Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/5okgadbvQ9BoOp0JjX-7BvS1sHM.roa
File: 5okgadbvQ9BoOp0JjX-7BvS1sHM.roa (raw, json)
Hash identifier: cjP+QwVJUdse7DVVnbPZNVZRMP15t2atFzuct5QQx40=
Subject key identifier: E6:89:20:69:D6:EF:43:D0:68:3A:9D:09:8D:7F:BB:06:F4:B5:B0:73
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 018CC3B6F1EBBA00E847C48EE289F1C766FE
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/5okgadbvQ9BoOp0JjX-7BvS1sHM.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 91.199.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f1:eb:ba:00:e8:47:c4:8e:e2:89:f1:c7:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6892069d6ef43d0683a9d098d7fbb06f4b5b073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:ec:2d:a6:66:9c:36:01:f7:dc:3b:df:12:
09:d9:59:bd:33:f5:b1:f9:ff:8b:8c:9f:fe:fb:bd:
b3:a2:11:49:e7:ee:20:04:78:80:c3:31:94:42:7e:
32:40:cc:4d:04:a7:34:d7:0e:52:38:ed:8b:0b:b5:
9f:1f:8c:69:d1:b4:8d:b3:af:ec:ca:8b:1e:1a:ad:
e5:b7:1b:4d:4e:19:1f:ae:95:4c:e0:22:a3:bb:67:
0d:56:20:79:a0:ec:e8:75:47:0e:00:7e:7d:4d:69:
7e:25:ae:88:ef:81:d8:ce:df:14:e5:6e:79:62:c6:
73:de:c9:b4:3d:ef:5c:c6:10:18:9f:65:c8:e4:c1:
d0:92:41:e4:95:07:dc:32:b2:b2:46:55:bb:ad:e1:
9d:2e:e3:a7:83:a7:01:bd:5d:8d:4c:d6:b2:f3:a3:
52:34:d7:11:cb:37:ab:d9:1e:4c:06:bc:d8:e3:f1:
80:35:1b:eb:1a:44:3e:ad:c6:1f:7e:9e:a3:97:09:
6c:79:4e:19:af:d1:39:c1:6b:64:b1:ce:ec:f9:b5:
81:45:7c:13:48:2a:5f:ac:e8:dc:a8:09:1a:32:a6:
70:a5:53:2c:bc:7b:25:17:d3:fe:7e:0a:00:e5:d4:
a4:1d:36:73:25:31:77:e3:55:ba:67:3c:a2:92:a5:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:89:20:69:D6:EF:43:D0:68:3A:9D:09:8D:7F:BB:06:F4:B5:B0:73
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/5okgadbvQ9BoOp0JjX-7BvS1sHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ee:3e:d6:28:79:9c:58:92:56:45:32:cf:ed:2d:6d:99:75:
9a:a0:72:62:f1:f3:94:4c:99:22:28:aa:89:86:69:4f:42:e6:
8c:22:88:4b:e3:20:ff:e4:4f:8f:90:29:1c:3f:60:e8:21:f8:
e1:ac:94:98:87:fa:6e:58:8f:2a:34:ce:d3:ce:6d:31:76:89:
75:7a:ba:e8:cf:09:8a:23:23:0b:d4:b2:30:3a:78:07:39:53:
18:93:60:22:5c:80:16:17:f2:24:1c:e4:ab:4e:05:78:1a:a7:
d4:fb:9f:70:54:2c:3b:fa:23:82:64:9a:21:dd:96:90:60:f4:
44:38:d9:66:97:2a:60:eb:97:38:5d:9c:71:21:9c:57:f7:a7:
8a:b2:94:a7:18:ce:b7:0e:08:4c:96:e7:12:df:12:6c:7d:c5:
29:89:36:4b:70:26:28:4a:4b:19:48:b1:c2:6d:3e:7f:8b:41:
09:15:ec:23:78:c5:5e:c5:03:fe:87:c7:2c:b5:93:04:2c:16:
2a:5f:e0:5d:f9:25:2a:51:89:20:9f:fd:c7:b3:00:e4:e7:2f:
15:91:b4:c5:87:33:f5:45:42:63:d2:50:6b:82:7b:e9:5e:b8:
0d:12:bb:04:13:8b:29:00:2a:a2:cb:5b:0d:a2:11:85:d6:e8:
8d:8e:5e:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtvHrugDoR8SO4onxx2b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3
NTdmM2YwHhcNMjQwMTAxMDYyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjg5MjA2OWQ2ZWY0M2QwNjgzYTlkMDk4ZDdmYmIwNmY0YjViMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj/sLaZmnDYB99w73xIJ2Vm9M/Wx
+f+LjJ/++72zohFJ5+4gBHiAwzGUQn4yQMxNBKc01w5SOO2LC7WfH4xp0bSNs6/s
yoseGq3ltxtNThkfrpVM4CKju2cNViB5oOzodUcOAH59TWl+Ja6I74HYzt8U5W55
YsZz3sm0Pe9cxhAYn2XI5MHQkkHklQfcMrKyRlW7reGdLuOng6cBvV2NTNay86NS
NNcRyzer2R5MBrzY4/GANRvrGkQ+rcYffp6jlwlseU4Zr9E5wWtksc7s+bWBRXwT
SCpfrOjcqAkaMqZwpVMsvHslF9P+fgoA5dSkHTZzJTF341W6ZzyikqVewQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOaJIGnW70PQaDqdCY1/uwb0tbBzMB8GA1UdIwQY
MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt
ZDg1MWU0MGQ1N2JmLzEvNW9rZ2FkYnZROUJvT3AwSmpYLTdCdlMxc0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm
LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8etMA0G
CSqGSIb3DQEBCwUAA4IBAQCm7j7WKHmcWJJWRTLP7S1tmXWaoHJi8fOUTJkiKKqJ
hmlPQuaMIohL4yD/5E+PkCkcP2DoIfjhrJSYh/puWI8qNM7Tzm0xdol1errozwmK
IyML1LIwOngHOVMYk2AiXIAWF/IkHOSrTgV4GqfU+59wVCw7+iOCZJoh3ZaQYPRE
ONlmlypg65c4XZxxIZxX96eKspSnGM63DghMlucS3xJsfcUpiTZLcCYoSksZSLHC
bT5/i0EJFewjeMVexQP+h8cstZMELBYqX+Bd+SUqUYkgn/3HswDk5y8VkbTFhzP1
RUJj0lBrgnvpXrgNErsEE4spACqiy1sNohGF1uiNjl6d
-----END CERTIFICATE-----
Generated at Mon May 6 04:08:03 2024 by rpki-client on console-ams.rpki-client.org