Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qOofSTgZO5-rmn3TbJiq7k_uTjU.roa
File: qOofSTgZO5-rmn3TbJiq7k_uTjU.roa (raw, json)
Hash identifier: jOQcqjxTY3QPRihDq0BX0ZP3AsSQswsvgdANrgE9UiI=
Subject key identifier: A8:EA:1F:49:38:19:3B:9F:AB:9A:7D:D3:6C:98:AA:EE:4F:EE:4E:35
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013386ADBBA8204A74277B4C3456D4
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qOofSTgZO5-rmn3TbJiq7k_uTjU.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 5.152.182.0/24 maxlen: 24
5.152.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:33:86:ad:bb:a8:20:4a:74:27:7b:4c:34:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8ea1f4938193b9fab9a7dd36c98aaee4fee4e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:d3:66:fa:e1:e2:7f:6e:e1:0e:38:86:8d:
36:04:32:f3:ee:7e:13:b4:59:0b:8f:29:45:e1:5b:
75:16:6d:68:42:f0:e8:bf:d3:d4:51:e8:98:ce:2c:
5e:73:1a:47:9f:8c:50:a4:2c:ee:0c:99:1a:4c:65:
e2:10:9b:69:4e:30:86:07:bf:8e:4c:e2:5e:3f:89:
59:39:98:5e:38:9f:b5:d2:fb:7b:6b:1a:b8:fa:28:
43:67:33:24:e0:c6:a8:f7:da:a0:a2:e2:4a:74:6e:
49:b5:f4:7e:c3:bd:f1:3d:ab:ab:42:9d:45:b8:96:
0e:2e:6e:e0:f7:a5:da:42:d7:07:40:4a:ad:bd:12:
e1:23:f6:b9:37:7e:e5:90:42:80:13:e3:40:bd:19:
cf:85:64:eb:d4:58:56:ee:1e:bc:c5:a6:00:0a:f3:
79:07:02:2d:a2:87:1a:1a:ed:df:29:ef:b2:73:54:
1b:61:68:70:c3:cf:00:00:96:1a:5f:eb:f7:ba:c9:
0c:24:2f:24:bb:a4:b4:34:7a:61:90:25:53:40:8d:
ce:5a:0f:c5:18:2c:d1:32:ca:45:1a:c3:a1:e4:a3:
c6:18:30:6f:d0:e7:41:58:65:ad:46:7a:14:b5:0d:
e3:ac:da:8a:b6:9f:67:8d:52:94:0b:43:3c:2e:87:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:1F:49:38:19:3B:9F:AB:9A:7D:D3:6C:98:AA:EE:4F:EE:4E:35
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qOofSTgZO5-rmn3TbJiq7k_uTjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.182.0/23
Signature Algorithm: sha256WithRSAEncryption
23:06:66:62:84:78:26:bd:87:0d:ae:4f:0d:18:a4:69:ba:30:
05:97:a9:4a:c5:93:26:65:40:74:36:dd:6b:75:13:4a:7a:3e:
44:dc:06:4e:d6:b5:bc:83:f0:fa:76:49:76:69:f9:1d:d0:dc:
6c:6d:a7:76:32:26:ed:38:9a:06:0c:13:b4:52:85:73:20:3e:
43:6c:8d:ca:79:6d:4c:f0:0c:6c:e1:53:ac:62:4c:f6:1f:05:
97:3b:41:42:e9:da:8c:a2:4d:0e:da:7c:60:71:09:b7:70:bb:
62:a2:14:3b:ab:4d:9e:8d:dc:00:b7:38:8a:45:10:14:bc:80:
09:4c:f5:86:f0:b2:b0:67:88:5e:4e:48:2b:2b:2f:9b:fd:cd:
34:29:c2:35:c9:1d:25:1d:e9:96:41:86:bd:2f:cb:41:de:86:
fd:29:f8:01:dc:90:99:a5:c5:82:f9:b6:a6:41:c0:d3:97:e4:
5d:e5:0d:72:07:0f:91:c7:91:44:34:83:e8:f5:78:d8:0d:fc:
7f:9e:72:65:ab:0a:82:6d:2a:2e:38:eb:d1:26:db:26:eb:3c:
89:dd:cd:e1:a0:e8:6a:af:86:5d:31:90:e4:d1:31:3b:55:16:
f2:ff:a9:27:b2:d0:da:8b:df:42:be:2c:a6:aa:b9:df:14:c6:
85:98:a3:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATOGrbuoIEp0J3tMNFbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjQwMTAyMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGVhMWY0OTM4MTkzYjlmYWI5YTdkZDM2Yzk4YWFlZTRmZWU0ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXDTZvrh4n9u4Q44ho02BDLz7n4T
tFkLjylF4Vt1Fm1oQvDov9PUUeiYzixecxpHn4xQpCzuDJkaTGXiEJtpTjCGB7+O
TOJeP4lZOZheOJ+10vt7axq4+ihDZzMk4Mao99qgouJKdG5JtfR+w73xPaurQp1F
uJYOLm7g96XaQtcHQEqtvRLhI/a5N37lkEKAE+NAvRnPhWTr1FhW7h68xaYACvN5
BwItoocaGu3fKe+yc1QbYWhww88AAJYaX+v3uskMJC8ku6S0NHphkCVTQI3OWg/F
GCzRMspFGsOh5KPGGDBv0OdBWGWtRnoUtQ3jrNqKtp9njVKUC0M8LofVIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKjqH0k4GTufq5p902yYqu5P7k41MB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvcU9vZlNUZ1pPNS1ybW4zVGJKaXE3a191VGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZi2MA0G
CSqGSIb3DQEBCwUAA4IBAQAjBmZihHgmvYcNrk8NGKRpujAFl6lKxZMmZUB0Nt1r
dRNKej5E3AZO1rW8g/D6dkl2afkd0Nxsbad2MibtOJoGDBO0UoVzID5DbI3KeW1M
8Axs4VOsYkz2HwWXO0FC6dqMok0O2nxgcQm3cLtiohQ7q02ejdwAtziKRRAUvIAJ
TPWG8LKwZ4heTkgrKy+b/c00KcI1yR0lHemWQYa9L8tB3ob9KfgB3JCZpcWC+bam
QcDTl+Rd5Q1yBw+Rx5FENIPo9XjYDfx/nnJlqwqCbSouOOvRJtsm6zyJ3c3hoOhq
r4ZdMZDk0TE7VRby/6knstDai99CviymqrnfFMaFmKML
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:25:45 2024 by rpki-client on console-ams.rpki-client.org