Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/XNMYkeYbF5jjFCOxxrtnHoaeMRQ.roa
File: XNMYkeYbF5jjFCOxxrtnHoaeMRQ.roa (raw, json)
Hash identifier: y08Rmd9FQa8VnRnisim6EFs+Pqv/IU+acnEPz2k9GiA=
Subject key identifier: 5C:D3:18:91:E6:1B:17:98:E3:14:23:B1:C6:BB:67:1E:86:9E:31:14
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 018CC7933A6B883EDC8AEFF0F13AAE043B83
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/XNMYkeYbF5jjFCOxxrtnHoaeMRQ.roa
Signing time: Tue 02 Jan 2024 00:29:23 +0000
ROA not before: Tue 02 Jan 2024 00:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15626
IP address blocks: 130.0.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3a:6b:88:3e:dc:8a:ef:f0:f1:3a:ae:04:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cd31891e61b1798e31423b1c6bb671e869e3114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:fc:61:86:4b:91:e5:ec:1b:13:27:d2:02:
df:83:3a:56:44:d9:1f:0b:8d:2b:44:e6:5f:0b:2d:
08:8c:0e:3a:17:6b:77:b4:d8:ec:67:87:65:57:53:
12:5f:c9:95:00:c5:62:77:90:cb:e7:dc:6b:76:3c:
f6:74:2f:91:f8:fb:b0:fa:bc:da:e3:b5:f6:8e:94:
ab:ad:cf:ae:2f:92:09:66:e9:8e:4c:f7:27:ad:5f:
3d:2c:04:a3:f3:b2:38:9a:05:bb:a0:f5:80:21:6d:
35:4c:ba:b6:f9:dd:f4:05:88:6b:d4:d9:c6:7f:83:
ed:16:bf:83:2e:8a:d1:8f:d3:90:57:f7:52:9a:cd:
ff:f8:e2:21:4f:2f:c9:79:17:dd:f9:60:ef:c4:b5:
c9:d5:c9:cf:ab:65:8d:4f:82:16:7e:5f:2c:85:f5:
fd:8b:22:6b:4c:86:1d:6d:17:eb:82:18:14:80:05:
91:ff:36:8d:d3:28:36:80:af:a8:ac:56:5d:f2:66:
11:2a:c3:4d:6c:fd:93:99:de:2b:af:e8:0a:20:64:
4c:7c:91:b2:dc:ae:a5:3f:41:5c:de:1e:c2:e9:99:
2a:b0:ee:85:e6:23:d7:ba:72:7c:52:d8:7d:8f:be:
9f:d7:db:98:35:b7:47:f4:7d:3f:c2:c0:b3:95:ed:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:18:91:E6:1B:17:98:E3:14:23:B1:C6:BB:67:1E:86:9E:31:14
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/XNMYkeYbF5jjFCOxxrtnHoaeMRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.232.0/21
Signature Algorithm: sha256WithRSAEncryption
89:93:51:a1:39:41:92:c9:92:6c:48:e9:3b:d7:6e:f4:f4:36:
90:a4:b9:ef:27:d7:16:74:13:9e:95:b7:73:52:ab:a5:f0:ab:
42:f9:64:06:83:ee:0f:43:d1:c3:d9:fe:96:05:b0:17:8c:d5:
51:8b:2d:3a:83:ec:42:29:f0:f5:94:22:fa:8c:64:04:a1:59:
77:63:09:b4:88:0e:69:bf:58:18:67:fe:6a:92:92:0b:b5:b1:
f4:40:7c:b2:fb:7c:6d:cd:4e:11:23:e4:d5:8c:f1:14:d9:66:
81:46:13:01:a2:e7:ce:d5:3b:c0:02:3e:ba:ac:c9:a2:42:0c:
fc:7b:b3:01:c1:2f:08:65:2e:88:4a:e1:77:ec:ae:8c:b4:95:
c4:8c:ff:39:5d:c0:e4:a4:20:1e:05:1f:81:ce:e7:c7:56:dc:
b6:48:05:ea:12:57:22:23:a9:31:e8:bb:38:7c:72:f9:a1:06:
ed:ce:01:c0:ee:b5:15:40:79:5b:2e:ee:7b:c1:50:aa:a9:11:
a7:2b:f6:2a:af:0d:0f:cf:44:5b:f6:f7:49:4e:3f:71:e2:c8:
2e:f4:c7:b4:7a:1b:14:8a:36:f5:8a:04:d1:ce:bf:2e:3c:d7:
02:21:41:9a:2b:f1:ae:46:ca:8e:9b:b0:10:2f:10:44:95:1d:
e1:a2:39:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzpriD7ciu/w8TquBDuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjQwMTAyMDAyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2QzMTg5MWU2MWIxNzk4ZTMxNDIzYjFjNmJiNjcxZTg2OWUzMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9X8YYZLkeXsGxMn0gLfgzpWRNkf
C40rROZfCy0IjA46F2t3tNjsZ4dlV1MSX8mVAMVid5DL59xrdjz2dC+R+Puw+rza
47X2jpSrrc+uL5IJZumOTPcnrV89LASj87I4mgW7oPWAIW01TLq2+d30BYhr1NnG
f4PtFr+DLorRj9OQV/dSms3/+OIhTy/JeRfd+WDvxLXJ1cnPq2WNT4IWfl8shfX9
iyJrTIYdbRfrghgUgAWR/zaN0yg2gK+orFZd8mYRKsNNbP2Tmd4rr+gKIGRMfJGy
3K6lP0Fc3h7C6ZkqsO6F5iPXunJ8Uth9j76f19uYNbdH9H0/wsCzle08vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFzTGJHmGxeY4xQjsca7Zx6GnjEUMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvWE5NWWtlWWJGNWpqRkNPeHhydG5Ib2FlTVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDggDoMA0G
CSqGSIb3DQEBCwUAA4IBAQCJk1GhOUGSyZJsSOk712709DaQpLnvJ9cWdBOelbdz
Uqul8KtC+WQGg+4PQ9HD2f6WBbAXjNVRiy06g+xCKfD1lCL6jGQEoVl3Ywm0iA5p
v1gYZ/5qkpILtbH0QHyy+3xtzU4RI+TVjPEU2WaBRhMBoufO1TvAAj66rMmiQgz8
e7MBwS8IZS6ISuF37K6MtJXEjP85XcDkpCAeBR+BzufHVty2SAXqElciI6kx6Ls4
fHL5oQbtzgHA7rUVQHlbLu57wVCqqRGnK/Yqrw0Pz0Rb9vdJTj9x4sgu9Me0ehsU
ijb1igTRzr8uPNcCIUGaK/GuRsqOm7AQLxBElR3hojnL
-----END CERTIFICATE-----
Generated at Sun May 26 06:01:37 2024 by rpki-client on console-ams.rpki-client.org