Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5PdsimBSRoHu6RDta7pMuplBnbg.roa
File: 5PdsimBSRoHu6RDta7pMuplBnbg.roa (raw, json)
Hash identifier: LRlTy+XZ8ksmCO7mHexpTTHyZeo9r43eR4JcWeHjZ6Q=
Subject key identifier: E4:F7:6C:8A:60:52:46:81:EE:E9:10:ED:6B:BA:4C:BA:99:41:9D:B8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4A50BB12E33644055CDE8820AB2C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5PdsimBSRoHu6RDta7pMuplBnbg.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208605
IP address blocks: 93.171.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4a:50:bb:12:e3:36:44:05:5c:de:88:20:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f76c8a60524681eee910ed6bba4cba99419db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:ac:6d:e3:27:ab:08:5d:ca:87:39:ca:1d:
7b:ea:b4:37:23:8d:e6:30:f6:87:e6:b6:04:b9:1c:
da:ea:91:59:a6:76:6e:37:d5:bf:6d:b5:13:ab:81:
09:c2:27:fa:8a:82:0a:b6:f7:76:82:b6:d6:ee:85:
43:0e:2d:66:83:b5:de:d5:39:13:2f:fa:ae:cc:26:
0b:1f:a1:f2:c6:68:9b:a8:5a:ce:fd:81:90:e3:e5:
92:bd:9a:7d:0d:84:4b:19:6a:06:2f:89:4f:f8:60:
7a:6a:0a:c4:47:03:bd:54:70:d0:d1:3c:cf:7f:06:
3c:ec:93:e0:51:00:2b:8d:51:7a:75:b6:4f:e2:96:
b5:02:7a:23:3b:9c:ae:1c:7a:66:5e:7c:a9:f9:2f:
35:c1:4f:65:c6:40:82:6a:63:9a:35:de:72:4b:0c:
2b:ff:96:2e:53:a0:44:ea:e4:9d:d2:ae:61:08:96:
03:88:6f:13:e4:36:9b:26:c6:62:ee:bd:14:81:44:
4d:71:aa:6e:04:94:3d:36:4f:67:e6:3a:e3:16:63:
0d:ff:50:57:53:b0:fd:73:74:c6:c4:24:7c:32:cd:
69:4e:76:f8:a1:07:ff:16:da:3f:4d:8f:98:9b:2a:
7c:57:6a:5a:e2:05:26:06:71:53:32:59:6e:bb:f2:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:6C:8A:60:52:46:81:EE:E9:10:ED:6B:BA:4C:BA:99:41:9D:B8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5PdsimBSRoHu6RDta7pMuplBnbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.227.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1e:6b:0b:75:0f:8d:9b:e1:52:ec:7b:e3:4f:c6:1a:94:ab:
73:cd:95:f0:31:73:17:99:53:8a:c0:7e:7a:ff:64:08:64:f1:
b9:fb:c2:dd:a7:8e:c3:16:30:a0:1f:40:fa:2d:5e:59:1b:84:
9d:ed:d3:e1:51:4c:1f:0b:e5:f6:9f:6c:79:cb:3c:84:46:64:
cb:3d:90:cf:82:e7:0e:a8:67:c4:22:06:c9:65:fe:fa:b4:b6:
75:b3:89:64:96:1a:f3:8b:00:d7:96:94:1a:84:53:08:01:a1:
52:df:6c:49:85:30:da:70:a5:63:7f:e8:ee:bf:5f:9c:75:e3:
b6:3c:f0:af:4f:02:41:7b:74:57:56:b4:6f:ca:46:7f:c0:db:
2e:34:65:55:f3:b3:70:e6:91:77:94:5f:27:82:44:ef:ce:db:
bc:91:65:a3:45:15:d9:d6:fd:2a:79:c7:ee:6c:d7:5c:aa:f7:
51:68:4e:cd:03:65:48:7b:bd:d9:cf:92:c3:46:0b:bb:5b:5f:
75:23:2a:74:8a:e1:f4:62:47:3c:6b:9c:3a:86:29:91:94:2a:
84:63:35:e0:b1:2b:9d:7b:72:5e:a8:3e:4c:b4:9a:b3:ee:e4:
81:49:ed:62:2f:95:fd:9f:26:60:22:b6:1b:c2:94:38:db:27:
dc:73:13:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKkpQuxLjNkQFXN6IIKssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGY3NmM4YTYwNTI0NjgxZWVlOTEwZWQ2YmJhNGNiYTk5NDE5ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LusbeMnqwhdyoc5yh176rQ3I43m
MPaH5rYEuRza6pFZpnZuN9W/bbUTq4EJwif6ioIKtvd2grbW7oVDDi1mg7Xe1TkT
L/quzCYLH6HyxmibqFrO/YGQ4+WSvZp9DYRLGWoGL4lP+GB6agrERwO9VHDQ0TzP
fwY87JPgUQArjVF6dbZP4pa1AnojO5yuHHpmXnyp+S81wU9lxkCCamOaNd5ySwwr
/5YuU6BE6uSd0q5hCJYDiG8T5DabJsZi7r0UgURNcapuBJQ9Nk9n5jrjFmMN/1BX
U7D9c3TGxCR8Ms1pTnb4oQf/Fto/TY+Ymyp8V2pa4gUmBnFTMlluu/KYUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOT3bIpgUkaB7ukQ7Wu6TLqZQZ24MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNVBkc2ltQlNSb0h1NlJEdGE3cE11cGxCbmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavjMA0G
CSqGSIb3DQEBCwUAA4IBAQBDHmsLdQ+Nm+FS7HvjT8YalKtzzZXwMXMXmVOKwH56
/2QIZPG5+8Ldp47DFjCgH0D6LV5ZG4Sd7dPhUUwfC+X2n2x5yzyERmTLPZDPgucO
qGfEIgbJZf76tLZ1s4lklhrziwDXlpQahFMIAaFS32xJhTDacKVjf+juv1+cdeO2
PPCvTwJBe3RXVrRvykZ/wNsuNGVV87Nw5pF3lF8ngkTvztu8kWWjRRXZ1v0qecfu
bNdcqvdRaE7NA2VIe73Zz5LDRgu7W191Iyp0iuH0Ykc8a5w6himRlCqEYzXgsSud
e3JeqD5MtJqz7uSBSe1iL5X9nyZgIrYbwpQ42yfccxMc
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:21 2024 by rpki-client on console-fra.rpki-client.org