Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SoPbtY_3rcrdGk24RxMHeFllK84.roa
File: SoPbtY_3rcrdGk24RxMHeFllK84.roa (raw, json)
Hash identifier: ImbwUxA7NgOj9B7ytxoUetEMyPwIfeIfFSGSBuh0Tgg=
Subject key identifier: 4A:83:DB:B5:8F:F7:AD:CA:DD:1A:4D:B8:47:13:07:78:59:65:2B:CE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01910CF05D446CE4C29C962E58EC73903AEA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SoPbtY_3rcrdGk24RxMHeFllK84.roa
Signing time: Thu 01 Aug 2024 07:56:04 +0000
ROA not before: Thu 01 Aug 2024 07:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 273888
IP address blocks: 201.77.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:f0:5d:44:6c:e4:c2:9c:96:2e:58:ec:73:90:3a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 1 07:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a83dbb58ff7adcadd1a4db84713077859652bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:36:3c:fc:38:c4:17:a1:34:66:a8:02:ae:
54:e8:b3:22:4b:94:c4:67:59:1a:3b:06:74:12:bf:
65:55:1a:ea:0c:0d:42:cd:44:c7:f0:6b:4c:6b:dd:
64:14:ac:30:42:76:dd:db:8f:15:bf:97:b4:a4:6f:
4c:78:5d:e7:8f:ed:68:05:aa:14:12:6a:12:17:2e:
c5:4a:13:8f:64:26:4a:7c:66:f4:a4:09:3a:5d:94:
01:32:de:1f:60:89:78:71:6a:f5:e3:d0:58:5c:6a:
dc:f9:7d:71:4e:80:dc:8e:e1:e5:85:5e:d3:fb:bf:
1a:7d:fc:45:a0:f2:2d:28:56:9f:e7:9a:67:2d:ef:
00:1a:28:f1:28:5a:16:a6:2a:fd:01:f2:60:a8:f0:
db:6e:70:fe:93:8b:60:72:a8:77:aa:92:cb:cc:0e:
52:94:4e:4e:89:cf:b5:01:6b:3e:a9:d2:0b:5b:31:
5c:b8:06:a9:86:a5:0b:0a:da:8f:ec:2a:e2:06:7d:
c7:0b:54:20:00:bd:0a:08:a6:e3:69:89:f0:9d:19:
c2:a0:3c:81:d0:28:e0:a5:54:4e:ea:e4:16:6a:82:
51:f8:1c:e7:cd:cf:da:dc:bd:64:0a:d0:19:79:b8:
2e:91:d1:3c:54:4f:44:dd:37:34:94:8a:83:6f:e0:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:DB:B5:8F:F7:AD:CA:DD:1A:4D:B8:47:13:07:78:59:65:2B:CE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/SoPbtY_3rcrdGk24RxMHeFllK84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:99:5e:97:ba:5b:0e:cd:b9:0b:e9:cf:be:4d:a0:2d:40:c4:
8f:fd:9f:78:a1:3d:a5:23:2a:5f:aa:b7:15:70:95:3c:cf:21:
40:f4:af:a7:dc:75:c5:3c:65:3e:9d:8b:7e:2d:57:70:7a:46:
90:39:d6:ff:8a:29:01:0a:db:03:3f:b4:6a:47:cb:34:11:63:
25:03:ad:0e:75:22:fb:c0:c3:7c:38:e5:1d:22:49:91:d8:17:
31:d9:b8:72:f9:72:65:f1:a1:07:d2:55:ef:4c:1c:6c:7c:2a:
a3:8a:ea:06:9c:dd:dd:2a:2d:72:55:5f:f3:64:e6:47:33:67:
72:3b:84:b0:d4:a6:b0:d0:59:9d:13:bd:53:03:9d:d0:96:dc:
4e:a3:d5:bd:7d:11:a2:9f:e5:c8:53:94:00:28:0a:d8:68:bd:
62:c1:a6:50:eb:b0:11:86:c5:e5:66:37:ba:cc:59:ed:36:07:
ae:a9:59:4a:5c:e1:ee:ec:4a:c7:3b:7e:f4:52:fd:37:c6:a0:
c6:e1:ee:3c:d4:14:a6:fd:b9:fb:e8:36:88:50:92:d0:b1:bb:
09:23:43:ee:c6:b9:54:fb:e6:45:4d:0b:4b:17:52:b4:90:80:
80:6d:78:66:5f:55:fe:11:cf:5b:5e:66:6d:3b:8e:1f:be:1c:
80:e2:d7:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEM8F1EbOTCnJYuWOxzkDrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwODAxMDc1NjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTgzZGJiNThmZjdhZGNhZGQxYTRkYjg0NzEzMDc3ODU5NjUyYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt082PPw4xBehNGaoAq5U6LMiS5TE
Z1kaOwZ0Er9lVRrqDA1CzUTH8GtMa91kFKwwQnbd248Vv5e0pG9MeF3nj+1oBaoU
EmoSFy7FShOPZCZKfGb0pAk6XZQBMt4fYIl4cWr149BYXGrc+X1xToDcjuHlhV7T
+78affxFoPItKFaf55pnLe8AGijxKFoWpir9AfJgqPDbbnD+k4tgcqh3qpLLzA5S
lE5Oic+1AWs+qdILWzFcuAaphqULCtqP7CriBn3HC1QgAL0KCKbjaYnwnRnCoDyB
0CjgpVRO6uQWaoJR+Bznzc/a3L1kCtAZebgukdE8VE9E3Tc0lIqDb+AA9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqD27WP963K3RpNuEcTB3hZZSvOMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvU29QYnRZXzNyY3JkR2syNFJ4TUhlRmxsSzg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyU01MA0G
CSqGSIb3DQEBCwUAA4IBAQDDmV6XulsOzbkL6c++TaAtQMSP/Z94oT2lIypfqrcV
cJU8zyFA9K+n3HXFPGU+nYt+LVdwekaQOdb/iikBCtsDP7RqR8s0EWMlA60OdSL7
wMN8OOUdIkmR2Bcx2bhy+XJl8aEH0lXvTBxsfCqjiuoGnN3dKi1yVV/zZOZHM2dy
O4Sw1Kaw0FmdE71TA53QltxOo9W9fRGin+XIU5QAKArYaL1iwaZQ67ARhsXlZje6
zFntNgeuqVlKXOHu7ErHO370Uv03xqDG4e481BSm/bn76DaIUJLQsbsJI0PuxrlU
++ZFTQtLF1K0kICAbXhmX1X+Ec9bXmZtO44fvhyA4tfL
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:09 2024 by rpki-client on console-fra.rpki-client.org