Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/5nKpvKctsxiZWaJlPM7CLuQemIg.roa
File: 5nKpvKctsxiZWaJlPM7CLuQemIg.roa (raw, json)
Hash identifier: WQOQ8q+7K9KBF6asc/rGQoUGKsRff8tH977Sl7YgfII=
Subject key identifier: E6:72:A9:BC:A7:2D:B3:18:99:59:A2:65:3C:CE:C2:2E:E4:1E:98:88
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018CC56DEE5A54DDBDFF335DC599B84C4420
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/5nKpvKctsxiZWaJlPM7CLuQemIg.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11426
IP address blocks: 45.147.68.0/22 maxlen: 22
5.182.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ee:5a:54:dd:bd:ff:33:5d:c5:99:b8:4c:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e672a9bca72db3189959a2653ccec22ee41e9888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:b2:d3:b1:55:73:cd:06:22:fd:9d:4f:1d:
6f:f9:f7:1e:20:d7:b8:ab:1c:c4:7f:10:22:df:1e:
a2:c9:35:2f:17:b3:65:c0:67:68:c3:0e:32:89:40:
b2:f4:86:a6:7f:cc:98:aa:86:f1:bd:3f:ab:a7:aa:
91:70:9a:9b:da:58:07:b4:ff:44:84:41:cb:c0:ab:
f0:5e:b7:db:be:7f:3a:af:44:2b:7e:33:f0:a0:97:
09:4b:17:7c:2c:50:73:98:cb:b6:c3:23:96:f4:48:
56:4d:2f:fd:fa:b6:14:29:82:74:74:53:a8:dc:19:
ef:7d:35:c5:57:d1:1c:5f:4e:a4:e0:65:e1:2e:02:
d0:91:2b:34:93:15:f4:1c:6a:06:53:ba:29:66:a6:
9b:95:b0:b8:4a:34:4a:02:39:1f:b5:fb:84:29:a0:
30:fc:63:46:bf:04:8f:c2:43:56:6e:1b:3b:09:de:
f6:35:f6:98:c0:0e:ac:22:45:2b:2f:c1:72:1d:bc:
8f:66:17:b9:8d:ce:bf:d4:6f:e4:81:e3:d5:21:a4:
da:c5:6f:93:90:ea:14:2d:b3:7a:0e:df:ca:90:b0:
a1:00:05:74:ba:cf:cc:6f:df:1f:f0:6b:c3:27:e9:
a7:53:53:b2:4a:1a:65:fa:d8:62:90:f1:86:32:0b:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:A9:BC:A7:2D:B3:18:99:59:A2:65:3C:CE:C2:2E:E4:1E:98:88
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/5nKpvKctsxiZWaJlPM7CLuQemIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
45.147.68.0/22
Signature Algorithm: sha256WithRSAEncryption
63:e8:bd:13:b7:84:4f:b4:99:3a:fb:71:01:95:77:aa:d9:b3:
95:89:05:66:9c:b9:b0:c0:38:e2:8c:07:48:0a:e5:0b:f6:10:
4f:81:e3:a2:37:84:68:c5:23:f6:0e:83:6f:1a:5b:3c:1d:a8:
84:f7:0c:d3:6e:d9:75:a7:65:bc:82:f6:e3:a2:02:24:de:1c:
7a:93:0d:20:a9:c3:49:4a:c8:6d:53:4d:39:9d:8b:b0:d8:da:
f9:f0:20:d3:85:de:da:92:dd:df:4f:2e:49:82:2f:23:7a:a2:
e9:33:0b:e3:e4:e2:17:31:8e:3e:22:74:d4:fc:ac:9e:e9:a5:
80:2f:8b:d7:6e:e8:2f:5f:5e:63:4f:e5:2a:3f:2b:92:8c:05:
b5:f3:6a:2b:59:7f:e6:1e:bd:25:86:7a:9c:de:d4:e1:ad:b6:
8a:04:26:5b:14:07:94:06:0a:fe:a7:5e:8c:9a:0b:2a:bb:83:
c9:9a:e5:91:6d:48:84:a2:8b:89:31:e0:9c:79:02:82:6b:29:
79:af:89:45:68:34:f7:32:55:1a:1b:66:7f:4c:92:63:65:7a:
55:33:73:7e:c2:24:48:ad:bc:f8:fc:89:18:13:af:d2:4a:ce:
4c:06:94:6b:af:3d:b4:3c:80:8b:e5:a5:49:27:86:04:48:19:
c1:6a:5a:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbe5aVN29/zNdxZm4TEQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx
OGM5YmMwHhcNMjQwMTAxMTQyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjcyYTliY2E3MmRiMzE4OTk1OWEyNjUzY2NlYzIyZWU0MWU5ODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvay07FVc80GIv2dTx1v+fceINe4
qxzEfxAi3x6iyTUvF7NlwGdoww4yiUCy9Iamf8yYqobxvT+rp6qRcJqb2lgHtP9E
hEHLwKvwXrfbvn86r0QrfjPwoJcJSxd8LFBzmMu2wyOW9EhWTS/9+rYUKYJ0dFOo
3BnvfTXFV9EcX06k4GXhLgLQkSs0kxX0HGoGU7opZqablbC4SjRKAjkftfuEKaAw
/GNGvwSPwkNWbhs7Cd72NfaYwA6sIkUrL8FyHbyPZhe5jc6/1G/kgePVIaTaxW+T
kOoULbN6Dt/KkLChAAV0us/Mb98f8GvDJ+mnU1OyShpl+thikPGGMgvpXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOZyqbynLbMYmVmiZTzOwi7kHpiIMB8GA1UdIwQY
MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt
YmQzYmZjOTliZGE5LzEvNW5LcHZLY3RzeGlaV2FKbFBNN0NMdVFlbUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5
LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbZ4AwQC
LZNEMA0GCSqGSIb3DQEBCwUAA4IBAQBj6L0Tt4RPtJk6+3EBlXeq2bOViQVmnLmw
wDjijAdICuUL9hBPgeOiN4RoxSP2DoNvGls8HaiE9wzTbtl1p2W8gvbjogIk3hx6
kw0gqcNJSshtU005nYuw2Nr58CDThd7akt3fTy5Jgi8jeqLpMwvj5OIXMY4+InTU
/Kye6aWAL4vXbugvX15jT+UqPyuSjAW182orWX/mHr0lhnqc3tThrbaKBCZbFAeU
Bgr+p16Mmgsqu4PJmuWRbUiEoouJMeCceQKCayl5r4lFaDT3MlUaG2Z/TJJjZXpV
M3N+wiRIrbz4/IkYE6/SSs5MBpRrrz20PICL5aVJJ4YESBnBalpu
-----END CERTIFICATE-----
Generated at Tue Apr 30 13:21:41 2024 by rpki-client on console-fra.rpki-client.org