Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/5eh4fkMHgdxhcnMnQOLx6lmMnAM.roa
File: 5eh4fkMHgdxhcnMnQOLx6lmMnAM.roa (raw, json)
Hash identifier: LTAoXXPlwFZeJfEIyR3ZrPaHOKMVaiMzThxf+JIzWk8=
Subject key identifier: E5:E8:78:7E:43:07:81:DC:61:72:73:27:40:E2:F1:EA:59:8C:9C:03
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 018CC34952BE0FD5F2305653443F5925E037
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/5eh4fkMHgdxhcnMnQOLx6lmMnAM.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3308
IP address blocks: 193.8.36.0/24 maxlen: 24
193.8.37.0/24 maxlen: 24
193.8.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:52:be:0f:d5:f2:30:56:53:44:3f:59:25:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e8787e430781dc6172732740e2f1ea598c9c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:5f:b4:e8:71:f4:ce:1e:d1:86:63:32:23:
58:53:0d:61:14:f5:f1:8f:92:66:ab:2f:ff:48:f5:
87:e6:8e:cd:9a:3c:6f:6d:7a:0b:da:c7:9b:f2:c7:
b5:c7:0a:3c:1f:a0:88:9f:c7:58:e3:14:2d:6f:66:
93:d8:0a:d1:f9:ca:e8:31:50:ce:98:40:e2:80:0e:
a3:ba:c9:97:38:51:09:70:85:83:99:7b:e2:1b:c7:
52:c5:fe:84:ad:06:da:c5:bb:17:e3:0f:57:e3:75:
1a:2a:c0:7e:b7:f7:4f:c9:e7:aa:5a:71:f8:f4:91:
29:1f:c5:d1:f6:98:86:1f:7f:6e:83:5d:97:a5:a3:
37:58:70:94:d1:4a:f7:4a:01:77:db:af:56:17:bf:
c4:75:5e:f0:5d:45:b7:54:bd:1b:18:45:d9:69:50:
6e:0e:ee:81:1a:d3:a5:d9:e8:c5:71:6f:db:86:25:
4b:20:69:3e:8f:9b:44:a0:f0:8e:fb:a6:e4:09:13:
c5:78:1c:16:41:76:a3:c3:35:54:67:90:34:54:6c:
15:05:4e:a6:37:2f:0c:90:34:37:22:a3:f5:8f:a6:
e6:8b:8d:d0:0e:70:17:ae:96:37:cd:bc:42:fc:d2:
91:98:54:69:12:b3:64:82:47:54:42:92:d5:84:01:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:78:7E:43:07:81:DC:61:72:73:27:40:E2:F1:EA:59:8C:9C:03
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/5eh4fkMHgdxhcnMnQOLx6lmMnAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.36.0/23
193.8.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:45:eb:3c:27:fe:25:7b:8e:dd:1e:29:45:2b:e6:4e:81:fc:
a4:67:f6:c9:ea:c2:c5:55:ed:e9:ed:81:1f:9f:8b:8e:f7:84:
57:ad:e2:2a:58:e4:60:f4:e2:82:0a:1d:48:e1:86:63:af:5d:
0e:95:5a:92:29:36:3a:2b:18:cf:95:5f:57:b6:ce:4e:f5:c3:
fb:ad:e9:1f:9c:49:ff:4c:c5:35:d7:41:55:56:aa:23:1f:c9:
f0:4c:cd:4e:8c:27:b8:4d:d0:ae:c1:66:b2:b9:88:82:1c:1e:
55:bb:44:ba:f8:d7:a1:43:bd:bd:13:da:94:ba:ef:5b:81:77:
6f:60:02:5a:31:d4:4d:ac:54:6c:0e:bb:38:f8:dc:a8:e8:ce:
f1:57:a4:f3:4f:a9:07:6f:1f:ee:b2:c2:1c:2f:7d:c7:79:35:
d9:80:99:77:55:75:76:ec:f6:b4:26:eb:b2:9f:ad:c1:97:fc:
18:ce:39:90:8b:b6:b5:d7:3d:9d:9b:0f:1b:37:f7:4e:d7:7a:
58:eb:24:cd:00:af:cc:62:40:22:88:be:5a:e8:02:ed:c0:b3:
fc:c5:73:52:15:36:dd:5d:ab:51:16:3f:b6:65:2d:6e:ad:ec:
ea:cc:f5:de:d9:86:f2:05:85:ea:03:91:0a:0f:a4:3c:99:b8:
81:6b:5a:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSVK+D9XyMFZTRD9ZJeA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjQwMTAxMDQzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU4Nzg3ZTQzMDc4MWRjNjE3MjczMjc0MGUyZjFlYTU5OGM5YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkxftOhx9M4e0YZjMiNYUw1hFPXx
j5Jmqy//SPWH5o7NmjxvbXoL2seb8se1xwo8H6CIn8dY4xQtb2aT2ArR+croMVDO
mEDigA6jusmXOFEJcIWDmXviG8dSxf6ErQbaxbsX4w9X43UaKsB+t/dPyeeqWnH4
9JEpH8XR9piGH39ug12XpaM3WHCU0Ur3SgF3269WF7/EdV7wXUW3VL0bGEXZaVBu
Du6BGtOl2ejFcW/bhiVLIGk+j5tEoPCO+6bkCRPFeBwWQXajwzVUZ5A0VGwVBU6m
Ny8MkDQ3IqP1j6bmi43QDnAXrpY3zbxC/NKRmFRpErNkgkdUQpLVhAEMlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOXoeH5DB4HcYXJzJ0Di8epZjJwDMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvNWVoNGZrTUhnZHhoY25NblFPTHg2bG1NbkFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwQgkAwQA
wQgnMA0GCSqGSIb3DQEBCwUAA4IBAQCzRes8J/4le47dHilFK+ZOgfykZ/bJ6sLF
Ve3p7YEfn4uO94RXreIqWORg9OKCCh1I4YZjr10OlVqSKTY6KxjPlV9Xts5O9cP7
rekfnEn/TMU110FVVqojH8nwTM1OjCe4TdCuwWayuYiCHB5Vu0S6+NehQ729E9qU
uu9bgXdvYAJaMdRNrFRsDrs4+Nyo6M7xV6TzT6kHbx/ussIcL33HeTXZgJl3VXV2
7Pa0Juuyn63Bl/wYzjmQi7a11z2dmw8bN/dO13pY6yTNAK/MYkAiiL5a6ALtwLP8
xXNSFTbdXatRFj+2ZS1urezqzPXe2YbyBYXqA5EKD6Q8mbiBa1rL
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:12:36 2024 by rpki-client on console-ams.rpki-client.org