Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/_Uf6X07I0eSxGPXQ8b4OAnfzYSQ.roa
File: _Uf6X07I0eSxGPXQ8b4OAnfzYSQ.roa (raw, json)
Hash identifier: o5R3DI1wqMSdt1DNZhXBRGA3iLs9aED7oH+3AhuPVMc=
Subject key identifier: FD:47:FA:5F:4E:C8:D1:E4:B1:18:F5:D0:F1:BE:0E:02:77:F3:61:24
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 018F867FA9E1EFB6A46978706A8ED83146D1
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/_Uf6X07I0eSxGPXQ8b4OAnfzYSQ.roa
Signing time: Fri 17 May 2024 12:21:04 +0000
ROA not before: Fri 17 May 2024 12:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 5.44.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:7f:a9:e1:ef:b6:a4:69:78:70:6a:8e:d8:31:46:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: May 17 12:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd47fa5f4ec8d1e4b118f5d0f1be0e0277f36124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:dd:09:db:c4:61:b0:ba:c1:d0:33:f5:f9:
f7:83:ef:45:24:49:0f:00:68:ff:96:3c:06:e1:5f:
1b:6b:35:6e:83:1e:b4:09:a7:e1:9e:b3:6a:6e:62:
15:f3:34:62:88:bb:3d:5a:6f:70:62:09:d0:cd:52:
b7:aa:b6:de:d8:a1:66:a7:80:24:e6:53:7e:08:bb:
bf:56:2c:6c:4b:a2:b0:cc:29:80:bf:0c:37:e2:f7:
3d:c8:27:62:33:fe:f7:60:5e:7b:cb:ff:80:bd:28:
d4:19:af:7d:13:82:82:83:9b:86:09:dd:16:0d:a0:
2f:39:fd:ed:95:9f:3c:eb:4c:d0:e6:ea:83:1f:c4:
c6:0e:3d:8a:f3:68:e7:35:42:ca:2e:bc:74:29:a0:
48:af:12:d1:35:4d:6a:04:4e:96:10:17:64:aa:8f:
5b:65:34:e6:10:ac:11:f9:0c:4d:bf:a8:b0:76:d3:
a1:a4:c1:44:0c:96:e7:44:e2:3a:ad:24:7b:76:48:
68:44:2a:c6:bc:9f:bd:22:b2:61:04:5d:cc:32:72:
25:5a:2b:32:67:4a:18:e2:c1:e4:ab:06:71:8e:b0:
0f:51:2e:b6:df:ae:d6:9c:ed:0d:ef:20:93:17:85:
b9:7d:d7:05:ca:01:ac:96:3c:25:48:16:f3:bd:0a:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:FA:5F:4E:C8:D1:E4:B1:18:F5:D0:F1:BE:0E:02:77:F3:61:24
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/_Uf6X07I0eSxGPXQ8b4OAnfzYSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3e:44:22:9c:85:db:13:a2:27:f7:b3:82:ef:10:c8:c4:33:
d8:db:6f:f9:00:b4:40:ed:c3:33:26:8c:e7:fc:00:65:45:86:
c5:cc:0d:fd:2d:9a:94:a6:1e:73:89:b3:d6:b3:c9:01:0d:aa:
bd:99:4d:b6:7a:87:a3:2c:f7:73:dc:84:1e:33:ec:63:db:63:
bb:d2:f7:45:e3:1c:3e:e2:bd:e9:2c:0f:9e:db:97:8c:ec:ee:
2e:29:e3:10:c6:d8:7f:ac:88:a8:9a:f4:ca:4c:87:c0:97:c8:
63:1c:68:ce:f5:81:29:90:98:85:2c:62:52:56:6a:11:cd:de:
93:a8:cb:8e:db:db:e5:d8:50:ec:61:3a:fe:37:53:ae:19:1b:
f2:1d:e7:42:73:84:2b:22:cc:1b:81:9b:1e:1c:c2:6b:dc:4e:
ce:85:99:45:85:25:7e:f4:3f:db:be:dc:75:a7:07:67:87:c8:
22:c5:0a:8c:ec:54:b7:fc:f9:67:e4:45:8c:63:6e:eb:b3:ba:
9a:94:70:d9:a1:26:a5:aa:f5:91:09:3e:cf:84:b9:df:90:b6:
a1:df:84:16:3e:84:dc:c9:50:1d:1a:87:bd:3e:80:da:63:9d:
f3:84:76:5a:2a:1a:bb:2b:8c:18:57:a2:d5:4b:6f:8f:8e:87:
dd:0d:a2:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+Gf6nh77akaXhwao7YMUbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3
MGIzNTUwHhcNMjQwNTE3MTIyMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDQ3ZmE1ZjRlYzhkMWU0YjExOGY1ZDBmMWJlMGUwMjc3ZjM2MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUndCdvEYbC6wdAz9fn3g+9FJEkP
AGj/ljwG4V8bazVugx60CafhnrNqbmIV8zRiiLs9Wm9wYgnQzVK3qrbe2KFmp4Ak
5lN+CLu/VixsS6KwzCmAvww34vc9yCdiM/73YF57y/+AvSjUGa99E4KCg5uGCd0W
DaAvOf3tlZ8860zQ5uqDH8TGDj2K82jnNULKLrx0KaBIrxLRNU1qBE6WEBdkqo9b
ZTTmEKwR+QxNv6iwdtOhpMFEDJbnROI6rSR7dkhoRCrGvJ+9IrJhBF3MMnIlWisy
Z0oY4sHkqwZxjrAPUS62367WnO0N7yCTF4W5fdcFygGsljwlSBbzvQo8hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1H+l9OyNHksRj10PG+DgJ382EkMB8GA1UdIwQY
MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt
ZTE1NDM3MzgwMDk5LzEvX1VmNlgwN0kwZVN4R1BYUThiNE9BbmZ6WVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5
LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABSz4MA0G
CSqGSIb3DQEBCwUAA4IBAQCpPkQinIXbE6In97OC7xDIxDPY22/5ALRA7cMzJozn
/ABlRYbFzA39LZqUph5zibPWs8kBDaq9mU22eoejLPdz3IQeM+xj22O70vdF4xw+
4r3pLA+e25eM7O4uKeMQxth/rIiomvTKTIfAl8hjHGjO9YEpkJiFLGJSVmoRzd6T
qMuO29vl2FDsYTr+N1OuGRvyHedCc4QrIswbgZseHMJr3E7OhZlFhSV+9D/bvtx1
pwdnh8gixQqM7FS3/Pln5EWMY27rs7qalHDZoSalqvWRCT7PhLnfkLah34QWPoTc
yVAdGoe9PoDaY53zhHZaKhq7K4wYV6LVS2+PjofdDaL5
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:22:54 2024 by rpki-client on console-fra.rpki-client.org