Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/sh_eYhfDVqvY-i9y-Dg40J6280c.roa
File: sh_eYhfDVqvY-i9y-Dg40J6280c.roa (raw, json)
Hash identifier: gKOWqPBXIT34yBtTw2CKl1kvj7r+1FAmj3/KkS6WJlY=
Subject key identifier: B2:1F:DE:62:17:C3:56:AB:D8:FA:2F:72:F8:38:38:D0:9E:B6:F3:47
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 018CC5DC272393D7223CAC04ADF386E34F8E
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/sh_eYhfDVqvY-i9y-Dg40J6280c.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.5.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:27:23:93:d7:22:3c:ac:04:ad:f3:86:e3:4f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b21fde6217c356abd8fa2f72f83838d09eb6f347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:3b:e4:c6:16:93:e3:62:88:7f:79:ae:e0:
e7:a3:0a:16:f7:d0:f7:f3:6a:ad:11:34:81:c9:93:
83:d0:d2:40:8d:d1:22:f8:bc:cf:7d:2e:c8:95:07:
13:4c:cb:33:59:45:f6:19:71:73:2b:ee:9a:06:ef:
17:01:a4:b4:57:06:b3:6f:98:88:e1:85:85:f8:d3:
11:49:39:ae:7d:14:b0:82:ee:bb:91:89:1f:00:cc:
c7:d8:56:36:af:32:6d:bf:7e:fc:19:76:1d:af:fb:
b3:a0:b1:cf:3d:6b:94:d9:25:5c:52:23:2c:f3:df:
17:3f:9a:8b:0a:61:ef:0e:5e:7c:f6:82:0d:92:7c:
f8:0c:0c:df:97:cf:88:f7:d9:c8:3d:8f:c8:b4:d0:
c3:76:1e:1d:97:7b:2c:94:ea:13:5d:f3:3b:5b:1a:
c1:81:9d:5f:2f:65:fc:b8:30:f2:e0:36:59:68:3a:
4a:46:18:23:ce:72:a6:a8:5b:41:dd:75:49:d9:db:
ca:66:73:cf:28:5c:98:a9:44:e1:2b:2e:60:d0:08:
a2:5f:e8:a5:f6:86:99:a0:18:21:b8:96:a1:02:ec:
f4:83:c4:23:f6:91:20:96:4b:dc:82:3b:50:4a:40:
46:62:19:03:af:18:37:4a:00:f2:41:f8:06:d9:a8:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:DE:62:17:C3:56:AB:D8:FA:2F:72:F8:38:38:D0:9E:B6:F3:47
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/sh_eYhfDVqvY-i9y-Dg40J6280c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:84:e0:38:08:5d:34:17:e0:aa:57:57:b4:88:b8:1d:00:84:
bb:ca:7e:72:a9:52:af:20:72:1a:18:bb:12:ab:74:83:2f:cb:
ed:17:da:72:cc:7f:bb:5f:4c:99:c6:e1:51:be:8c:84:6a:37:
5c:d6:56:89:97:32:3a:7c:d7:54:62:c0:58:c0:75:91:75:03:
1d:66:22:8d:08:07:75:7e:eb:de:f2:23:bd:a0:74:e7:3b:f9:
ae:63:2c:5d:e6:75:d1:ca:91:68:d7:13:9b:e7:40:9c:65:b2:
03:75:63:6f:64:0d:92:da:c1:25:9f:59:be:a1:4d:3c:17:85:
dc:15:21:c7:20:af:9d:a0:19:1a:64:42:fc:f3:ad:90:ec:cc:
72:dc:27:e5:bf:76:20:dc:4f:a1:45:52:cf:3f:d8:c9:2d:5d:
78:4e:c6:71:96:ea:47:1e:87:f8:18:c9:16:8b:fc:06:8d:7e:
f9:7c:09:aa:9b:41:b2:91:0d:66:db:7b:6d:5e:8b:ff:f4:de:
f3:59:65:0a:2f:d8:2f:44:c8:10:a9:a7:ff:8e:37:e2:97:dd:
71:42:9e:e4:e7:64:d6:34:76:36:fa:b1:0f:02:ba:7c:73:ea:
83:4b:9e:a7:a2:62:5c:dc:d1:34:3d:0d:53:69:70:58:c7:f0:
49:bc:0a:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Ccjk9ciPKwErfOG40+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw
MDhjNDUwHhcNMjQwMTAxMTYyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjFmZGU2MjE3YzM1NmFiZDhmYTJmNzJmODM4MzhkMDllYjZmMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLI75MYWk+NiiH95ruDnowoW99D3
82qtETSByZOD0NJAjdEi+LzPfS7IlQcTTMszWUX2GXFzK+6aBu8XAaS0Vwazb5iI
4YWF+NMRSTmufRSwgu67kYkfAMzH2FY2rzJtv378GXYdr/uzoLHPPWuU2SVcUiMs
898XP5qLCmHvDl589oINknz4DAzfl8+I99nIPY/ItNDDdh4dl3sslOoTXfM7WxrB
gZ1fL2X8uDDy4DZZaDpKRhgjznKmqFtB3XVJ2dvKZnPPKFyYqUThKy5g0AiiX+il
9oaZoBghuJahAuz0g8Qj9pEglkvcgjtQSkBGYhkDrxg3SgDyQfgG2agtIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIf3mIXw1ar2Povcvg4ONCetvNHMB8GA1UdIwQY
MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct
ODhhMGU0NTBhMTdiLzEvc2hfZVloZkRWcXZZLWk5eS1EZzQwSjYyODBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi
LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQWQMA0G
CSqGSIb3DQEBCwUAA4IBAQCrhOA4CF00F+CqV1e0iLgdAIS7yn5yqVKvIHIaGLsS
q3SDL8vtF9pyzH+7X0yZxuFRvoyEajdc1laJlzI6fNdUYsBYwHWRdQMdZiKNCAd1
fuve8iO9oHTnO/muYyxd5nXRypFo1xOb50CcZbIDdWNvZA2S2sEln1m+oU08F4Xc
FSHHIK+doBkaZEL8862Q7Mxy3Cflv3Yg3E+hRVLPP9jJLV14TsZxlupHHof4GMkW
i/wGjX75fAmqm0GykQ1m23ttXov/9N7zWWUKL9gvRMgQqaf/jjfil91xQp7k52TW
NHY2+rEPArp8c+qDS56nomJc3NE0PQ1TaXBYx/BJvAqq
-----END CERTIFICATE-----
Generated at Thu May 2 08:24:29 2024 by rpki-client on console-ams.rpki-client.org