Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CibheR6T58boLBJHy3ihJ57XoF4.roa
File: CibheR6T58boLBJHy3ihJ57XoF4.roa (raw, json)
Hash identifier: JEdtvh0dayFsJzZdN//WG1u2ETP0gqoK+8BlFmkIXmg=
Subject key identifier: 0A:26:E1:79:1E:93:E7:C6:E8:2C:12:47:CB:78:A1:27:9E:D7:A0:5E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0190E4DECBC77BBFDDA678824D9F03C8DC02
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CibheR6T58boLBJHy3ihJ57XoF4.roa
Signing time: Wed 24 Jul 2024 13:12:04 +0000
ROA not before: Wed 24 Jul 2024 13:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 104.249.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:de:cb:c7:7b:bf:dd:a6:78:82:4d:9f:03:c8:dc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jul 24 13:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a26e1791e93e7c6e82c1247cb78a1279ed7a05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:83:6f:f7:37:9b:79:54:ca:f9:ae:ee:f3:
d2:61:e5:48:5d:ab:f8:08:f9:ad:54:7e:40:d9:3c:
6f:89:05:9a:98:47:6f:14:bd:4e:52:c0:e3:56:c2:
ee:b1:78:71:7e:72:d3:e3:37:26:ee:3b:5c:fd:4b:
8e:43:18:79:01:14:16:e7:7b:57:e0:75:a7:10:aa:
a5:5e:e0:d0:7a:4b:d7:af:44:7c:0a:ba:7f:7e:22:
4b:e1:88:13:76:4c:23:68:6e:fa:79:67:3a:a9:ec:
74:f6:d2:1c:be:26:1b:d5:d7:35:1d:64:98:5a:ce:
94:8b:37:05:70:ec:a6:1d:4b:b4:22:72:0c:5b:af:
00:1b:a1:1b:38:90:a8:6f:5f:c0:21:bb:e5:67:84:
49:70:51:f1:69:76:a7:b3:b7:94:e6:6f:1f:3b:8f:
40:8d:da:63:27:c2:37:10:2b:f0:e9:24:dc:1f:d5:
ba:5b:53:33:2f:c3:05:cb:05:b7:ef:12:29:7f:7e:
8f:0b:a5:dc:f8:d4:88:5b:66:76:0f:b0:02:05:d6:
63:e7:06:89:19:21:f1:89:2d:f7:3a:96:9b:16:b9:
93:fa:c0:a3:50:d3:78:71:76:60:e4:2d:8d:c0:c6:
80:08:36:72:2f:b6:6d:9a:b5:aa:30:6b:23:b3:93:
a5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:E1:79:1E:93:E7:C6:E8:2C:12:47:CB:78:A1:27:9E:D7:A0:5E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CibheR6T58boLBJHy3ihJ57XoF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:24:e2:10:ff:be:26:39:67:a2:8b:19:c8:54:a5:a7:7e:97:
2c:39:b6:03:5c:0c:87:08:ed:b7:e6:21:55:4a:fa:dd:6d:74:
7b:f4:6b:89:aa:a2:f8:88:be:55:6d:83:54:34:26:7b:11:d9:
f0:eb:fa:5e:53:2a:f0:d8:5e:88:f3:04:05:a0:bf:b9:1b:c3:
e3:74:41:9a:2f:3d:54:e9:bb:1c:8c:fb:c2:05:bf:44:fd:5f:
e0:0b:f4:46:41:57:e5:2c:ef:bd:39:b3:0b:79:de:7d:23:d9:
40:44:fe:55:0d:7e:1d:0f:fa:e0:43:14:da:01:dd:75:4c:64:
f2:35:ec:7c:0a:94:0f:43:e0:fc:6b:0f:a3:00:97:82:6b:4e:
38:5c:20:48:31:80:29:14:b1:5e:43:29:ba:24:fc:6e:44:66:
a5:9e:de:3c:35:a9:8d:79:f4:54:28:01:33:0b:d8:34:b0:76:
0e:b8:87:2f:27:1e:66:f4:7c:a3:5b:77:58:68:be:2d:f4:9a:
f3:a1:81:39:9a:5d:d4:bb:a8:3f:a6:4b:5e:05:33:08:1c:d8:
9d:e0:c7:69:97:9f:e2:db:41:5c:85:b9:ba:4d:78:06:68:be:
36:01:1c:50:42:78:14:34:0e:21:79:ad:4a:b5:d8:79:b9:d8:
f4:a6:aa:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDk3svHe7/dpniCTZ8DyNwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQwNzI0MTMxMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTI2ZTE3OTFlOTNlN2M2ZTgyYzEyNDdjYjc4YTEyNzllZDdhMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV2Db/c3m3lUyvmu7vPSYeVIXav4
CPmtVH5A2TxviQWamEdvFL1OUsDjVsLusXhxfnLT4zcm7jtc/UuOQxh5ARQW53tX
4HWnEKqlXuDQekvXr0R8Crp/fiJL4YgTdkwjaG76eWc6qex09tIcviYb1dc1HWSY
Ws6UizcFcOymHUu0InIMW68AG6EbOJCob1/AIbvlZ4RJcFHxaXans7eU5m8fO49A
jdpjJ8I3ECvw6STcH9W6W1MzL8MFywW37xIpf36PC6Xc+NSIW2Z2D7ACBdZj5waJ
GSHxiS33OpabFrmT+sCjUNN4cXZg5C2NwMaACDZyL7ZtmrWqMGsjs5Ol9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAom4Xkek+fG6CwSR8t4oSee16BeMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvQ2liaGVSNlQ1OGJvTEJKSHkzaWhKNTdYb0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPkoMA0G
CSqGSIb3DQEBCwUAA4IBAQBoJOIQ/74mOWeiixnIVKWnfpcsObYDXAyHCO235iFV
SvrdbXR79GuJqqL4iL5VbYNUNCZ7Ednw6/peUyrw2F6I8wQFoL+5G8PjdEGaLz1U
6bscjPvCBb9E/V/gC/RGQVflLO+9ObMLed59I9lARP5VDX4dD/rgQxTaAd11TGTy
Nex8CpQPQ+D8aw+jAJeCa044XCBIMYApFLFeQym6JPxuRGalnt48NamNefRUKAEz
C9g0sHYOuIcvJx5m9HyjW3dYaL4t9JrzoYE5ml3Uu6g/pkteBTMIHNid4Mdpl5/i
20Fchbm6TXgGaL42ARxQQngUNA4hea1Ktdh5udj0pqpq
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:18:06 2024 by rpki-client on console-fra.rpki-client.org