:01:a9:8c:e8:e9:33:
19:67:4f:c7:9b:93:42:9b:0b:09:76:1a:19:31:a3:
b3:cb:fa:f0:86:5a:ed:11:60:9f:a5:56:b0:75:e1:
54:b4:15:6d:9f:99:2c:d7:c3:62:18:02:9b:6e:96:
27:76:66:91:44:67:3a:ab:7e:15:0f:d5:36:0a:d5:
9a:14:36:f0:42:b1:ef:13:91:c4:5b:04:7d:d0:ff:
3f:1c:90:b2:03:5e:e0:96:61:09:97:d6:73:41:d6:
c9:28:ba:4b:b4:c0:91:e3:f8:1f:68:20:df:9c:03:
75:99:e2:86:73:42:57:ba:b9:09:04:94:4b:e5:2c:
aa:ef:2b:42:24:68:35:eb:a0:00:c6:36:fe:e6:73:
5f:42:80:87:f7:ff:96:d0:70:dd:0a:d2:16:da:36:
bb:d2:ba:30:33:f1:8a:b3:ba:60:91:33:f0:ea:c5:
61:9a:d1:3a:b9:b7:67:87:26:a6:67:a0:42:c2:4f:
94:14:bc:8e:ac:cb:d5:a5:16:9a:90:04:5e:22:88:
59:05:9b:a4:b3:50:a9:4c:53:0f:f4:46:5b:9b:71:
57:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:FE:B8:2E:19:49:64:6E:E6:BB:B8:6D:CD:96:52:06:7E:5E:78
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aWH-uC4ZSWRu5ru4bc2WUgZ-Xng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:54:f6:b5:09:ee:04:e2:4a:da:dd:af:a2:57:04:a9:ee:dd:
4b:41:12:e9:f3:13:32:44:21:e1:3b:e2:66:d6:f9:da:a7:c2:
c5:c2:6b:78:eb:5e:ad:2b:9e:79:3c:63:6e:ac:43:44:7e:58:
73:47:11:1d:ae:0b:6a:17:c9:77:0d:0b:f9:01:8c:f8:52:c4:
ac:c2:63:a1:2e:81:d4:1f:1a:81:ae:78:2a:96:6f:2f:e1:cb:
96:66:3c:66:ce:89:81:ea:68:02:a4:99:f0:eb:f3:c8:8d:fd:
19:55:96:ea:15:c5:87:ca:5f:d1:d4:8c:87:32:f7:dd:16:ac:
9f:9d:fb:3c:d0:a3:d6:a5:49:7a:1d:15:c0:d7:05:cf:93:32:
0a:71:34:54:c0:ff:93:2a:c3:98:cb:f2:df:bc:a9:b1:19:41:
d7:62:81:14:6e:6a:81:95:35:de:ff:12:27:66:0c:51:fc:bd:
af:e0:bf:5d:4d:ed:66:01:8c:8c:8a:53:2c:02:e9:1e:87:a6:
94:6b:2e:01:cf:fd:db:17:68:4f:50:85:ed:c7:31:4f:84:d8:
74:6f:a9:58:15:ed:79:df:98:d6:40:a1:45:19:1b:b2:94:ca:
9f:ac:7d:d1:b7:45:d6:19:68:52:24:1c:76:28:dc:e0:a7:61:
28:0a:30:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3OajokfKrPsSHSYt4UJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk
YzExMTIwHhcNMjQwMTAxMTYzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTYxZmViODJlMTk0OTY0NmVlNmJiYjg2ZGNkOTY1MjA2N2U1ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBL4UR+YUnIgOzuUbs7jEHMGO411
rNiXQL+0+DQjbmSxuZSDEzgBqYzo6TMZZ0/Hm5NCmwsJdhoZMaOzy/rwhlrtEWCf
pVawdeFUtBVtn5ks18NiGAKbbpYndmaRRGc6q34VD9U2CtWaFDbwQrHvE5HEWwR9
0P8/HJCyA17glmEJl9ZzQdbJKLpLtMCR4/gfaCDfnAN1meKGc0JXurkJBJRL5Syq
7ytCJGg166AAxjb+5nNfQoCH9/+W0HDdCtIW2ja70rowM/GKs7pgkTPw6sVhmtE6
ubdnhyamZ6BCwk+UFLyOrMvVpRaakAReIohZBZuks1CpTFMP9EZbm3FXmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlh/rguGUlkbua7uG3NllIGfl54MB8GA1UdIwQY
MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt
ZmZlNDNhNTJkM2Y2LzEvYVdILXVDNFpTV1J1NXJ1NGJjMldVZ1otWG5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2
LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBWS8MA0G
CSqGSIb3DQEBCwUAA4IBAQAbVPa1Ce4E4kra3a+iVwSp7t1LQRLp8xMyRCHhO+Jm
1vnap8LFwmt4616tK555PGNurENEflhzRxEdrgtqF8l3DQv5AYz4UsSswmOhLoHU
HxqBrngqlm8v4cuWZjxmzomB6mgCpJnw6/PIjf0ZVZbqFcWHyl/R1IyHMvfdFqyf
nfs80KPWpUl6HRXA1wXPkzIKcTRUwP+TKsOYy/LfvKmxGUHXYoEUbmqBlTXe/xIn
ZgxR/L2v4L9dTe1mAYyMilMsAukeh6aUay4Bz/3bF2hPUIXtxzFPhNh0b6lYFe15
35jWQKFFGRuylMqfrH3Rt0XWGWhSJBx2KNzgp2EoCjB9
-----END CERTIFICATE-----
Generated at Wed Jun 26 04:33:52 2024 by rpki-client on console-ams.rpki-client.org