Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/5i5A6J44EITcm1rq6lIYbDdEx80.roa
File: 5i5A6J44EITcm1rq6lIYbDdEx80.roa (raw, json)
Hash identifier: WDVCW3qISvbTqhWiimuBx2qPviVJ2fOFwgH/P10VSsQ=
Subject key identifier: E6:2E:40:E8:9E:38:10:84:DC:9B:5A:EA:EA:52:18:6C:37:44:C7:CD
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 018CC26D858E5B859911EEC31802BB89A023
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/5i5A6J44EITcm1rq6lIYbDdEx80.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21183
IP address blocks: 193.254.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:85:8e:5b:85:99:11:ee:c3:18:02:bb:89:a0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e62e40e89e381084dc9b5aeaea52186c3744c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:66:37:dd:3a:5a:8b:9f:c5:bc:e5:9a:0f:
eb:93:fb:af:a8:47:55:ee:fc:3a:93:9b:c7:33:09:
b0:ad:cc:6c:c0:62:93:66:3e:bb:f6:ef:4f:c2:72:
74:27:f4:13:14:cd:c3:29:b5:31:4e:73:62:f4:16:
b1:cb:f9:e7:a0:90:c8:94:d1:50:14:2a:18:47:55:
e9:b7:a3:c9:1b:d6:19:52:86:60:62:a7:e2:75:80:
38:21:8f:ac:0e:81:e1:95:0f:14:db:86:c4:42:63:
e9:04:ee:78:90:55:79:d7:0e:35:ad:5f:7e:de:96:
dd:8b:70:66:41:cd:43:fa:25:4c:93:70:05:50:63:
ea:96:e8:44:2b:fa:4f:8e:e9:2b:21:9a:37:2e:31:
05:4b:23:8a:3a:69:68:e4:14:8e:8e:44:55:c4:6a:
f3:39:24:8c:cc:22:47:0f:8d:4b:7a:a8:df:1a:6c:
99:18:c5:21:0f:88:2a:56:32:35:78:fd:e8:bd:bf:
82:62:52:df:60:76:0c:90:e4:a8:01:e6:21:85:8f:
12:0f:a3:53:c3:b0:22:62:17:68:c3:04:73:89:cf:
29:e5:71:3d:d9:03:58:a8:d7:e0:ca:f3:f2:5c:2a:
55:b8:67:82:97:60:90:e4:85:13:c1:32:61:0f:66:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:40:E8:9E:38:10:84:DC:9B:5A:EA:EA:52:18:6C:37:44:C7:CD
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/5i5A6J44EITcm1rq6lIYbDdEx80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3e:de:21:54:d4:73:3b:fd:5a:b3:c2:4c:02:bc:e4:92:42:
27:da:c9:af:6a:67:b0:1f:0e:00:d2:31:d3:df:54:d3:fa:32:
a8:1b:b0:01:95:bf:21:1a:b3:5e:1f:d5:07:ba:5a:a7:f0:8e:
4b:bc:f7:a2:9b:d0:f9:5b:a6:e6:e1:83:b9:78:f6:b6:14:ef:
a9:f9:c6:70:9a:5c:4d:81:f7:71:7d:73:7f:19:74:f2:62:e0:
28:12:81:2c:2c:74:c7:3a:3a:86:b8:02:2a:c4:f5:6d:07:d4:
c5:08:cf:e0:85:90:b7:99:8b:fc:9f:83:2d:fd:35:e6:7a:57:
75:4b:02:a5:7e:02:04:00:75:1a:a4:cc:c7:e4:d2:83:42:88:
77:0e:40:19:e5:a1:b3:50:78:c2:b6:bc:75:53:02:56:0e:57:
23:91:40:ef:b8:ea:7a:ed:55:46:34:54:52:67:d9:7a:cd:2e:
1c:f5:50:18:58:6e:27:63:e5:21:b4:0e:9c:10:21:8f:b6:1f:
23:b7:d2:2d:33:f0:e5:d4:88:d5:83:cf:1c:d3:98:89:57:0a:
d5:fb:d1:c8:27:2d:d0:a1:1d:a6:6a:b3:2d:9c:24:d1:67:1f:
2a:d2:94:4b:25:0c:24:bd:7d:bd:11:4e:ef:11:ac:6d:9a:40:
0f:37:b4:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbYWOW4WZEe7DGAK7iaAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzdlNTZmNDY4N2VhMWIyZDc3NjNkMDg4OGQxMDUwMjM1
YjU3NGIwHhcNMjQwMTAxMDAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjJlNDBlODllMzgxMDg0ZGM5YjVhZWFlYTUyMTg2YzM3NDRjN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb9mN906Woufxbzlmg/rk/uvqEdV
7vw6k5vHMwmwrcxswGKTZj679u9PwnJ0J/QTFM3DKbUxTnNi9Baxy/nnoJDIlNFQ
FCoYR1Xpt6PJG9YZUoZgYqfidYA4IY+sDoHhlQ8U24bEQmPpBO54kFV51w41rV9+
3pbdi3BmQc1D+iVMk3AFUGPqluhEK/pPjukrIZo3LjEFSyOKOmlo5BSOjkRVxGrz
OSSMzCJHD41LeqjfGmyZGMUhD4gqVjI1eP3ovb+CYlLfYHYMkOSoAeYhhY8SD6NT
w7AiYhdowwRzic8p5XE92QNYqNfgyvPyXCpVuGeCl2CQ5IUTwTJhD2bTDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYuQOieOBCE3Jta6upSGGw3RMfNMB8GA1UdIwQY
MBaAFLTH5W9Gh+obLXdj0IiNEFAjW1dLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTIt
MDU5OWYwYjJiMDlhLzEvNWk1QTZKNDRFSVRjbTFycTZsSVliRGRFeDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84NTE5MDItNTA1MC00NmIyLWI0NTItMDU5OWYwYjJiMDlh
LzEvdE1mbGIwYUg2aHN0ZDJQUWlJMFFVQ05iVjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwf4BMA0G
CSqGSIb3DQEBCwUAA4IBAQC1Pt4hVNRzO/1as8JMArzkkkIn2smvamewHw4A0jHT
31TT+jKoG7ABlb8hGrNeH9UHulqn8I5LvPeim9D5W6bm4YO5ePa2FO+p+cZwmlxN
gfdxfXN/GXTyYuAoEoEsLHTHOjqGuAIqxPVtB9TFCM/ghZC3mYv8n4Mt/TXmeld1
SwKlfgIEAHUapMzH5NKDQoh3DkAZ5aGzUHjCtrx1UwJWDlcjkUDvuOp67VVGNFRS
Z9l6zS4c9VAYWG4nY+UhtA6cECGPth8jt9ItM/Dl1IjVg88c05iJVwrV+9HIJy3Q
oR2marMtnCTRZx8q0pRLJQwkvX29EU7vEaxtmkAPN7QO
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:54:41 2024 by rpki-client on console-ams.rpki-client.org