Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa
File: kkp3rnfpI5tiwhug2G7B4N2KPAw.roa (raw, json)
Hash identifier: LTXjMrq/XnoEjFG9BXM0BLUt+mssSOXU/IW/Nz3Guv4=
Subject key identifier: 92:4A:77:AE:77:E9:23:9B:62:C2:1B:A0:D8:6E:C1:E0:DD:8A:3C:0C
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 018CC4928BCBF22FE1D81BD49B1E709CD2CE
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa
Signing time: Mon 01 Jan 2024 10:29:47 +0000
ROA not before: Mon 01 Jan 2024 10:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197595
IP address blocks: 5.133.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:8b:cb:f2:2f:e1:d8:1b:d4:9b:1e:70:9c:d2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 10:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=924a77ae77e9239b62c21ba0d86ec1e0dd8a3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:69:a2:ae:37:a7:7f:97:c0:b3:4a:8f:7c:
f9:84:dd:97:39:ec:fc:f1:34:c5:d3:b6:3a:77:4b:
0c:c0:8f:19:d8:f5:68:c0:3c:e6:f8:ef:22:87:c5:
bd:b8:b8:c0:da:3d:d6:02:70:71:2b:5b:94:cf:57:
20:83:14:15:c0:ac:d4:69:2e:98:30:3e:c1:36:a7:
22:c6:46:35:da:62:93:24:db:5b:f9:b2:1d:40:bf:
a5:99:09:c0:36:20:78:04:92:27:64:e3:c0:ee:ce:
55:72:90:6b:74:59:31:eb:35:b2:a1:23:39:f1:3e:
67:b7:60:69:6c:de:ab:0d:b3:47:e9:31:98:f2:9a:
bf:da:07:89:fe:36:4f:92:7f:67:0e:f7:08:8e:75:
29:25:48:da:83:96:81:8c:75:e2:30:ad:c4:36:e2:
1b:cf:63:05:46:68:4a:dc:bc:9e:11:99:05:cd:14:
90:db:db:a7:85:13:cf:14:e5:b0:02:14:37:48:28:
a3:56:4f:e6:5e:16:bf:ad:7f:e0:04:1f:51:63:89:
a9:e5:e8:bc:a6:92:f7:d7:6b:af:81:0e:17:14:0f:
45:e4:b3:41:89:b8:1e:2d:22:ea:91:3b:b3:78:f7:
f0:0b:f2:ef:fa:9b:47:31:a6:d0:b6:9b:e1:a0:e3:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:77:AE:77:E9:23:9B:62:C2:1B:A0:D8:6E:C1:E0:DD:8A:3C:0C
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
Signature Algorithm: sha256WithRSAEncryption
cf:79:c3:fa:59:1b:a7:f7:65:c6:ce:2d:f4:5b:b3:d2:9e:6a:
e0:e7:ce:15:b0:86:63:be:ff:49:92:ce:21:dc:37:72:2a:0a:
a9:92:ae:94:59:53:65:9d:7d:0e:ec:d0:1f:a0:81:4b:59:0e:
40:90:84:43:1c:22:a8:80:80:12:26:58:4a:ea:ce:4f:3c:68:
7e:15:04:67:88:0c:80:c1:ed:01:31:e6:60:cd:66:7a:b7:53:
59:4e:b2:c3:1c:77:5c:00:a0:b0:a8:fe:7c:f8:e1:4d:66:ed:
a0:83:28:5b:07:db:e6:52:95:44:a8:52:db:08:a8:a4:92:73:
97:18:92:9c:df:d3:20:e2:8f:80:cd:e6:20:5e:e6:25:0a:b3:
2e:03:8e:e9:33:20:ba:10:5a:9f:62:fc:e9:93:71:fd:59:88:
82:47:e2:4a:11:20:d7:a3:5b:04:5c:c3:09:6b:72:ad:94:13:
95:bb:2d:69:eb:83:64:42:a2:da:04:3e:d3:bf:9b:e5:c5:62:
52:b1:b6:83:bf:04:bd:23:27:03:ca:4c:93:d7:db:4a:3e:07:
7a:43:8e:3a:bb:b1:24:df:c7:92:97:81:7d:93:e1:8a:08:b8:
9a:52:d5:06:2b:0d:bd:94:df:ba:b8:27:c7:a6:fa:46:cb:0e:
6b:f5:13:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkovL8i/h2BvUmx5wnNLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4
MDQ3MjgwHhcNMjQwMTAxMTAyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjRhNzdhZTc3ZTkyMzliNjJjMjFiYTBkODZlYzFlMGRkOGEzYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9poq43p3+XwLNKj3z5hN2XOez8
8TTF07Y6d0sMwI8Z2PVowDzm+O8ih8W9uLjA2j3WAnBxK1uUz1cggxQVwKzUaS6Y
MD7BNqcixkY12mKTJNtb+bIdQL+lmQnANiB4BJInZOPA7s5VcpBrdFkx6zWyoSM5
8T5nt2BpbN6rDbNH6TGY8pq/2geJ/jZPkn9nDvcIjnUpJUjag5aBjHXiMK3ENuIb
z2MFRmhK3LyeEZkFzRSQ29unhRPPFOWwAhQ3SCijVk/mXha/rX/gBB9RY4mp5ei8
ppL312uvgQ4XFA9F5LNBibgeLSLqkTuzePfwC/Lv+ptHMabQtpvhoOO0+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJKd6536SObYsIboNhuweDdijwMMB8GA1UdIwQY
MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt
ZGFiNmI4M2NmN2VjLzEva2twM3JuZnBJNXRpd2h1ZzJHN0I0TjJLUEF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj
LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFBYXAMA0G
CSqGSIb3DQEBCwUAA4IBAQDPecP6WRun92XGzi30W7PSnmrg584VsIZjvv9Jks4h
3DdyKgqpkq6UWVNlnX0O7NAfoIFLWQ5AkIRDHCKogIASJlhK6s5PPGh+FQRniAyA
we0BMeZgzWZ6t1NZTrLDHHdcAKCwqP58+OFNZu2ggyhbB9vmUpVEqFLbCKikknOX
GJKc39Mg4o+AzeYgXuYlCrMuA47pMyC6EFqfYvzpk3H9WYiCR+JKESDXo1sEXMMJ
a3KtlBOVuy1p64NkQqLaBD7Tv5vlxWJSsbaDvwS9IycDykyT19tKPgd6Q446u7Ek
38eSl4F9k+GKCLiaUtUGKw29lN+6uCfHpvpGyw5r9ROx
-----END CERTIFICATE-----
Generated at Sat Jun 15 10:37:34 2024 by rpki-client on console-ams.rpki-client.org