Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/n5edE_HhDhRRjCYZPhfW3-4vADg.roa
File: n5edE_HhDhRRjCYZPhfW3-4vADg.roa (raw, json)
Hash identifier: 7cqWviwqgrhExaYXxgVj3GBkQs0cHYeKvd8tQU+FuHg=
Subject key identifier: 9F:97:9D:13:F1:E1:0E:14:51:8C:26:19:3E:17:D6:DF:EE:2F:00:38
Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Certificate serial: 018CC2DAEADDCFDAB0FD04805CC6E74A4F98
Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/n5edE_HhDhRRjCYZPhfW3-4vADg.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199477
IP address blocks: 185.11.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:dd:cf:da:b0:fd:04:80:5c:c6:e7:4a:4f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f979d13f1e10e14518c26193e17d6dfee2f0038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:7b:2f:8c:54:8d:79:65:39:ec:cd:f5:9c:
b2:d4:d4:78:5e:a1:32:35:47:ab:12:fa:cb:40:cb:
1f:85:20:6e:4e:dc:f1:a5:bb:d5:a5:43:d2:38:3c:
69:41:c7:a5:f6:ee:a6:4f:b4:cc:7a:85:b0:bf:bd:
94:aa:b9:f9:2d:ce:75:14:64:cf:cf:fb:45:f5:5b:
76:59:5d:e2:f9:e9:ef:20:d0:f9:fb:84:8d:32:31:
02:b5:cd:35:6a:21:52:3a:6c:9a:d4:44:55:73:e5:
53:0a:cc:06:de:fd:ca:5f:c8:c8:df:42:2a:ef:43:
76:a1:a5:c2:ea:94:27:06:2b:5a:35:9a:36:8c:0c:
e1:9a:b0:fd:40:14:3b:44:5f:6c:ab:53:a3:8d:1b:
e1:d0:e0:40:20:13:0c:4c:1d:60:73:04:8e:5a:63:
d8:25:4c:7b:e6:7c:14:24:ad:dd:13:e6:15:8d:89:
dc:86:e3:4e:f4:d0:24:7d:b0:e2:85:07:99:1c:cf:
5b:e5:82:b0:fd:d0:13:86:b1:39:48:f9:37:85:f5:
6d:c9:7f:1f:21:00:ca:5b:54:6f:e2:c5:7f:52:1e:
5e:ca:f7:4e:ff:6b:22:7d:44:3e:ac:de:4a:0e:79:
38:d4:c2:e7:46:f2:6e:9e:62:b1:45:36:75:93:d7:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:9D:13:F1:E1:0E:14:51:8C:26:19:3E:17:D6:DF:EE:2F:00:38
X509v3 Authority Key Identifier:
keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/n5edE_HhDhRRjCYZPhfW3-4vADg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.52.0/22
Signature Algorithm: sha256WithRSAEncryption
84:3c:5c:f1:f4:3f:bb:23:d2:62:c0:d5:d5:6f:84:c2:39:97:
54:fc:25:dd:34:cb:47:a2:63:87:33:d7:ad:24:4f:a5:74:d8:
a6:40:7e:6f:fb:de:b1:cd:9c:00:d9:b7:8d:01:59:de:62:f0:
64:17:17:99:4d:37:a0:46:b9:73:ec:c8:88:60:0b:8f:a0:45:
03:ea:26:f3:f0:d8:79:8f:98:2e:7e:c9:b4:3e:6a:1e:18:73:
5e:0f:35:a4:97:7b:5a:8d:1d:d1:8c:34:dd:50:1f:1f:b3:34:
40:7f:f9:c7:1f:67:9b:9f:88:19:a4:80:0e:db:a5:3e:89:ad:
fb:10:8d:a2:65:22:6e:af:d3:03:14:e7:8c:a6:f2:39:80:25:
81:46:03:41:55:da:4a:4c:16:8d:fd:37:92:a7:e5:73:09:20:
3e:19:44:40:33:14:1d:f1:10:f1:c4:b0:78:3e:7f:a1:c7:62:
76:ae:fb:41:f2:01:9e:59:23:af:76:20:c2:6c:76:70:dc:17:
ce:e2:37:ee:64:c5:b7:de:bf:9a:b4:2b:c0:23:44:f7:69:fa:
1b:94:22:78:9b:36:ce:e6:ed:76:60:a2:af:07:31:b0:9a:1f:
e4:f9:10:48:82:fd:52:6a:a6:e2:88:a1:c4:50:93:ce:ef:c9:
fa:31:31:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2urdz9qw/QSAXMbnSk+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4
YzQyYWMwHhcNMjQwMTAxMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjk3OWQxM2YxZTEwZTE0NTE4YzI2MTkzZTE3ZDZkZmVlMmYwMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kl7L4xUjXllOezN9Zyy1NR4XqEy
NUerEvrLQMsfhSBuTtzxpbvVpUPSODxpQcel9u6mT7TMeoWwv72Uqrn5Lc51FGTP
z/tF9Vt2WV3i+envIND5+4SNMjECtc01aiFSOmya1ERVc+VTCswG3v3KX8jI30Iq
70N2oaXC6pQnBitaNZo2jAzhmrD9QBQ7RF9sq1OjjRvh0OBAIBMMTB1gcwSOWmPY
JUx75nwUJK3dE+YVjYnchuNO9NAkfbDihQeZHM9b5YKw/dAThrE5SPk3hfVtyX8f
IQDKW1Rv4sV/Uh5eyvdO/2sifUQ+rN5KDnk41MLnRvJunmKxRTZ1k9cs3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+XnRPx4Q4UUYwmGT4X1t/uLwA4MB8GA1UdIwQY
MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt
OTA3OTVmYjM5MjhjLzEvbjVlZEVfSGhEaFJSakNZWlBoZlczLTR2QURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj
LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQs0MA0G
CSqGSIb3DQEBCwUAA4IBAQCEPFzx9D+7I9JiwNXVb4TCOZdU/CXdNMtHomOHM9et
JE+ldNimQH5v+96xzZwA2beNAVneYvBkFxeZTTegRrlz7MiIYAuPoEUD6ibz8Nh5
j5gufsm0PmoeGHNeDzWkl3tajR3RjDTdUB8fszRAf/nHH2ebn4gZpIAO26U+ia37
EI2iZSJur9MDFOeMpvI5gCWBRgNBVdpKTBaN/TeSp+VzCSA+GURAMxQd8RDxxLB4
Pn+hx2J2rvtB8gGeWSOvdiDCbHZw3BfO4jfuZMW33r+atCvAI0T3afoblCJ4mzbO
5u12YKKvBzGwmh/k+RBIgv1SaqbiiKHEUJPO78n6MTEE
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:38 2024 by rpki-client on console-fra.rpki-client.org