Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SJVscR46kVnzyxXLb-uKuApicb4.roa
File: SJVscR46kVnzyxXLb-uKuApicb4.roa (raw, json)
Hash identifier: m899xbuzKS8jTb6liGbMwcwX3VfvzXoILHqGb9GyvWw=
Subject key identifier: 48:95:6C:71:1E:3A:91:59:F3:CB:15:CB:6F:EB:8A:B8:0A:62:71:BE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0192C95A644FA2FFC814CD52CA7EF3CAC9BD
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SJVscR46kVnzyxXLb-uKuApicb4.roa
Signing time: Sat 26 Oct 2024 15:03:17 +0000
ROA not before: Sat 26 Oct 2024 15:03:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36666
IP address blocks: 5.178.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c9:5a:64:4f:a2:ff:c8:14:cd:52:ca:7e:f3:ca:c9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Oct 26 15:03:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48956c711e3a9159f3cb15cb6feb8ab80a6271be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:1a:62:b0:7e:b8:a1:59:d4:08:6d:d4:9a:
e8:47:9f:e7:66:0a:e2:21:9b:c1:ce:92:84:b6:61:
87:4c:ba:50:fc:e2:4b:48:be:6c:c0:0b:a7:28:20:
d7:55:b3:22:39:0d:e4:62:6b:0a:c7:d6:fc:39:2d:
e1:26:1c:ba:7c:d0:6d:bb:f2:62:b0:7e:5e:f3:c5:
d9:fa:ec:08:b1:fc:ac:cd:b0:56:f7:e5:71:ed:e1:
55:4a:50:eb:52:68:de:e7:79:d9:fe:14:8e:3e:ab:
af:7a:37:f2:49:db:c7:e6:ce:d9:5b:78:ea:33:b4:
62:45:32:b2:71:10:60:6e:48:c7:a8:d2:94:4f:46:
80:8c:f5:8e:3d:75:b8:b0:73:c7:fd:2f:05:a9:ad:
c1:13:eb:61:2a:e1:13:26:1d:15:43:e5:99:5e:0f:
f7:18:84:ac:75:64:cb:a9:02:57:0b:81:8a:27:03:
b1:10:0c:19:31:96:98:1e:73:64:dc:0a:d5:ca:09:
45:f2:8f:01:c8:bb:cf:65:0d:cd:e0:1e:de:cf:b9:
a9:11:14:81:49:5f:be:4c:19:8d:c2:6c:2f:d1:ca:
72:06:e4:fd:0c:b0:93:ef:95:ee:6c:f1:1d:1b:d5:
33:b0:37:21:23:1b:e5:03:49:e9:3a:33:87:4d:f9:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:95:6C:71:1E:3A:91:59:F3:CB:15:CB:6F:EB:8A:B8:0A:62:71:BE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/SJVscR46kVnzyxXLb-uKuApicb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a4:3e:2c:5d:0a:76:82:75:89:5a:33:e6:49:be:17:89:98:
39:1b:ea:2d:e2:26:d3:d7:96:dc:49:f4:e6:05:49:14:76:7a:
12:be:be:30:d1:a0:c4:04:a8:ba:e9:b0:0f:ce:5c:81:d3:40:
bd:c4:7a:10:4a:73:ed:c0:34:0f:db:28:5b:4d:42:42:f5:e4:
7c:be:db:7c:00:6b:51:5a:2d:eb:21:d5:00:f8:fe:7a:78:7b:
19:3d:48:bd:3e:4b:4d:50:97:70:a8:76:4f:09:56:db:ca:33:
f8:2d:5c:2e:43:7e:d0:fc:76:50:34:62:8b:07:79:17:d5:be:
d6:be:76:49:9e:9e:df:d4:25:a4:eb:b3:19:d0:ab:96:48:a2:
dd:78:f2:4e:b9:8d:7a:1d:88:0e:06:76:79:2a:ff:f3:44:d1:
87:2d:f8:52:7d:e3:eb:58:e5:f3:f1:c7:3c:e6:6d:0f:64:52:
a0:73:8f:eb:2a:0d:75:e9:e7:6e:8b:15:90:ee:22:2c:26:e8:
32:6b:2e:0d:4a:4d:60:b0:d0:00:bf:34:81:5b:b0:17:cd:43:
77:4d:1f:3d:60:79:17:40:8d:30:3e:8e:e4:74:ca:ce:54:62:
a5:cc:39:8e:bf:b8:79:02:09:c7:f7:f4:df:44:7e:c9:60:90:
86:0d:c3:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLJWmRPov/IFM1Syn7zysm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQxMDI2MTUwMzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODk1NmM3MTFlM2E5MTU5ZjNjYjE1Y2I2ZmViOGFiODBhNjI3MWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFEaYrB+uKFZ1Aht1JroR5/nZgri
IZvBzpKEtmGHTLpQ/OJLSL5swAunKCDXVbMiOQ3kYmsKx9b8OS3hJhy6fNBtu/Ji
sH5e88XZ+uwIsfyszbBW9+Vx7eFVSlDrUmje53nZ/hSOPquvejfySdvH5s7ZW3jq
M7RiRTKycRBgbkjHqNKUT0aAjPWOPXW4sHPH/S8Fqa3BE+thKuETJh0VQ+WZXg/3
GISsdWTLqQJXC4GKJwOxEAwZMZaYHnNk3ArVyglF8o8ByLvPZQ3N4B7ez7mpERSB
SV++TBmNwmwv0cpyBuT9DLCT75XubPEdG9UzsDchIxvlA0npOjOHTfm/FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiVbHEeOpFZ88sVy2/rirgKYnG+MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvU0pWc2NSNDZrVm56eXhYTGItdUt1QXBpY2I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJuMA0G
CSqGSIb3DQEBCwUAA4IBAQA/pD4sXQp2gnWJWjPmSb4XiZg5G+ot4ibT15bcSfTm
BUkUdnoSvr4w0aDEBKi66bAPzlyB00C9xHoQSnPtwDQP2yhbTUJC9eR8vtt8AGtR
Wi3rIdUA+P56eHsZPUi9PktNUJdwqHZPCVbbyjP4LVwuQ37Q/HZQNGKLB3kX1b7W
vnZJnp7f1CWk67MZ0KuWSKLdePJOuY16HYgOBnZ5Kv/zRNGHLfhSfePrWOXz8cc8
5m0PZFKgc4/rKg116eduixWQ7iIsJugyay4NSk1gsNAAvzSBW7AXzUN3TR89YHkX
QI0wPo7kdMrOVGKlzDmOv7h5AgnH9/TfRH7JYJCGDcNM
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:21:07 2024 by rpki-client on console-ams.rpki-client.org