Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UryNOktfDI41zD7D5vVo3uCEPs8.roa
File: UryNOktfDI41zD7D5vVo3uCEPs8.roa (raw, json)
Hash identifier: e2/3tvhK+wWjDW76H6cdt4zvvu+fjpf9HMFsY3JKxkQ=
Subject key identifier: 52:BC:8D:3A:4B:5F:0C:8E:35:CC:3E:C3:E6:F5:68:DE:E0:84:3E:CF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4B1BBE659231020D8F441C176C8B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UryNOktfDI41zD7D5vVo3uCEPs8.roa
Signing time: Tue 02 Jan 2024 04:29:46 +0000
ROA not before: Tue 02 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211632
IP address blocks: 5.181.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:4b:1b:be:65:92:31:02:0d:8f:44:1c:17:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52bc8d3a4b5f0c8e35cc3ec3e6f568dee0843ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:cb:cd:c5:b3:0f:d2:ec:34:10:6a:07:83:
a0:50:30:47:81:74:02:d9:e6:3b:8e:0a:33:f8:2f:
89:84:43:ab:f3:04:dc:27:b5:6a:ac:3d:ed:01:9c:
d5:fb:16:a0:0c:c5:db:bf:18:e7:e5:e7:bf:84:47:
e9:f7:31:eb:77:c9:ff:e7:8c:dc:f0:a3:ae:49:0c:
6b:54:b7:8e:71:3a:93:a9:85:4f:75:94:42:2e:0f:
01:7f:20:43:42:b1:dd:68:b1:25:b5:e6:5f:73:ba:
ea:44:17:1e:b3:2d:87:5e:f0:91:a1:b6:29:06:9c:
58:7b:08:18:c6:66:12:e3:97:2c:dc:cb:2e:83:21:
dd:70:0b:65:fc:05:92:cb:f4:d5:77:a6:a0:80:52:
ac:e7:9e:4c:02:ea:90:52:d0:04:dd:9f:8c:e2:fe:
58:78:21:ee:48:89:75:5b:b4:56:c1:27:1a:c5:cd:
9f:2d:56:d3:88:a2:a8:72:0e:0a:d0:fb:62:f5:65:
d6:c6:d8:99:28:19:82:c4:11:ac:8f:c8:50:72:e8:
99:77:f3:d3:18:4d:fa:25:d9:2c:2b:ce:38:bc:24:
88:73:ef:f7:90:dc:c3:35:57:34:f1:07:05:b2:47:
d5:a0:5c:96:26:c4:89:cb:f3:32:f6:a9:a5:f6:dc:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:8D:3A:4B:5F:0C:8E:35:CC:3E:C3:E6:F5:68:DE:E0:84:3E:CF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UryNOktfDI41zD7D5vVo3uCEPs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:72:50:53:ee:e9:da:79:2b:96:9c:d7:e3:1b:ea:17:00:32:
25:ba:80:f9:c2:f0:ee:18:a5:cc:6b:42:cc:62:15:57:68:d5:
f7:58:18:41:f5:94:aa:54:8d:31:69:eb:87:05:65:37:17:24:
17:f4:73:57:42:ea:41:39:44:5f:4b:50:f5:36:0e:39:be:a0:
df:13:99:eb:c9:b8:f1:3b:45:48:cb:7c:fc:c5:5d:d2:7f:22:
71:49:17:1b:4e:47:67:64:03:58:3f:6e:26:a4:fa:42:84:f2:
80:e6:e8:86:a2:b4:dd:b7:77:7b:bd:00:53:f2:9f:18:5e:8a:
db:73:46:f2:d0:0f:17:a1:45:19:51:7a:78:f1:c2:18:a5:bb:
5b:cb:b2:d4:35:ef:7d:fb:c7:1e:34:1e:94:88:08:a5:d8:bc:
37:58:9e:68:b2:ea:72:3e:29:ee:75:21:53:f9:1f:d9:4f:95:
a6:62:48:35:49:df:5e:64:78:23:d8:8f:7a:ef:5d:43:96:28:
3e:4c:4a:3f:f8:1f:db:ce:da:59:7e:14:df:ec:87:00:4f:73:
b7:c9:6f:24:9c:40:b5:ec:6a:03:1a:63:5f:5b:77:ba:9e:d0:
41:a1:e8:4e:1c:f1:44:c9:bb:a8:d3:93:c2:aa:f2:14:a3:57:
06:48:68:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb0sbvmWSMQINj0QcF2yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTAyMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmJjOGQzYTRiNWYwYzhlMzVjYzNlYzNlNmY1NjhkZWUwODQzZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1PLzcWzD9LsNBBqB4OgUDBHgXQC
2eY7jgoz+C+JhEOr8wTcJ7VqrD3tAZzV+xagDMXbvxjn5ee/hEfp9zHrd8n/54zc
8KOuSQxrVLeOcTqTqYVPdZRCLg8BfyBDQrHdaLElteZfc7rqRBcesy2HXvCRobYp
BpxYewgYxmYS45cs3MsugyHdcAtl/AWSy/TVd6aggFKs555MAuqQUtAE3Z+M4v5Y
eCHuSIl1W7RWwScaxc2fLVbTiKKocg4K0Pti9WXWxtiZKBmCxBGsj8hQcuiZd/PT
GE36JdksK844vCSIc+/3kNzDNVc08QcFskfVoFyWJsSJy/My9qml9twYUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFK8jTpLXwyONcw+w+b1aN7ghD7PMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvVXJ5Tk9rdGZESTQxekQ3RDV2Vm8zdUNFUHM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbVWMA0G
CSqGSIb3DQEBCwUAA4IBAQCjclBT7unaeSuWnNfjG+oXADIluoD5wvDuGKXMa0LM
YhVXaNX3WBhB9ZSqVI0xaeuHBWU3FyQX9HNXQupBOURfS1D1Ng45vqDfE5nrybjx
O0VIy3z8xV3SfyJxSRcbTkdnZANYP24mpPpChPKA5uiGorTdt3d7vQBT8p8YXorb
c0by0A8XoUUZUXp48cIYpbtby7LUNe99+8ceNB6UiAil2Lw3WJ5osupyPinudSFT
+R/ZT5WmYkg1Sd9eZHgj2I96711Dlig+TEo/+B/bztpZfhTf7IcAT3O3yW8knEC1
7GoDGmNfW3e6ntBBoehOHPFEybuo05PCqvIUo1cGSGib
-----END CERTIFICATE-----
Generated at Sat May 18 02:05:12 2024 by rpki-client on console-ams.rpki-client.org