Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa
File: IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa (raw, json)
Hash identifier: +brgyaa6JVeXzMUviu33ImdvwxHJ6Iv8iOqQDdfPA3Y=
Subject key identifier: 22:E5:7E:AA:84:F5:78:A6:6D:CC:B6:E4:DA:2F:A3:49:69:50:48:F9
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB4A6DC497DD2FD058301D5207559
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa
Signing time: Tue 02 Jan 2024 08:32:42 +0000
ROA not before: Tue 02 Jan 2024 08:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 5.154.6.0/24 maxlen: 24
89.43.85.0/24 maxlen: 24
5.154.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b4:a6:dc:49:7d:d2:fd:05:83:01:d5:20:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22e57eaa84f578a66dccb6e4da2fa349695048f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cf:02:20:6b:fd:c9:8a:50:f5:7c:51:3a:c3:
1e:2f:0a:bf:97:8d:4a:1b:ec:a7:f5:38:f9:a7:6c:
3e:f6:dd:ab:db:fe:5c:26:1f:7d:d6:bf:f2:f1:b1:
e9:ac:59:72:9c:42:62:19:9f:86:34:de:fc:44:42:
c7:85:fa:c0:6b:19:ec:f9:94:a8:c6:1c:c6:62:7e:
ab:51:5d:69:d7:5c:e5:d8:5f:9f:de:31:88:84:9a:
1c:4d:10:70:81:f9:43:83:96:7b:0f:4f:51:80:24:
77:9b:44:bb:85:bb:77:4a:a8:54:fa:17:55:65:36:
80:65:3d:02:70:37:7b:44:b9:eb:41:6c:35:54:c4:
2f:0a:d4:ff:76:f8:2b:07:80:e0:6b:1f:6e:b7:7b:
24:df:31:62:90:ff:16:a3:93:ec:dc:22:bd:8d:e7:
04:ca:53:c1:50:26:85:1f:e0:e5:9e:d9:20:9f:10:
cd:a1:a6:86:82:4f:ab:6c:9d:98:a8:f7:df:9e:81:
17:b6:00:8d:cf:d8:38:29:2b:4d:d9:f6:a8:82:57:
a5:45:c1:dd:98:7b:07:d7:e9:76:c0:e4:93:27:77:
a6:08:4f:d6:fb:c6:f2:db:63:e6:bc:4d:9c:7f:08:
1f:d8:82:ff:17:19:5d:32:e2:59:26:6a:66:ab:0c:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E5:7E:AA:84:F5:78:A6:6D:CC:B6:E4:DA:2F:A3:49:69:50:48:F9
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/IuV-qoT1eKZtzLbk2i-jSWlQSPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.6.0/24
5.154.69.0/24
89.43.85.0/24
Signature Algorithm: sha256WithRSAEncryption
51:24:1c:12:c7:c5:66:18:9f:f9:77:f7:8a:1c:49:ad:f2:77:
76:80:7e:18:ea:c3:70:00:34:e8:e8:5f:43:d5:7b:cf:d3:f8:
5d:b6:8f:f1:95:1c:9e:3a:ea:89:fd:1d:3d:e4:a8:89:18:8c:
24:fd:85:6a:5b:90:08:b3:62:da:58:35:c2:13:f0:d9:17:a3:
2a:25:c6:25:04:3a:c3:bb:29:69:20:ba:41:fa:e4:ed:1e:3c:
bc:10:f0:ac:7c:1c:c6:25:5a:eb:0c:6d:63:27:14:55:85:06:
72:96:c0:3b:44:7f:3f:ee:0d:99:aa:ec:dc:77:42:20:5b:66:
34:3b:d3:5a:c4:1f:bd:1d:68:79:36:18:0e:79:e9:81:ce:81:
21:4b:21:50:43:57:ae:e1:f5:e7:76:37:7d:e3:17:b0:c3:e3:
0a:66:c9:d2:08:5b:8b:39:20:19:76:43:f3:84:78:91:e5:7e:
f8:b1:95:14:56:8f:3c:86:21:25:ac:2d:d0:a1:fa:b7:a3:53:
2d:51:e5:f5:ec:eb:56:e8:44:ac:4d:70:75:5b:c3:89:af:2d:
3e:c2:83:f1:39:7a:d5:c7:01:65:a8:1a:84:31:8b:9e:d3:a1:
51:4e:fa:ea:d3:5d:8a:49:e2:14:c3:34:23:54:2b:bc:4c:56:
47:f4:f5:5c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzJTbSm3El90v0FgwHVIHVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjQwMTAyMDgzMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmU1N2VhYTg0ZjU3OGE2NmRjY2I2ZTRkYTJmYTM0OTY5NTA0OGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs8CIGv9yYpQ9XxROsMeLwq/l41K
G+yn9Tj5p2w+9t2r2/5cJh991r/y8bHprFlynEJiGZ+GNN78RELHhfrAaxns+ZSo
xhzGYn6rUV1p11zl2F+f3jGIhJocTRBwgflDg5Z7D09RgCR3m0S7hbt3SqhU+hdV
ZTaAZT0CcDd7RLnrQWw1VMQvCtT/dvgrB4Dgax9ut3sk3zFikP8Wo5Ps3CK9jecE
ylPBUCaFH+DlntkgnxDNoaaGgk+rbJ2YqPffnoEXtgCNz9g4KStN2faoglelRcHd
mHsH1+l2wOSTJ3emCE/W+8by22PmvE2cfwgf2IL/FxldMuJZJmpmqwySeQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCLlfqqE9Ximbcy25Novo0lpUEj5MB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvSXVWLXFvVDFlS1p0ekxiazJpLWpTV2xRU1BrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZoGAwQA
BZpFAwQAWStVMA0GCSqGSIb3DQEBCwUAA4IBAQBRJBwSx8VmGJ/5d/eKHEmt8nd2
gH4Y6sNwADTo6F9D1XvP0/hdto/xlRyeOuqJ/R095KiJGIwk/YVqW5AIs2LaWDXC
E/DZF6MqJcYlBDrDuylpILpB+uTtHjy8EPCsfBzGJVrrDG1jJxRVhQZylsA7RH8/
7g2Zquzcd0IgW2Y0O9NaxB+9HWh5NhgOeemBzoEhSyFQQ1eu4fXndjd94xeww+MK
ZsnSCFuLOSAZdkPzhHiR5X74sZUUVo88hiElrC3Qofq3o1MtUeX17OtW6ESsTXB1
W8OJry0+woPxOXrVxwFlqBqEMYue06FRTvrq012KSeIUwzQjVCu8TFZH9PVc
-----END CERTIFICATE-----
Generated at Sat May 18 05:52:23 2024 by rpki-client on console-ams.rpki-client.org