Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gdGawkfaXZnhRhL5lzH2mNDTuMI.roa
File: gdGawkfaXZnhRhL5lzH2mNDTuMI.roa (raw, json)
Hash identifier: dbLleylsI7Y37zO1QMlYl8G5znqqm6t0t3pBrCWVddw=
Subject key identifier: 81:D1:9A:C2:47:DA:5D:99:E1:46:12:F9:97:31:F6:98:D0:D3:B8:C2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB30D93F80C622EB0399395CFF3637
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gdGawkfaXZnhRhL5lzH2mNDTuMI.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202469
IP address blocks: 5.180.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:30:d9:3f:80:c6:22:eb:03:99:39:5c:ff:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d19ac247da5d99e14612f99731f698d0d3b8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:95:9e:38:4f:dd:8b:ea:e4:a6:29:a0:cd:
72:b1:dc:ce:e1:72:39:b8:20:c5:08:dd:9d:fd:26:
46:49:f9:b6:90:78:1a:b8:0d:3b:ef:49:2c:d8:29:
40:0f:4c:f9:48:d9:18:df:61:a9:08:fb:29:37:60:
95:e2:3b:fe:de:3c:92:4f:66:b2:67:5a:9f:1a:26:
7d:54:49:9f:aa:f2:ed:c6:38:4e:bf:cc:d9:40:b8:
c6:c8:c2:1d:ca:41:34:17:5e:47:f0:77:b6:9d:52:
93:6f:1f:a6:c2:4c:3e:ee:4e:38:ae:8b:2c:19:14:
2e:5f:51:63:6d:02:0d:53:0f:4e:be:11:d0:b6:41:
de:33:ec:2f:3f:a6:50:db:83:d7:25:85:61:6a:11:
5b:0e:63:b7:f5:e2:04:be:a0:d2:e4:51:d6:ef:b7:
6e:e2:77:88:6b:1a:c7:2b:8b:cf:d0:06:8a:20:38:
a5:73:96:19:ff:e2:0f:38:3c:b9:88:28:fd:71:5a:
a4:fe:17:35:b4:03:a5:43:c6:c3:14:97:30:65:7d:
e6:04:9e:7b:06:78:26:98:43:b9:40:58:f4:de:ba:
87:2e:1a:91:03:97:5f:ba:ae:f3:12:ca:3a:9d:f5:
9f:d0:c4:93:a1:c9:bf:dd:1b:f9:4c:00:70:5f:2b:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D1:9A:C2:47:DA:5D:99:E1:46:12:F9:97:31:F6:98:D0:D3:B8:C2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/gdGawkfaXZnhRhL5lzH2mNDTuMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:e0:dd:f5:0e:14:f2:a8:c3:e2:f4:ff:a9:08:34:8a:35:1b:
58:3b:ad:48:e0:c3:96:42:c6:d8:92:e8:20:ce:90:24:30:ff:
f4:8e:ba:0e:e9:c6:32:0a:2b:6b:54:60:62:55:c4:fd:8a:cb:
3e:dc:82:0e:f7:23:6d:13:00:37:40:e2:86:44:03:10:02:0a:
ba:01:f2:8c:61:04:32:ce:68:2e:c7:ed:23:a9:3a:c1:29:0f:
63:50:a2:0b:68:1b:38:e0:cb:4d:5c:68:1a:f9:02:00:e4:20:
07:9c:44:a6:35:8f:c1:f3:6b:2f:e4:68:89:f6:64:86:a4:00:
90:07:16:f8:ce:ee:54:38:af:32:a0:59:f2:c5:57:9a:d9:fa:
fe:50:a9:e0:e4:cf:a2:8d:ad:ca:99:c6:69:ef:fc:8e:6e:2b:
cf:ef:a1:7c:43:aa:66:eb:28:84:84:b0:b6:f5:85:0d:9b:02:
87:a3:95:2e:94:de:78:17:b6:a9:2a:29:20:0c:09:d1:2d:17:
6e:d6:03:78:18:4e:1f:de:57:68:7c:d4:7f:8c:2d:d7:9e:59:
f5:f5:15:8c:4d:10:7d:7a:77:f2:d8:58:bb:64:8a:65:ed:81:
ff:fa:f3:cd:a2:17:f0:70:45:4c:f2:c3:4e:90:7a:69:3c:19:
bb:11:4d:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2zDZP4DGIusDmTlc/zY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQxOWFjMjQ3ZGE1ZDk5ZTE0NjEyZjk5NzMxZjY5OGQwZDNiOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdKVnjhP3Yvq5KYpoM1ysdzO4XI5
uCDFCN2d/SZGSfm2kHgauA0770ks2ClAD0z5SNkY32GpCPspN2CV4jv+3jyST2ay
Z1qfGiZ9VEmfqvLtxjhOv8zZQLjGyMIdykE0F15H8He2nVKTbx+mwkw+7k44ross
GRQuX1FjbQINUw9OvhHQtkHeM+wvP6ZQ24PXJYVhahFbDmO39eIEvqDS5FHW77du
4neIaxrHK4vP0AaKIDilc5YZ/+IPODy5iCj9cVqk/hc1tAOlQ8bDFJcwZX3mBJ57
BngmmEO5QFj03rqHLhqRA5dfuq7zEso6nfWf0MSTocm/3Rv5TABwXyudXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHRmsJH2l2Z4UYS+Zcx9pjQ07jCMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvZ2RHYXdrZmFYWm5oUmhMNWx6SDJtTkRUdU1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbQEMA0G
CSqGSIb3DQEBCwUAA4IBAQB/4N31DhTyqMPi9P+pCDSKNRtYO61I4MOWQsbYkugg
zpAkMP/0jroO6cYyCitrVGBiVcT9iss+3IIO9yNtEwA3QOKGRAMQAgq6AfKMYQQy
zmgux+0jqTrBKQ9jUKILaBs44MtNXGga+QIA5CAHnESmNY/B82sv5GiJ9mSGpACQ
Bxb4zu5UOK8yoFnyxVea2fr+UKng5M+ija3KmcZp7/yObivP76F8Q6pm6yiEhLC2
9YUNmwKHo5UulN54F7apKikgDAnRLRdu1gN4GE4f3ldofNR/jC3Xnln19RWMTRB9
enfy2Fi7ZIpl7YH/+vPNohfwcEVM8sNOkHppPBm7EU1f
-----END CERTIFICATE-----
Generated at Sat May 4 18:15:01 2024 by rpki-client on console-fra.rpki-client.org