Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/6d8vbaYM2pUuR_Rue51xj0XvzS0.roa
File: 6d8vbaYM2pUuR_Rue51xj0XvzS0.roa (raw, json)
Hash identifier: oF1tCXzd/AqB9OiyR5JXyDtYSO+4Lskm6DQviFNOdws=
Subject key identifier: E9:DF:2F:6D:A6:0C:DA:95:2E:47:F4:6E:7B:9D:71:8F:45:EF:CD:2D
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 018CC801BE78C5EB17F509AAC35487A0D3EF
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/6d8vbaYM2pUuR_Rue51xj0XvzS0.roa
Signing time: Tue 02 Jan 2024 02:30:06 +0000
ROA not before: Tue 02 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210756
IP address blocks: 5.181.26.0/24 maxlen: 24
2a03:90c0:b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:be:78:c5:eb:17:f5:09:aa:c3:54:87:a0:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 2 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9df2f6da60cda952e47f46e7b9d718f45efcd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:c8:b7:56:52:af:73:fe:4a:59:d6:0e:c0:
33:01:b6:62:be:3b:e2:ea:f5:bc:67:4c:02:48:e9:
d7:a2:67:cf:97:68:a9:ae:3d:f6:be:23:f3:ed:fc:
cf:22:08:05:49:0f:c3:99:54:4a:39:d0:4b:7a:04:
0e:ba:1c:6d:31:1b:60:2c:2e:00:66:00:9d:4f:6a:
40:57:a2:e3:c2:b8:ce:ed:63:d0:19:36:24:37:38:
ee:99:9b:51:9f:d2:c1:f3:9f:04:27:f7:7d:12:d7:
2b:dc:29:17:04:fa:eb:57:42:51:39:a2:20:8b:a2:
8d:ad:44:f6:6c:61:c2:1d:37:da:e2:94:af:89:d5:
12:c1:63:e9:cd:6e:bd:4f:6a:a2:d4:7b:0b:3c:25:
82:a1:ed:2c:83:40:02:80:f1:2c:62:c6:04:f7:49:
82:57:c1:51:ba:1f:d5:12:3e:8e:ac:73:cc:d1:08:
33:a8:ec:96:fd:32:6a:49:9e:b2:fe:c2:50:68:80:
1b:25:6b:ef:1e:82:b9:bd:68:fb:ee:9f:1d:06:ca:
3c:a6:f6:7e:bf:b2:36:5d:03:6c:3e:27:ff:be:f2:
ac:f8:35:ed:4f:e3:16:58:7c:1e:52:37:0c:71:1a:
02:2d:86:fd:7f:72:83:3c:28:09:ec:b0:95:57:9e:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DF:2F:6D:A6:0C:DA:95:2E:47:F4:6E:7B:9D:71:8F:45:EF:CD:2D
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/6d8vbaYM2pUuR_Rue51xj0XvzS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.26.0/24
IPv6:
2a03:90c0:b0::/44
Signature Algorithm: sha256WithRSAEncryption
d9:88:07:04:27:53:4d:73:bf:41:21:07:2c:11:77:41:72:53:
92:d7:27:ec:f8:db:be:d4:a5:5d:35:b0:45:af:f2:9a:f7:b8:
8c:64:f9:78:21:02:22:a8:a8:48:44:6f:2a:77:d5:2e:6c:d6:
25:76:dd:67:a1:53:2b:a7:59:91:d4:a7:e2:97:c3:92:c4:a6:
a8:52:7b:3e:0a:6b:bf:03:5a:c0:f2:26:c7:a3:4a:3d:c6:da:
17:69:61:0f:c7:b7:90:9d:73:0d:0d:ee:07:30:c1:6d:d9:15:
93:77:e1:e4:79:56:a5:50:b8:dc:12:f6:4a:98:c0:a5:c3:19:
f7:a7:a0:2d:e1:a1:b1:9f:1a:fe:c6:62:7b:a0:b4:e7:79:14:
d1:86:30:d3:17:72:c6:2b:f0:34:be:12:9e:bd:c8:1c:1f:50:
fc:d4:cd:61:10:44:6a:16:6a:2b:be:1f:00:5f:fc:db:ce:e9:
05:48:e1:03:1e:3a:52:68:00:a4:cc:78:fb:14:3b:16:ae:9b:
0c:16:c0:04:18:2a:30:bb:09:12:08:66:a1:41:86:27:97:e0:
30:54:46:6e:b3:66:c9:c8:20:a1:43:97:be:29:aa:8f:9e:5e:
ad:36:2d:61:42:63:7f:3f:d5:8d:76:98:7a:91:56:db:33:22:
fb:d3:af:05
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzIAb54xesX9Qmqw1SHoNPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw
MDhhZWMwHhcNMjQwMTAyMDIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWRmMmY2ZGE2MGNkYTk1MmU0N2Y0NmU3YjlkNzE4ZjQ1ZWZjZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+PIt1ZSr3P+SlnWDsAzAbZivjvi
6vW8Z0wCSOnXomfPl2iprj32viPz7fzPIggFSQ/DmVRKOdBLegQOuhxtMRtgLC4A
ZgCdT2pAV6LjwrjO7WPQGTYkNzjumZtRn9LB858EJ/d9Etcr3CkXBPrrV0JROaIg
i6KNrUT2bGHCHTfa4pSvidUSwWPpzW69T2qi1HsLPCWCoe0sg0ACgPEsYsYE90mC
V8FRuh/VEj6OrHPM0QgzqOyW/TJqSZ6y/sJQaIAbJWvvHoK5vWj77p8dBso8pvZ+
v7I2XQNsPif/vvKs+DXtT+MWWHweUjcMcRoCLYb9f3KDPCgJ7LCVV56c7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOnfL22mDNqVLkf0bnudcY9F780tMB8GA1UdIwQY
MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt
YjA3ZDg0MTZhZTRhLzEvNmQ4dmJhWU0ycFV1Ul9SdWU1MXhqMFh2elMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh
LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQABbUaMA8E
AgACMAkDBwQqA5DAALAwDQYJKoZIhvcNAQELBQADggEBANmIBwQnU01zv0EhBywR
d0FyU5LXJ+z4277UpV01sEWv8pr3uIxk+XghAiKoqEhEbyp31S5s1iV23WehUyun
WZHUp+KXw5LEpqhSez4Ka78DWsDyJsejSj3G2hdpYQ/Ht5Cdcw0N7gcwwW3ZFZN3
4eR5VqVQuNwS9kqYwKXDGfenoC3hobGfGv7GYnugtOd5FNGGMNMXcsYr8DS+Ep69
yBwfUPzUzWEQRGoWaiu+HwBf/NvO6QVI4QMeOlJoAKTMePsUOxaumwwWwAQYKjC7
CRIIZqFBhieX4DBURm6zZsnIIKFDl74pqo+eXq02LWFCY38/1Y12mHqRVtszIvvT
rwU=
-----END CERTIFICATE-----
Generated at Thu Sep 19 20:07:30 2024 by rpki-client on console-ams.rpki-client.org