Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B5rwIFs7hgmCxsjHqAxKozVYlCs.roa
File: B5rwIFs7hgmCxsjHqAxKozVYlCs.roa (raw, json)
Hash identifier: KCcK0H3G55JG5Mt+gAqXyyWlh/+L71LynLOkDCHDuyQ=
Subject key identifier: 07:9A:F0:20:5B:3B:86:09:82:C6:C8:C7:A8:0C:4A:A3:35:58:94:2B
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC501495124FBD0550578DF7523297FAA
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B5rwIFs7hgmCxsjHqAxKozVYlCs.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 84.32.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:49:51:24:fb:d0:55:05:78:df:75:23:29:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=079af0205b3b860982c6c8c7a80c4aa33558942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:fe:99:9f:f3:63:2e:ec:4b:e2:a8:3b:05:
d1:a5:46:65:2b:af:65:9e:1d:6b:72:60:92:18:e5:
d7:b0:23:d9:e8:cf:98:d3:d4:fe:df:63:e0:d4:0e:
49:c5:39:9a:e0:be:23:27:e6:1e:b5:a9:33:82:6f:
a5:83:8c:7d:a9:28:22:a8:8c:9f:b3:13:76:22:01:
7b:2d:80:c4:42:1f:76:55:ad:96:19:d5:53:b0:85:
cb:3d:80:1e:b3:2e:be:14:04:3c:3f:7e:0b:d7:25:
21:d3:19:12:44:ab:5f:9e:60:f4:0f:63:3b:0d:e8:
c6:d8:da:16:b6:fc:a0:81:3f:37:e1:ec:fe:ba:63:
ab:a3:25:3d:5d:97:00:58:6a:0e:d3:41:a9:75:78:
51:3f:78:dc:9d:a2:e5:ea:bc:b2:0c:c2:c2:9c:bc:
10:d1:6a:e4:c4:46:3e:6b:13:58:6e:68:2e:49:7f:
c2:3e:18:ae:63:99:15:39:f6:d7:cb:5f:81:f5:7c:
42:4f:48:f2:a7:42:43:0b:c5:f3:97:64:3d:a0:f1:
0d:c1:cb:58:ba:f4:98:12:a3:0a:22:88:71:68:2e:
63:1a:d4:53:7f:51:b7:db:b4:bb:bd:97:be:fd:58:
7c:84:36:36:10:26:5d:e8:20:f1:72:32:bd:9b:37:
51:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:F0:20:5B:3B:86:09:82:C6:C8:C7:A8:0C:4A:A3:35:58:94:2B
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/B5rwIFs7hgmCxsjHqAxKozVYlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.223.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6c:5b:2a:e8:07:cb:4e:9b:35:b0:fa:3e:28:b2:fd:10:b2:
64:bb:97:0a:75:6a:6d:d7:c6:d7:b5:3a:99:e7:87:94:56:bb:
a3:77:9a:be:30:45:87:fd:93:86:76:ac:c5:41:b1:ba:e7:91:
d9:a2:84:fc:dd:3a:35:f1:cb:ff:a4:68:c8:10:f6:87:80:4f:
86:df:60:f2:f1:74:fb:d2:40:65:20:6c:5e:97:9f:cc:45:80:
e1:f2:a4:02:c8:5e:d7:23:13:e9:f2:a6:bc:34:4a:9c:a6:df:
68:81:4a:aa:ea:c9:3a:96:17:cb:19:78:b2:79:a9:5c:35:d3:
5c:a6:57:46:af:36:66:28:fa:62:50:20:2f:c6:d8:bc:92:93:
63:ce:63:e5:4c:a2:70:6b:6a:6c:04:e7:cc:5a:4d:d4:94:08:
fb:79:22:69:66:f4:23:d4:80:b7:54:38:aa:ec:20:59:55:14:
c5:85:ad:41:8d:fb:29:00:c7:f2:45:78:4d:42:3c:6d:65:8f:
e1:8f:cb:13:bc:45:97:39:da:50:b9:78:b2:99:1f:61:d8:d1:
f7:3b:41:6f:c9:f1:82:61:11:b5:c1:d1:7e:7c:34:d9:f1:98:
54:9e:a4:ec:00:c2:0e:90:f7:b2:8f:87:ab:6a:56:1e:8d:29:
6f:c6:81:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAUlRJPvQVQV433UjKX+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjQwMTAxMTIzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzlhZjAyMDViM2I4NjA5ODJjNmM4YzdhODBjNGFhMzM1NTg5NDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntD+mZ/zYy7sS+KoOwXRpUZlK69l
nh1rcmCSGOXXsCPZ6M+Y09T+32Pg1A5JxTma4L4jJ+Yetakzgm+lg4x9qSgiqIyf
sxN2IgF7LYDEQh92Va2WGdVTsIXLPYAesy6+FAQ8P34L1yUh0xkSRKtfnmD0D2M7
DejG2NoWtvyggT834ez+umOroyU9XZcAWGoO00GpdXhRP3jcnaLl6ryyDMLCnLwQ
0WrkxEY+axNYbmguSX/CPhiuY5kVOfbXy1+B9XxCT0jyp0JDC8Xzl2Q9oPENwctY
uvSYEqMKIohxaC5jGtRTf1G327S7vZe+/Vh8hDY2ECZd6CDxcjK9mzdRZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAea8CBbO4YJgsbIx6gMSqM1WJQrMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQjVyd0lGczdoZ21DeHNqSHFBeEtvelZZbENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDfMA0G
CSqGSIb3DQEBCwUAA4IBAQCTbFsq6AfLTps1sPo+KLL9ELJku5cKdWpt18bXtTqZ
54eUVrujd5q+MEWH/ZOGdqzFQbG655HZooT83To18cv/pGjIEPaHgE+G32Dy8XT7
0kBlIGxel5/MRYDh8qQCyF7XIxPp8qa8NEqcpt9ogUqq6sk6lhfLGXiyealcNdNc
pldGrzZmKPpiUCAvxti8kpNjzmPlTKJwa2psBOfMWk3UlAj7eSJpZvQj1IC3VDiq
7CBZVRTFha1BjfspAMfyRXhNQjxtZY/hj8sTvEWXOdpQuXiymR9h2NH3O0FvyfGC
YRG1wdF+fDTZ8ZhUnqTsAMIOkPeyj4eralYejSlvxoEp
-----END CERTIFICATE-----
Generated at Tue May 7 20:55:41 2024 by rpki-client on console-fra.rpki-client.org