Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IcsNU4FXnnbFt8Moa9nUiHbk1Hw.roa
File: IcsNU4FXnnbFt8Moa9nUiHbk1Hw.roa (raw, json)
Hash identifier: RnehMel8uMOddD5Vf6tNXxEjEDZMpVbdz4afZhq2yM4=
Subject key identifier: 21:CB:0D:53:81:57:9E:76:C5:B7:C3:28:6B:D9:D4:88:76:E4:D4:7C
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE9CADD667BED998D67FF812EA506
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IcsNU4FXnnbFt8Moa9nUiHbk1Hw.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212479
IP address blocks: 81.15.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e9:ca:dd:66:7b:ed:99:8d:67:ff:81:2e:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21cb0d5381579e76c5b7c3286bd9d48876e4d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:30:a8:7e:1d:ca:bc:1d:54:04:d0:0e:56:
04:93:ce:7a:1c:b5:19:ff:3e:3a:d3:1a:5c:67:c2:
dd:06:cd:f9:6b:20:59:bc:1a:44:12:dd:66:6d:3c:
9c:64:4a:cc:f2:e0:60:ca:0c:75:64:ed:f3:f2:88:
5c:0a:75:eb:26:9d:fb:8a:23:e7:c8:bd:b5:87:55:
ac:b1:f9:47:01:06:f2:bb:7f:06:2e:33:7d:c4:db:
78:1d:46:66:08:f7:67:a8:a9:25:78:88:42:03:1e:
94:a4:56:07:32:d2:ad:8e:7d:31:ac:b1:74:c8:67:
85:78:83:a2:af:26:65:e4:af:bc:95:b0:a9:d7:f2:
68:a5:ee:04:0b:dc:78:eb:77:16:cd:4d:dd:b3:26:
c9:09:5d:48:7f:71:07:28:ee:74:d5:c5:06:a0:50:
07:e3:97:5b:e3:5a:c4:9a:9d:f4:6d:84:82:51:b5:
26:b8:54:49:b2:c3:a8:67:eb:bc:1b:7c:d0:f8:9b:
b9:71:66:47:e1:b3:24:d2:e8:7b:ea:ff:9d:25:d3:
23:2a:5d:ad:1b:b2:7c:5a:28:e7:c7:91:6c:06:9d:
43:d6:90:43:60:ab:c8:69:25:d7:79:52:41:0a:37:
26:04:b1:8c:82:e0:0e:a6:bb:94:43:b6:e2:bf:a2:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CB:0D:53:81:57:9E:76:C5:B7:C3:28:6B:D9:D4:88:76:E4:D4:7C
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IcsNU4FXnnbFt8Moa9nUiHbk1Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.138.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:18:87:8d:18:9b:8d:ed:c8:22:fe:9a:57:27:d0:57:da:01:
cf:72:86:5f:f3:40:60:9d:0b:04:99:5f:ef:26:8c:db:7d:55:
68:89:16:d3:1d:bc:e8:d7:1c:36:4d:a2:98:3e:f6:1c:cc:31:
a2:4d:16:d0:b6:f3:4a:67:bf:01:ca:52:5f:f2:ea:01:c5:8d:
73:68:14:43:c1:28:cd:44:43:ee:af:02:81:3c:d0:3c:55:85:
d8:f3:f0:0b:82:22:eb:eb:9b:e3:5e:68:0e:58:63:b3:3a:f3:
2f:22:5b:a2:8b:7d:18:3d:65:c0:cd:d5:e8:36:3b:e1:d1:c9:
22:36:ad:e4:e9:16:f9:dd:84:f8:4f:88:40:be:8d:c5:96:86:
2d:3f:6f:02:d8:81:22:93:dd:7d:fc:4d:66:04:37:ca:c2:c6:
6e:9b:40:79:a3:4d:37:9c:cb:02:9b:40:96:a4:91:14:68:d7:
23:e7:ea:6d:80:85:de:48:39:f0:91:e8:07:b4:72:52:62:03:
21:05:cf:21:99:88:af:89:33:de:2d:08:50:87:cd:39:4e:83:
ba:84:8f:09:33:2b:69:81:b4:23:d3:9f:7e:1a:ed:8c:23:a3:
df:af:01:b9:bd:4e:80:c4:7f:ae:9d:a3:63:43:3e:13:a0:86:
ae:6f:45:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2unK3WZ77ZmNZ/+BLqUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWNiMGQ1MzgxNTc5ZTc2YzViN2MzMjg2YmQ5ZDQ4ODc2ZTRkNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwEwqH4dyrwdVATQDlYEk856HLUZ
/z460xpcZ8LdBs35ayBZvBpEEt1mbTycZErM8uBgygx1ZO3z8ohcCnXrJp37iiPn
yL21h1WssflHAQbyu38GLjN9xNt4HUZmCPdnqKkleIhCAx6UpFYHMtKtjn0xrLF0
yGeFeIOiryZl5K+8lbCp1/Jope4EC9x463cWzU3dsybJCV1If3EHKO501cUGoFAH
45db41rEmp30bYSCUbUmuFRJssOoZ+u8G3zQ+Ju5cWZH4bMk0uh76v+dJdMjKl2t
G7J8Wijnx5FsBp1D1pBDYKvIaSXXeVJBCjcmBLGMguAOpruUQ7biv6J7CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHLDVOBV552xbfDKGvZ1Ih25NR8MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvSWNzTlU0RlhubmJGdDhNb2E5blVpSGJrMUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUQ+KMA0G
CSqGSIb3DQEBCwUAA4IBAQCaGIeNGJuN7cgi/ppXJ9BX2gHPcoZf80BgnQsEmV/v
JozbfVVoiRbTHbzo1xw2TaKYPvYczDGiTRbQtvNKZ78BylJf8uoBxY1zaBRDwSjN
REPurwKBPNA8VYXY8/ALgiLr65vjXmgOWGOzOvMvIluii30YPWXAzdXoNjvh0cki
Nq3k6Rb53YT4T4hAvo3FloYtP28C2IEik919/E1mBDfKwsZum0B5o003nMsCm0CW
pJEUaNcj5+ptgIXeSDnwkegHtHJSYgMhBc8hmYiviTPeLQhQh805ToO6hI8JMytp
gbQj059+Gu2MI6PfrwG5vU6AxH+unaNjQz4ToIaub0XX
-----END CERTIFICATE-----
Generated at Fri May 31 21:45:21 2024 by rpki-client on console-ams.rpki-client.org