Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa
File: YflcOjfckLQt7-QsdL-CecSiDpc.roa (raw, json)
Hash identifier: kS5C4VpiF3p6eCrpj/WrI9yfqzr6pri1FRSQd/ydi0g=
Subject key identifier: 61:F9:5C:3A:37:DC:90:B4:2D:EF:E4:2C:74:BF:82:79:C4:A2:0E:97
Certificate issuer: /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial: 018CC3488DAE027CC04F58B4AC15A656D8C1
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209050
IP address blocks: 5.183.216.0/22 maxlen: 24
2a0e:a600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8d:ae:02:7c:c0:4f:58:b4:ac:15:a6:56:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61f95c3a37dc90b42defe42c74bf8279c4a20e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:57:22:95:27:fe:8a:6e:06:32:c8:f0:4a:
65:39:2e:17:fe:1f:5f:eb:4e:4f:c2:a2:51:f2:4a:
10:64:96:c0:1a:9f:bd:ee:1a:df:4b:bc:f6:5c:14:
85:3f:65:81:7d:62:a1:00:31:71:5e:6d:f3:16:07:
59:e8:58:bc:85:bf:22:1c:32:99:fa:0c:f8:8b:8f:
a9:69:bf:ce:02:5d:36:42:a0:a0:fb:8e:23:68:18:
31:a7:6a:fd:25:e2:b0:4d:9d:1b:62:e6:a5:2e:78:
25:db:fa:82:29:9c:c6:1d:65:5d:4b:91:a9:7d:b2:
8c:d3:d8:a5:68:2d:87:ed:c2:8b:92:32:da:71:7c:
f2:49:11:ca:43:32:e1:be:40:eb:76:69:00:00:6e:
09:de:54:66:7b:42:7f:27:2c:fa:db:52:d4:9b:15:
87:eb:50:b4:36:53:e9:a4:16:d0:eb:4f:e9:89:90:
9a:44:98:3c:85:5f:44:4b:f0:3f:e2:8d:be:ba:82:
d9:8e:48:c6:a4:9d:26:59:c7:7e:d1:4e:cb:35:1e:
f9:2e:8a:30:14:6d:2d:e3:50:34:f9:db:e9:af:94:
5d:a0:83:10:d7:b3:4c:50:ca:61:1b:ef:11:af:29:
57:44:67:47:3d:6a:a2:0f:1a:47:a2:0d:ba:1d:ee:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:5C:3A:37:DC:90:B4:2D:EF:E4:2C:74:BF:82:79:C4:A2:0E:97
X509v3 Authority Key Identifier:
keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.216.0/22
IPv6:
2a0e:a600::/29
Signature Algorithm: sha256WithRSAEncryption
49:84:ae:1a:b7:27:63:96:7f:b2:d6:c7:e7:26:3e:0a:35:f6:
35:b0:5a:c8:2c:19:4c:c3:d5:c0:3e:34:8f:6b:bd:2d:e4:a7:
67:7a:17:ac:77:b8:80:c9:0a:f9:55:36:01:b5:05:e9:ff:8a:
4d:ec:85:9e:a2:5a:60:00:05:00:58:c0:32:ee:e1:d5:fb:8d:
f5:3a:c8:e0:a7:68:50:3a:68:94:0e:33:a9:80:5a:a2:a3:7c:
58:b3:fc:0e:73:f0:9f:e6:e0:60:55:ec:ac:cd:a0:91:bb:d5:
70:3f:d3:66:08:01:26:8d:44:9b:cd:78:10:5b:c7:3a:31:62:
5a:82:1f:ea:c1:03:5c:6f:ad:07:6a:fc:dd:91:d1:37:01:7c:
19:88:0a:14:4a:a7:13:bf:05:cb:64:8e:06:ca:59:df:1f:50:
b8:11:73:c9:84:15:db:5e:74:7f:48:0c:1a:15:fa:ae:6f:85:
71:d7:78:71:8b:6c:6e:3f:21:d0:73:17:46:b3:c1:09:06:96:
63:21:cf:03:ce:6c:bb:6b:a7:f3:ac:e6:d3:3c:ca:f8:bc:8a:
24:ae:96:5d:85:3e:71:80:1d:c3:16:91:43:33:75:70:a0:32:
79:5b:f4:73:c4:72:71:8c:b9:f7:29:83:76:1d:07:7d:68:b1:
66:4a:f0:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDSI2uAnzAT1i0rBWmVtjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0
ODk2YWIwHhcNMjQwMTAxMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWY5NWMzYTM3ZGM5MGI0MmRlZmU0MmM3NGJmODI3OWM0YTIwZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSBXIpUn/opuBjLI8EplOS4X/h9f
605PwqJR8koQZJbAGp+97hrfS7z2XBSFP2WBfWKhADFxXm3zFgdZ6Fi8hb8iHDKZ
+gz4i4+pab/OAl02QqCg+44jaBgxp2r9JeKwTZ0bYualLngl2/qCKZzGHWVdS5Gp
fbKM09ilaC2H7cKLkjLacXzySRHKQzLhvkDrdmkAAG4J3lRme0J/Jyz621LUmxWH
61C0NlPppBbQ60/piZCaRJg8hV9ES/A/4o2+uoLZjkjGpJ0mWcd+0U7LNR75Loow
FG0t41A0+dvpr5RdoIMQ17NMUMphG+8RrylXRGdHPWqiDxpHog26He7qAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGH5XDo33JC0Le/kLHS/gnnEog6XMB8GA1UdIwQY
MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt
NWU3MDBkZDZiOWVlLzEvWWZsY09qZmNrTFF0Ny1Rc2RMLUNlY1NpRHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl
LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbfYMA0E
AgACMAcDBQMqDqYAMA0GCSqGSIb3DQEBCwUAA4IBAQBJhK4atydjln+y1sfnJj4K
NfY1sFrILBlMw9XAPjSPa70t5Kdnehesd7iAyQr5VTYBtQXp/4pN7IWeolpgAAUA
WMAy7uHV+431Osjgp2hQOmiUDjOpgFqio3xYs/wOc/Cf5uBgVeyszaCRu9VwP9Nm
CAEmjUSbzXgQW8c6MWJagh/qwQNcb60HavzdkdE3AXwZiAoUSqcTvwXLZI4Gylnf
H1C4EXPJhBXbXnR/SAwaFfqub4Vx13hxi2xuPyHQcxdGs8EJBpZjIc8Dzmy7a6fz
rObTPMr4vIokrpZdhT5xgB3DFpFDM3VwoDJ5W/RzxHJxjLn3KYN2HQd9aLFmSvA4
-----END CERTIFICATE-----
Generated at Fri May 17 15:55:03 2024 by rpki-client on console-ams.rpki-client.org