Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5atk732SrmRBfqTWzyCXaGj5_gQ.roa
File: 5atk732SrmRBfqTWzyCXaGj5_gQ.roa (raw, json)
Hash identifier: W/g6gOacErd/sQBS706rb3whFV71s3VllOOnDxrtRlk=
Subject key identifier: E5:AB:64:EF:7D:92:AE:64:41:7E:A4:D6:CF:20:97:68:68:F9:FE:04
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E09F6780C660E749BF15F43FAD754
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5atk732SrmRBfqTWzyCXaGj5_gQ.roa
Signing time: Mon 01 Jan 2024 14:29:32 +0000
ROA not before: Mon 01 Jan 2024 14:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 37.139.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:09:f6:78:0c:66:0e:74:9b:f1:5f:43:fa:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5ab64ef7d92ae64417ea4d6cf20976868f9fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:c7:b9:6c:5f:43:eb:ee:4c:44:52:9c:48:
21:4d:3e:47:a7:7f:3e:f9:9a:f0:79:d8:70:61:2f:
dd:80:27:8f:64:c1:b8:49:93:02:4c:b8:b1:9f:e1:
8c:77:a6:ad:ea:66:22:6c:19:dc:11:e4:8d:ec:a7:
35:82:79:cf:88:fc:92:ff:92:3d:ab:57:fc:af:09:
33:11:46:40:7e:f7:db:47:e3:31:b0:f4:1b:6d:8d:
c9:e0:79:49:63:9c:24:de:05:0a:65:c7:9a:0f:1c:
c0:03:6a:79:74:39:57:9b:b7:66:4b:2b:8a:cd:ff:
f2:8f:73:db:a2:e8:6b:fc:f5:c4:67:0d:35:ba:59:
32:3c:5d:27:db:0c:cb:fb:36:36:8b:df:e6:b3:37:
71:79:c3:c8:4a:e5:ce:c5:c6:dc:30:bf:35:2b:8b:
48:0b:92:94:74:16:09:81:aa:b0:d7:eb:cc:06:cd:
bd:94:e3:47:da:8b:5c:c3:73:34:08:36:45:21:50:
8c:f3:99:84:28:c4:bb:c2:9e:d3:3f:ad:4c:e0:80:
af:a5:25:fb:14:35:6f:56:fe:05:b1:cb:13:6f:a2:
b8:d7:7f:bd:84:e9:96:07:0e:9a:b7:11:db:9d:9e:
3b:f9:d5:03:33:c3:71:4f:ea:26:77:36:55:53:f0:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AB:64:EF:7D:92:AE:64:41:7E:A4:D6:CF:20:97:68:68:F9:FE:04
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5atk732SrmRBfqTWzyCXaGj5_gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:3e:b9:a4:fd:8c:8f:0a:cf:4a:58:06:72:e3:92:0d:32:eb:
d5:95:c9:db:d7:5a:67:79:78:13:89:7a:d9:07:37:eb:00:8e:
35:37:00:bf:a8:21:3e:2f:ea:cb:a1:97:71:66:a8:1a:6b:23:
37:bb:8e:ea:a6:b2:77:fa:42:8d:08:d0:c2:5d:7f:58:eb:91:
73:e2:f1:47:bf:3e:17:f2:17:71:c3:12:54:b1:d9:0d:20:ca:
86:1a:1f:fd:6d:a8:6b:0e:40:93:5d:0e:28:6c:60:a9:77:61:
e8:5d:3c:80:c9:21:69:aa:22:6b:d4:c4:60:8e:1d:3e:2a:6b:
6a:4d:84:2c:74:bf:a9:9d:9a:72:44:e1:62:f5:e6:03:bf:3c:
6c:b4:03:78:01:9b:b5:ec:54:74:6b:29:e3:10:15:5a:1c:01:
4f:35:5f:09:03:9b:23:29:c1:66:3c:3d:96:4b:c4:5c:46:17:
9e:c4:e3:b0:37:83:4c:09:de:27:54:8d:65:8c:7e:e9:d7:63:
35:06:ef:eb:b6:00:bb:a0:b2:0f:27:83:9a:42:16:b1:81:af:
19:94:62:c7:68:e8:fd:6b:0c:a3:57:a7:9c:c8:18:e6:9c:64:
37:a4:93:36:53:a2:cb:a9:cc:4d:a6:ab:14:9b:28:9b:f4:46:
09:3d:4f:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgn2eAxmDnSb8V9D+tdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWFiNjRlZjdkOTJhZTY0NDE3ZWE0ZDZjZjIwOTc2ODY4ZjlmZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGTHuWxfQ+vuTERSnEghTT5Hp38+
+ZrwedhwYS/dgCePZMG4SZMCTLixn+GMd6at6mYibBncEeSN7Kc1gnnPiPyS/5I9
q1f8rwkzEUZAfvfbR+MxsPQbbY3J4HlJY5wk3gUKZceaDxzAA2p5dDlXm7dmSyuK
zf/yj3Pbouhr/PXEZw01ulkyPF0n2wzL+zY2i9/mszdxecPISuXOxcbcML81K4tI
C5KUdBYJgaqw1+vMBs29lONH2otcw3M0CDZFIVCM85mEKMS7wp7TP61M4ICvpSX7
FDVvVv4FscsTb6K413+9hOmWBw6atxHbnZ47+dUDM8NxT+omdzZVU/DMxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWrZO99kq5kQX6k1s8gl2ho+f4EMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvNWF0azczMlNybVJCZnFUV3p5Q1hhR2o1X2dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYs0MA0G
CSqGSIb3DQEBCwUAA4IBAQC5Prmk/YyPCs9KWAZy45INMuvVlcnb11pneXgTiXrZ
BzfrAI41NwC/qCE+L+rLoZdxZqgaayM3u47qprJ3+kKNCNDCXX9Y65Fz4vFHvz4X
8hdxwxJUsdkNIMqGGh/9bahrDkCTXQ4obGCpd2HoXTyAySFpqiJr1MRgjh0+Kmtq
TYQsdL+pnZpyROFi9eYDvzxstAN4AZu17FR0aynjEBVaHAFPNV8JA5sjKcFmPD2W
S8RcRheexOOwN4NMCd4nVI1ljH7p12M1Bu/rtgC7oLIPJ4OaQhaxga8ZlGLHaOj9
awyjV6ecyBjmnGQ3pJM2U6LLqcxNpqsUmyib9EYJPU/o
-----END CERTIFICATE-----
Generated at Sun May 12 10:24:00 2024 by rpki-client on console-ams.rpki-client.org