Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/55zfwfTGdqkNo-sRRKvRHCashLg.roa
File: 55zfwfTGdqkNo-sRRKvRHCashLg.roa (raw, json)
Hash identifier: ogtzwm/slGuxeQci398uhQ4EC3yqbQNmLQkdeHO2KyQ=
Subject key identifier: E7:9C:DF:C1:F4:C6:76:A9:0D:A3:EB:11:44:AB:D1:1C:26:AC:84:B8
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 019064726B1977A91A64AEBE631BEC14F8A0
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/55zfwfTGdqkNo-sRRKvRHCashLg.roa
Signing time: Sat 29 Jun 2024 14:42:18 +0000
ROA not before: Sat 29 Jun 2024 14:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198548
IP address blocks: 141.138.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:72:6b:19:77:a9:1a:64:ae:be:63:1b:ec:14:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jun 29 14:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e79cdfc1f4c676a90da3eb1144abd11c26ac84b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:3a:7c:a0:54:6c:98:e2:6e:8d:01:62:42:
03:62:24:24:35:51:92:21:41:6d:03:b8:64:c4:51:
39:be:f3:09:af:80:64:f5:3d:cc:48:e0:c6:a6:11:
cf:b6:26:e7:33:f8:aa:9b:41:e5:70:73:30:72:0c:
55:d6:90:38:79:5b:4d:88:2e:ed:46:5e:e6:5c:f7:
74:5a:c1:18:49:18:49:04:c4:d8:eb:45:28:f7:6e:
24:e7:36:4f:c9:da:3e:88:f1:ac:5b:bd:d9:43:ff:
54:8d:2e:1a:3f:74:0a:2e:65:77:aa:96:67:51:a8:
9f:37:e9:e8:7a:37:df:53:b3:4a:86:60:80:89:d9:
ad:88:97:a6:9d:22:8e:16:cf:2d:8c:ae:18:45:b7:
74:eb:f2:5b:21:82:53:7e:30:7d:df:6f:e7:83:f6:
2d:3f:d4:86:4a:23:23:f3:37:4f:54:c5:13:1d:dc:
10:e0:33:ef:f9:35:bc:13:24:0f:b6:34:35:da:15:
56:06:07:c5:fb:dc:26:e6:76:2d:45:6b:1e:a7:81:
74:4d:60:04:d4:1b:10:65:bd:e2:74:23:1f:46:06:
9a:12:a7:47:16:bd:63:83:21:52:a4:eb:18:ef:34:
a3:dd:6e:2d:7f:9c:20:cc:b8:c6:b0:a6:4b:56:2c:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9C:DF:C1:F4:C6:76:A9:0D:A3:EB:11:44:AB:D1:1C:26:AC:84:B8
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/55zfwfTGdqkNo-sRRKvRHCashLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.4.0/24
Signature Algorithm: sha256WithRSAEncryption
52:14:a4:dd:ec:da:06:d3:12:4c:fb:d2:5c:f2:66:4b:92:8a:
7c:15:37:06:b3:51:9c:26:e9:9c:1a:2a:35:ac:c7:6d:f0:52:
e0:63:04:03:89:1a:b1:ce:bc:fa:35:91:67:5a:03:ac:b7:74:
7b:83:c7:00:8f:e6:af:c3:b8:d8:c7:89:7a:bd:f6:96:8a:0f:
df:bc:dd:9e:cc:2f:a7:ec:6c:bc:97:5e:b1:4e:0e:43:ca:98:
01:e9:18:4f:de:8f:fe:62:82:73:9f:bb:4f:c0:5e:56:3d:6e:
bf:b5:9f:2e:15:37:6a:f5:7e:38:02:97:d8:aa:69:cc:be:ea:
ff:26:22:b2:4b:b0:80:fd:c1:bf:72:72:84:b5:93:1a:9d:09:
9b:8a:8d:48:79:63:30:1e:78:70:2d:82:77:5b:15:b0:8a:da:
01:2f:5b:90:b2:c5:67:b8:01:41:20:60:3e:0a:09:fc:5f:1e:
00:8a:fd:76:8f:c7:ee:ba:47:5d:78:43:a1:0c:84:e8:1f:96:
d3:5c:54:8a:a5:04:00:b9:0e:54:e4:57:a6:2b:56:fc:45:84:
1e:0d:e0:b9:68:e3:56:8c:ad:36:5d:b9:e2:a8:6e:73:2a:8b:
82:02:31:5a:19:c6:6c:88:ca:74:c9:ca:7c:11:21:7f:24:76:
69:c2:9f:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBkcmsZd6kaZK6+YxvsFPigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm
MDIwMjAwHhcNMjQwNjI5MTQ0MjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzljZGZjMWY0YzY3NmE5MGRhM2ViMTE0NGFiZDExYzI2YWM4NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBE6fKBUbJjibo0BYkIDYiQkNVGS
IUFtA7hkxFE5vvMJr4Bk9T3MSODGphHPtibnM/iqm0HlcHMwcgxV1pA4eVtNiC7t
Rl7mXPd0WsEYSRhJBMTY60Uo924k5zZPydo+iPGsW73ZQ/9UjS4aP3QKLmV3qpZn
UaifN+noejffU7NKhmCAidmtiJemnSKOFs8tjK4YRbd06/JbIYJTfjB932/ng/Yt
P9SGSiMj8zdPVMUTHdwQ4DPv+TW8EyQPtjQ12hVWBgfF+9wm5nYtRWsep4F0TWAE
1BsQZb3idCMfRgaaEqdHFr1jgyFSpOsY7zSj3W4tf5wgzLjGsKZLVixt6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOec38H0xnapDaPrEUSr0RwmrIS4MB8GA1UdIwQY
MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt
NGI2YzFjZjlmZTRmLzEvNTV6ZndmVEdkcWtOby1zUlJLdlJIQ2FzaExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm
LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYoEMA0G
CSqGSIb3DQEBCwUAA4IBAQBSFKTd7NoG0xJM+9Jc8mZLkop8FTcGs1GcJumcGio1
rMdt8FLgYwQDiRqxzrz6NZFnWgOst3R7g8cAj+avw7jYx4l6vfaWig/fvN2ezC+n
7Gy8l16xTg5DypgB6RhP3o/+YoJzn7tPwF5WPW6/tZ8uFTdq9X44ApfYqmnMvur/
JiKyS7CA/cG/cnKEtZManQmbio1IeWMwHnhwLYJ3WxWwitoBL1uQssVnuAFBIGA+
Cgn8Xx4Aiv12j8fuukddeEOhDIToH5bTXFSKpQQAuQ5U5FemK1b8RYQeDeC5aONW
jK02XbniqG5zKouCAjFaGcZsiMp0ycp8ESF/JHZpwp9b
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:40 2024 by rpki-client on console-ams.rpki-client.org