Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/5HcGwliJpgWS7-f23ONCxA0a9no.roa
File: 5HcGwliJpgWS7-f23ONCxA0a9no.roa (raw, json)
Hash identifier: WH7kzacmuUDqVWAqi3moBjmfnIc3KjgI57AOOJmD9eQ=
Subject key identifier: E4:77:06:C2:58:89:A6:05:92:EF:E7:F6:DC:E3:42:C4:0D:1A:F6:7A
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 018CC5000ECC4FAF4BD7CB987E96DC8CAF03
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/5HcGwliJpgWS7-f23ONCxA0a9no.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64266
IP address blocks: 176.115.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0e:cc:4f:af:4b:d7:cb:98:7e:96:dc:8c:af:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e47706c25889a60592efe7f6dce342c40d1af67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:c2:15:e9:86:c1:b2:7f:03:20:4b:0f:b1:
a6:02:b4:83:d8:19:c7:00:67:9d:9f:fc:ff:b9:31:
dc:14:d0:57:ac:d3:48:51:d5:20:03:f9:ed:73:fb:
d4:77:11:86:15:e7:26:39:ce:86:f2:99:0e:95:21:
20:2a:a0:dd:72:6c:38:e4:92:b8:ac:bc:1a:6d:e8:
55:fa:26:88:de:b2:7a:6f:a4:ca:00:8b:e1:f9:69:
91:ac:90:fa:41:d1:d2:e6:28:36:92:c0:2f:82:0c:
13:92:6b:6f:7c:4a:cd:55:bd:cb:71:4a:47:be:6a:
3c:6f:cf:f3:de:ac:d6:ee:66:e3:52:ec:3b:bd:29:
c4:57:36:42:d8:ca:f4:4d:8e:e3:5c:7c:f3:da:fc:
86:d8:8c:d0:29:22:e0:87:72:11:89:b0:4f:1a:d5:
26:0c:03:28:f9:39:7b:19:40:c3:f1:9e:84:a2:57:
49:ec:d5:5d:5b:16:6d:4a:10:d6:82:c0:ca:a7:07:
1b:a7:85:f0:c4:5a:76:2d:80:50:6e:4f:8a:dd:23:
43:05:6b:ac:2a:22:79:5d:90:09:b2:18:ae:5c:fe:
29:dd:48:ae:1b:11:38:fd:4f:92:ef:d8:82:08:3b:
cc:a4:2d:77:6d:d4:b5:dc:7a:a6:9b:4b:e1:27:a4:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:77:06:C2:58:89:A6:05:92:EF:E7:F6:DC:E3:42:C4:0D:1A:F6:7A
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/5HcGwliJpgWS7-f23ONCxA0a9no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.188.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f2:20:6c:b6:5c:24:a1:e1:79:a4:10:1b:6b:e8:48:33:86:
87:55:22:9b:f2:8b:67:1e:e2:ec:fa:90:ef:32:3d:d9:4d:6e:
55:1d:ba:14:1a:59:24:82:9c:1e:84:65:ac:f5:63:c5:28:da:
64:29:ba:86:10:d6:6f:88:66:30:1c:e9:30:f0:34:23:58:96:
34:53:6c:98:58:5a:2c:62:be:72:8b:5c:b0:a9:17:f4:a1:13:
fe:0f:8d:dd:41:18:6d:52:30:12:79:47:50:38:7a:fc:1d:be:
0e:fe:3c:6f:43:68:b6:1a:09:f7:4a:05:27:1e:e5:51:6c:e3:
e0:04:03:a3:e6:21:47:0f:dd:a1:09:e9:b4:a7:f5:05:6b:e6:
de:5c:c2:7c:b1:ea:41:13:22:24:35:61:48:05:26:50:05:ae:
47:d8:a0:c0:c4:b7:9f:7f:9b:07:2e:6a:bf:7d:04:8c:80:15:
27:56:49:8c:9a:31:bd:c1:7d:5f:13:0a:b5:f8:04:5b:e0:a6:
0d:43:54:96:1e:8f:1b:ff:2f:67:59:7a:ca:f2:08:13:88:f4:
84:74:e5:c2:54:5d:32:56:08:a7:58:9d:29:0e:97:11:57:77:
67:a2:15:15:04:51:2f:f3:5c:70:84:7d:85:a3:dc:20:d2:d6:
64:62:6b:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAA7MT69L18uYfpbcjK8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGJlYTNmY2MzY2JjZWRjODI5MTljZjU3Yzc0MTA4YmFl
YTM2OWUwHhcNMjQwMTAxMTIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDc3MDZjMjU4ODlhNjA1OTJlZmU3ZjZkY2UzNDJjNDBkMWFmNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXfCFemGwbJ/AyBLD7GmArSD2BnH
AGedn/z/uTHcFNBXrNNIUdUgA/ntc/vUdxGGFecmOc6G8pkOlSEgKqDdcmw45JK4
rLwabehV+iaI3rJ6b6TKAIvh+WmRrJD6QdHS5ig2ksAvggwTkmtvfErNVb3LcUpH
vmo8b8/z3qzW7mbjUuw7vSnEVzZC2Mr0TY7jXHzz2vyG2IzQKSLgh3IRibBPGtUm
DAMo+Tl7GUDD8Z6EoldJ7NVdWxZtShDWgsDKpwcbp4XwxFp2LYBQbk+K3SNDBWus
KiJ5XZAJshiuXP4p3UiuGxE4/U+S79iCCDvMpC13bdS13Hqmm0vhJ6R+EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOR3BsJYiaYFku/n9tzjQsQNGvZ6MB8GA1UdIwQY
MBaAFDQL6j/MPLztyCkZz1fHQQi66jaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYt
MTExMDU2MzY5YTIzLzEvNUhjR3dsaUpwZ1dTNy1mMjNPTkN4QTBhOW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lY2RhM2QtYTJkYi00OTA4LTg2MmYtMTExMDU2MzY5YTIz
LzEvTkF2cVA4dzh2TzNJS1JuUFY4ZEJDTHJxTnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHO8MA0G
CSqGSIb3DQEBCwUAA4IBAQAl8iBstlwkoeF5pBAba+hIM4aHVSKb8otnHuLs+pDv
Mj3ZTW5VHboUGlkkgpwehGWs9WPFKNpkKbqGENZviGYwHOkw8DQjWJY0U2yYWFos
Yr5yi1ywqRf0oRP+D43dQRhtUjASeUdQOHr8Hb4O/jxvQ2i2Ggn3SgUnHuVRbOPg
BAOj5iFHD92hCem0p/UFa+beXMJ8sepBEyIkNWFIBSZQBa5H2KDAxLeff5sHLmq/
fQSMgBUnVkmMmjG9wX1fEwq1+ARb4KYNQ1SWHo8b/y9nWXrK8ggTiPSEdOXCVF0y
VginWJ0pDpcRV3dnohUVBFEv81xwhH2Fo9wg0tZkYmtC
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:59 2024 by rpki-client on console-fra.rpki-client.org