Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/5dKajwYG3y0gxix-bvI7sKCuHF4.roa
File: 5dKajwYG3y0gxix-bvI7sKCuHF4.roa (raw, json)
Hash identifier: 8gPdQQ6nUTVc5A1tc9onMdQKfrIxvnQ7vNby3Z8Hgc4=
Subject key identifier: E5:D2:9A:8F:06:06:DF:2D:20:C6:2C:7E:6E:F2:3B:B0:A0:AE:1C:5E
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 018CC9BC04C04EDF1E50FCBCBCC9159184CE
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/5dKajwYG3y0gxix-bvI7sKCuHF4.roa
Signing time: Tue 02 Jan 2024 10:33:11 +0000
ROA not before: Tue 02 Jan 2024 10:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137
IP address blocks: 192.156.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:04:c0:4e:df:1e:50:fc:bc:bc:c9:15:91:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jan 2 10:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d29a8f0606df2d20c62c7e6ef23bb0a0ae1c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:8b:89:32:1a:9e:53:3f:6c:d0:51:be:79:
eb:53:4a:d7:3d:08:76:54:4f:67:3e:75:36:b3:78:
0d:82:f0:44:05:b4:b5:92:5a:c9:ba:b9:0e:1d:93:
18:9f:ff:32:a3:18:7a:34:0d:42:3e:02:81:e3:37:
37:15:54:71:3c:6f:42:32:e5:0f:e4:5e:a1:cc:d2:
10:4d:c1:d7:1d:a4:8e:fb:cd:bb:54:f7:11:c9:c2:
e6:70:9c:fd:ed:c2:37:54:7b:6e:dd:a3:2f:91:2a:
e5:5d:7b:2e:4f:01:72:a3:d2:3b:59:87:17:d8:e3:
f9:2f:cc:fc:2c:ab:26:04:dd:7c:57:6a:34:8c:c4:
e7:93:cb:81:e3:fc:b2:f0:cb:8c:0a:28:d4:b4:81:
9e:33:07:60:ad:04:a9:30:8a:03:19:9b:42:b4:68:
25:62:1f:e4:e0:d3:17:d7:76:35:07:82:87:7f:35:
10:b8:29:71:b4:a8:18:ba:03:55:dc:4d:fa:30:99:
15:19:47:a0:2c:74:dd:5c:6d:fe:9c:35:13:6f:cb:
99:32:3b:8d:34:b2:74:cf:8e:54:e8:36:3c:02:8d:
78:72:db:89:c0:c3:f0:1d:ff:37:2d:32:98:10:81:
b4:4d:70:61:05:36:a0:92:f0:92:0a:83:7d:58:06:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:9A:8F:06:06:DF:2D:20:C6:2C:7E:6E:F2:3B:B0:A0:AE:1C:5E
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/5dKajwYG3y0gxix-bvI7sKCuHF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.156.213.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d7:62:7e:9d:49:df:d0:81:91:60:ed:9e:a2:32:ff:d3:91:
59:ac:d2:38:71:e6:36:c6:f1:96:37:4c:d9:4a:d7:5f:c7:b6:
ad:29:b3:b9:2b:0d:9c:23:2b:68:37:f0:1e:bd:56:66:65:7a:
8a:47:cb:43:41:f3:5b:93:1b:42:25:c8:90:a1:a5:07:71:5f:
82:9b:a6:29:5f:b4:d5:7c:46:e8:b0:ed:40:df:18:0a:2e:9f:
ff:bb:0a:f1:80:18:cc:4e:ec:18:6d:e4:da:63:33:69:c1:57:
66:76:03:45:f1:8f:41:2a:26:01:70:fd:14:40:a4:09:f4:c4:
1c:74:48:47:65:42:d2:4a:3b:4a:91:08:a4:f4:52:2a:1b:a9:
f0:e6:27:54:e6:4a:22:e4:31:d5:f6:7f:3f:e5:c1:d5:c3:85:
df:12:77:6a:03:0a:b8:a1:1e:4e:b9:bc:a1:4d:59:e7:f2:8e:
26:65:0e:ac:db:94:80:e1:6b:d3:b2:2f:0d:2f:76:37:1b:d8:
11:d8:34:0e:eb:24:63:6e:96:48:53:e1:49:08:71:b4:5b:54:
6b:8d:23:10:8e:ce:e3:34:ef:62:63:6e:21:fc:63:0c:b6:d3:
31:20:f2:d1:f8:3d:15:ab:57:8d:fe:d8:81:a8:c0:35:1c:a4:
2f:c0:6b:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvATATt8eUPy8vMkVkYTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx
MGE1MWMwHhcNMjQwMTAyMTAzMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQyOWE4ZjA2MDZkZjJkMjBjNjJjN2U2ZWYyM2JiMGEwYWUxYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBqLiTIanlM/bNBRvnnrU0rXPQh2
VE9nPnU2s3gNgvBEBbS1klrJurkOHZMYn/8yoxh6NA1CPgKB4zc3FVRxPG9CMuUP
5F6hzNIQTcHXHaSO+827VPcRycLmcJz97cI3VHtu3aMvkSrlXXsuTwFyo9I7WYcX
2OP5L8z8LKsmBN18V2o0jMTnk8uB4/yy8MuMCijUtIGeMwdgrQSpMIoDGZtCtGgl
Yh/k4NMX13Y1B4KHfzUQuClxtKgYugNV3E36MJkVGUegLHTdXG3+nDUTb8uZMjuN
NLJ0z45U6DY8Ao14ctuJwMPwHf83LTKYEIG0TXBhBTagkvCSCoN9WAYkDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXSmo8GBt8tIMYsfm7yO7CgrhxeMB8GA1UdIwQY
MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt
YmYyNmE3ZmFhNjAzLzEvNWRLYWp3WUczeTBneGl4LWJ2STdzS0N1SEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz
LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJzVMA0G
CSqGSIb3DQEBCwUAA4IBAQBB12J+nUnf0IGRYO2eojL/05FZrNI4ceY2xvGWN0zZ
Stdfx7atKbO5Kw2cIytoN/AevVZmZXqKR8tDQfNbkxtCJciQoaUHcV+Cm6YpX7TV
fEbosO1A3xgKLp//uwrxgBjMTuwYbeTaYzNpwVdmdgNF8Y9BKiYBcP0UQKQJ9MQc
dEhHZULSSjtKkQik9FIqG6nw5idU5koi5DHV9n8/5cHVw4XfEndqAwq4oR5Oubyh
TVnn8o4mZQ6s25SA4WvTsi8NL3Y3G9gR2DQO6yRjbpZIU+FJCHG0W1RrjSMQjs7j
NO9iY24h/GMMttMxIPLR+D0Vq1eN/tiBqMA1HKQvwGu3
-----END CERTIFICATE-----
Generated at Sun Jun 16 11:26:25 2024 by rpki-client on console-fra.rpki-client.org