Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/HLe3tI3KEjbCDWao0SLYMY63aG8.roa
File: HLe3tI3KEjbCDWao0SLYMY63aG8.roa (raw, json)
Hash identifier: 2X5sPmLh5NU8g/rUarXKczSELtRwSII5Z64zB7ZTCss=
Subject key identifier: 1C:B7:B7:B4:8D:CA:12:36:C2:0D:66:A8:D1:22:D8:31:8E:B7:68:6F
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 018CC7270CCE363A34ED3712A7229EC48E11
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/HLe3tI3KEjbCDWao0SLYMY63aG8.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49209
IP address blocks: 5.10.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0c:ce:36:3a:34:ed:37:12:a7:22:9e:c4:8e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cb7b7b48dca1236c20d66a8d122d8318eb7686f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:8b:6d:73:f0:31:dc:16:e5:c9:f6:bf:c5:
56:46:80:e8:93:68:64:91:5d:c4:a0:69:20:11:86:
cb:f1:13:b6:cc:70:64:a7:5c:e5:6c:b2:a2:c4:b5:
7e:48:2a:2d:d7:33:80:fb:44:95:6a:a4:b4:6a:b4:
88:15:66:59:b1:9e:92:b7:45:3f:5f:fe:bd:77:be:
0c:67:36:b7:7a:6b:5a:d7:27:7d:bc:9d:7f:ea:f6:
c9:cc:af:91:7a:b2:54:98:55:bc:05:62:94:6b:fc:
5f:61:64:45:9e:c6:df:96:e5:33:3f:08:46:4f:2e:
1a:9c:e2:b4:a8:a9:aa:e4:22:27:55:87:cb:30:a5:
75:a6:4d:77:b7:92:6a:b4:ea:04:7d:67:3c:e7:69:
4f:59:82:6d:3c:c6:a9:5b:fe:35:fd:55:db:58:1d:
a9:d3:7a:f0:5c:a8:51:1e:93:85:52:25:5a:ff:48:
0b:2d:0c:7e:3e:3e:e0:5c:ea:26:98:1a:d0:5b:14:
92:68:c9:93:de:ec:ba:ee:2b:c1:50:78:b9:2b:b3:
72:0c:14:ea:23:7e:06:4e:3a:b4:76:c6:0b:61:69:
0f:92:72:e1:01:07:9d:36:1d:20:36:87:ea:ff:8e:
f0:b9:ff:90:b9:cb:c6:f9:b7:69:eb:97:6d:cf:28:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:B7:B4:8D:CA:12:36:C2:0D:66:A8:D1:22:D8:31:8E:B7:68:6F
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/HLe3tI3KEjbCDWao0SLYMY63aG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:73:33:60:0a:dc:40:11:0e:61:6e:cb:95:47:a7:88:e3:
41:2e:c1:14:c4:50:2d:39:0a:c3:c8:e1:f7:d5:a7:f0:ee:ec:
94:7d:ea:97:0e:a0:40:f5:5b:5e:73:92:ef:43:a6:38:23:3f:
a9:3d:7c:6b:1b:c8:3d:4e:1a:85:b3:56:20:9a:50:af:f9:d3:
18:40:64:0c:1e:ef:33:b6:11:6a:43:82:dd:93:83:26:f0:a7:
3d:21:2f:17:c4:c1:b0:7d:25:4d:7b:3d:7f:4c:38:72:57:18:
f0:37:89:1e:2a:de:1a:e4:de:e0:31:b7:38:1f:6e:a1:9e:d5:
51:53:43:95:5b:0b:33:6e:45:49:6d:aa:01:b6:a3:e0:dc:43:
2e:16:73:af:79:7c:f7:a2:79:4e:0a:4e:67:a0:d6:fb:68:40:
23:74:fc:e3:55:d3:39:d4:4a:f0:19:71:c2:65:1a:6e:65:7b:
34:4f:8f:9e:ce:16:11:ba:8c:0d:79:86:24:d4:a8:e3:6c:4f:
51:19:fd:92:ac:ed:43:e0:bc:b6:ef:e8:c6:37:a4:ed:98:41:
33:d6:b2:5c:2e:a2:bf:39:9f:9d:df:ac:73:b8:7f:c9:0d:5d:
c0:87:0a:25:f4:da:a5:4c:06:e3:8e:70:e8:84:0d:ee:e4:54:
5b:71:c0:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJwzONjo07TcSpyKexI4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjQwMTAxMjIzMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2I3YjdiNDhkY2ExMjM2YzIwZDY2YThkMTIyZDgzMThlYjc2ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaCLbXPwMdwW5cn2v8VWRoDok2hk
kV3EoGkgEYbL8RO2zHBkp1zlbLKixLV+SCot1zOA+0SVaqS0arSIFWZZsZ6St0U/
X/69d74MZza3emta1yd9vJ1/6vbJzK+RerJUmFW8BWKUa/xfYWRFnsbfluUzPwhG
Ty4anOK0qKmq5CInVYfLMKV1pk13t5JqtOoEfWc852lPWYJtPMapW/41/VXbWB2p
03rwXKhRHpOFUiVa/0gLLQx+Pj7gXOommBrQWxSSaMmT3uy67ivBUHi5K7NyDBTq
I34GTjq0dsYLYWkPknLhAQedNh0gNofq/47wuf+QucvG+bdp65dtzygTMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBy3t7SNyhI2wg1mqNEi2DGOt2hvMB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvSExlM3RJM0tFamJDRFdhbzBTTFlNWTYzYUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQqNMA0G
CSqGSIb3DQEBCwUAA4IBAQBf3XMzYArcQBEOYW7LlUeniONBLsEUxFAtOQrDyOH3
1afw7uyUfeqXDqBA9Vtec5LvQ6Y4Iz+pPXxrG8g9ThqFs1YgmlCv+dMYQGQMHu8z
thFqQ4Ldk4Mm8Kc9IS8XxMGwfSVNez1/TDhyVxjwN4keKt4a5N7gMbc4H26hntVR
U0OVWwszbkVJbaoBtqPg3EMuFnOveXz3onlOCk5noNb7aEAjdPzjVdM51ErwGXHC
ZRpuZXs0T4+ezhYRuowNeYYk1KjjbE9RGf2SrO1D4Ly27+jGN6TtmEEz1rJcLqK/
OZ+d36xzuH/JDV3Ahwol9NqlTAbjjnDohA3u5FRbccAf
-----END CERTIFICATE-----
Generated at Fri May 17 06:32:51 2024 by rpki-client on console-fra.rpki-client.org