Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/pZPcRITyfbJh2mfMkBjt2gGYv-E.roa
File: pZPcRITyfbJh2mfMkBjt2gGYv-E.roa (raw, json)
Hash identifier: rWoFd1fMoW8spGxL7IMIsF7CATZ32SWxMbt5zdlD7wc=
Subject key identifier: A5:93:DC:44:84:F2:7D:B2:61:DA:67:CC:90:18:ED:DA:01:98:BF:E1
Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial: 018CC56E482A4864CEE2306B3FE4F6CAD573
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/pZPcRITyfbJh2mfMkBjt2gGYv-E.roa
Signing time: Mon 01 Jan 2024 14:29:48 +0000
ROA not before: Mon 01 Jan 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 131.211.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:48:2a:48:64:ce:e2:30:6b:3f:e4:f6:ca:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a593dc4484f27db261da67cc9018edda0198bfe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:88:6b:26:c5:67:f8:6e:55:c3:59:c9:ab:53:
d0:10:8a:34:47:e5:e1:c1:01:b3:a4:47:78:1a:9b:
36:b5:c1:cd:46:2c:5b:bf:65:d2:2c:5c:ce:d0:2f:
d3:04:1a:0b:5a:3a:a3:6e:30:ba:ed:e7:12:35:f0:
da:71:d0:8b:d2:32:3f:3b:92:72:f3:53:0b:a6:7c:
65:a7:00:58:45:2a:e8:f8:6a:de:f6:33:4a:39:dd:
ea:5c:5e:36:3a:b6:54:6d:b4:69:07:0c:b5:2d:81:
eb:c5:a4:89:40:18:f6:18:69:79:0f:14:dd:4e:30:
0d:62:d5:f9:1d:78:ee:98:cb:31:77:6d:aa:43:39:
3f:41:08:4c:46:9f:77:5c:e2:6f:9b:62:2e:d2:23:
bc:58:a9:c2:37:1c:80:01:07:a7:9a:30:16:60:94:
59:0c:3a:bc:3c:ee:2f:b3:ee:58:64:35:bc:94:c9:
1c:22:94:15:0c:8c:fb:61:20:ac:40:a7:86:38:c9:
12:b1:15:f4:57:47:ec:5f:3b:34:ba:63:a2:39:68:
b3:98:d7:a6:86:34:ef:7a:74:88:54:54:b8:d7:5b:
8f:0c:df:5a:9b:ec:81:25:9d:6a:1e:1d:75:6b:5e:
d8:41:b5:82:bd:37:28:44:2d:55:e7:f3:5f:18:4b:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:93:DC:44:84:F2:7D:B2:61:DA:67:CC:90:18:ED:DA:01:98:BF:E1
X509v3 Authority Key Identifier:
keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/pZPcRITyfbJh2mfMkBjt2gGYv-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:1d:1a:42:db:c0:b5:df:82:ae:ba:d4:15:27:86:1b:d6:f8:
37:a3:e5:8c:ca:ed:c5:2c:4a:ec:8e:1a:3e:fc:05:38:52:45:
7b:d1:d5:ab:61:d1:9c:67:0f:39:39:87:78:9a:fd:cd:3b:b3:
74:07:cc:2d:87:38:cd:0b:43:15:78:db:1d:f2:a1:50:62:84:
ac:be:e8:55:25:b3:a1:1b:84:d8:19:65:a6:77:24:1b:4f:d5:
f8:c5:b7:b4:0a:b3:2b:03:dc:ed:64:0f:5a:7b:6c:ee:cc:4e:
18:14:38:40:30:aa:56:b9:0d:03:6e:8d:0c:82:84:8b:80:e5:
9c:0c:d3:fb:50:a5:d5:27:8e:3b:95:d0:63:6b:f4:dc:c2:56:
cd:33:36:a2:41:5e:e8:8e:62:bc:fe:fe:b9:61:ff:b6:76:55:
f6:10:09:c9:7a:5d:f8:83:6a:ed:4d:9e:47:13:6e:1f:07:08:
1f:bf:e2:93:42:6a:2b:e0:63:30:bd:24:64:07:ef:97:d4:e6:
cc:38:01:b0:90:7f:b8:f6:cc:90:fb:8b:b2:e1:ae:5c:57:5d:
c9:99:92:c4:7e:27:56:c5:9a:9c:a4:85:8e:98:c5:09:c5:73:
20:b5:df:d6:5b:c3:0a:78:b8:77:8c:d9:f5:a8:94:09:cb:f0:
98:14:6f:08
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzFbkgqSGTO4jBrP+T2ytVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2
N2EwYzEwHhcNMjQwMTAxMTQyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTkzZGM0NDg0ZjI3ZGIyNjFkYTY3Y2M5MDE4ZWRkYTAxOThiZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4hrJsVn+G5Vw1nJq1PQEIo0R+Xh
wQGzpEd4Gps2tcHNRixbv2XSLFzO0C/TBBoLWjqjbjC67ecSNfDacdCL0jI/O5Jy
81MLpnxlpwBYRSro+Gre9jNKOd3qXF42OrZUbbRpBwy1LYHrxaSJQBj2GGl5DxTd
TjANYtX5HXjumMsxd22qQzk/QQhMRp93XOJvm2Iu0iO8WKnCNxyAAQenmjAWYJRZ
DDq8PO4vs+5YZDW8lMkcIpQVDIz7YSCsQKeGOMkSsRX0V0fsXzs0umOiOWizmNem
hjTvenSIVFS411uPDN9am+yBJZ1qHh11a17YQbWCvTcoRC1V5/NfGEuukQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKWT3ESE8n2yYdpnzJAY7doBmL/hMB8GA1UdIwQY
MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt
Mjc2NDdiY2VmNGIwLzEvcFpQY1JJVHlmYkpoMm1mTWtCanQyZ0dZdi1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw
LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg9MwDQYJ
KoZIhvcNAQELBQADggEBAGAdGkLbwLXfgq661BUnhhvW+Dej5YzK7cUsSuyOGj78
BThSRXvR1ath0ZxnDzk5h3ia/c07s3QHzC2HOM0LQxV42x3yoVBihKy+6FUls6Eb
hNgZZaZ3JBtP1fjFt7QKsysD3O1kD1p7bO7MThgUOEAwqla5DQNujQyChIuA5ZwM
0/tQpdUnjjuV0GNr9NzCVs0zNqJBXuiOYrz+/rlh/7Z2VfYQCcl6XfiDau1NnkcT
bh8HCB+/4pNCaivgYzC9JGQH75fU5sw4AbCQf7j2zJD7i7LhrlxXXcmZksR+J1bF
mpykhY6YxQnFcyC139Zbwwp4uHeM2fWolAnL8JgUbwg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:05 2024 by rpki-client on console-fra.rpki-client.org