Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_bLYKMBT-KvYxRzj-_x83r7qyt0.roa
File: _bLYKMBT-KvYxRzj-_x83r7qyt0.roa (raw, json)
Hash identifier: CU1LFxl8dXLwgTsS2kYg6f3mxP+hvMo7QWK6ruzJgks=
Subject key identifier: FD:B2:D8:28:C0:53:F8:AB:D8:C5:1C:E3:FB:FC:7C:DE:BE:EA:CA:DD
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 018CCA29C6E77BCE812892827EB433175656
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_bLYKMBT-KvYxRzj-_x83r7qyt0.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213298
IP address blocks: 5.187.56.0/24 maxlen: 24
5.187.57.0/24 maxlen: 24
5.187.58.0/24 maxlen: 24
5.187.56.0/21 maxlen: 21
5.187.63.0/24 maxlen: 24
5.187.59.0/24 maxlen: 24
5.187.60.0/24 maxlen: 24
5.187.61.0/24 maxlen: 24
5.187.62.0/24 maxlen: 24
2a01:41c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c6:e7:7b:ce:81:28:92:82:7e:b4:33:17:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdb2d828c053f8abd8c51ce3fbfc7cdebeeacadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:2d:f2:03:3c:4f:51:43:11:aa:65:57:90:
f7:03:91:73:06:a2:34:55:12:68:d8:b4:08:88:55:
f7:b5:08:c6:ef:30:26:00:ad:bd:5b:7f:fe:8c:ad:
d9:b5:e1:12:cb:28:c9:74:f6:a9:8a:24:de:ce:b4:
9c:f3:8a:36:0d:62:45:a4:8c:6f:d2:07:4f:0d:1d:
28:a4:74:c6:ae:5f:99:dd:78:7c:0f:4b:64:82:53:
3a:54:4f:6d:8b:e1:f3:35:7a:ce:1a:f8:56:bd:09:
ee:36:a3:83:5d:8b:4a:4a:5a:08:85:9f:83:12:86:
70:d0:f9:d8:14:5b:10:f1:bb:d3:52:cd:51:a5:2b:
c8:4f:c6:1c:87:95:f7:1a:6a:07:24:96:31:7a:97:
e3:19:e0:9d:53:72:5a:57:7c:df:02:03:96:68:35:
42:25:5a:fd:30:55:7f:2c:96:6b:7c:ef:89:e3:3d:
7d:a5:16:ee:c6:7d:69:e8:df:b2:7b:14:bb:38:47:
c8:19:f6:3a:a2:da:f7:c5:4f:df:77:30:16:d8:f4:
67:cb:bc:be:ee:3a:71:b0:35:5a:f8:38:cf:05:ac:
24:af:52:fe:5b:71:d3:5b:d8:7f:00:e9:91:6e:9d:
23:44:a6:f9:81:07:40:20:ab:fe:80:51:ee:2b:02:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:D8:28:C0:53:F8:AB:D8:C5:1C:E3:FB:FC:7C:DE:BE:EA:CA:DD
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/_bLYKMBT-KvYxRzj-_x83r7qyt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.56.0/21
IPv6:
2a01:41c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:da:9f:f6:85:e5:65:44:e6:e9:7e:72:1d:b8:6a:15:b1:7a:
22:83:ce:06:9d:5f:aa:65:74:f5:db:21:45:78:f1:db:1e:be:
8b:e4:b0:5a:0f:86:52:fb:dd:78:bc:5e:f3:6d:8a:f2:ab:a0:
d7:be:79:64:62:4d:3a:9b:89:09:1c:81:ca:fd:18:bf:f8:f8:
59:5a:40:a8:ff:d4:cb:2c:11:6c:e3:47:93:33:a9:97:fd:3b:
d6:1b:cb:c6:1b:a5:4e:32:fb:eb:c4:0c:e7:c8:9f:73:95:d6:
75:d8:cc:09:2c:dc:a0:93:30:13:63:14:a4:e0:d5:18:16:05:
f7:20:16:46:8d:7c:6e:be:cc:56:76:3d:f2:77:fc:5f:53:21:
cc:17:b7:80:8e:67:9d:6c:a0:96:10:db:39:56:fe:0b:4c:fd:
f4:9f:71:30:f1:70:d0:55:c9:b1:73:6c:b0:63:de:97:b7:1b:
3d:71:62:22:34:f2:a4:6f:38:60:53:61:e6:d3:ae:7f:cb:cf:
7b:93:e9:1a:c3:ad:b1:c7:26:f1:7d:e3:62:45:88:6e:49:8b:
c5:29:15:22:21:eb:36:f9:52:37:25:3e:fa:3b:57:2f:62:c2:
78:c1:9b:ab:40:7e:9e:32:07:73:07:c4:e2:24:c2:40:b3:08:
14:38:b9:8b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKKcbne86BKJKCfrQzF1ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWRlOWY5ZGJiZDQ2MTg4NTdiNTgxMDVjNjc0MzcyMGEx
MWJjNmUwHhcNMjQwMTAyMTIzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGIyZDgyOGMwNTNmOGFiZDhjNTFjZTNmYmZjN2NkZWJlZWFjYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjEt8gM8T1FDEaplV5D3A5FzBqI0
VRJo2LQIiFX3tQjG7zAmAK29W3/+jK3ZteESyyjJdPapiiTezrSc84o2DWJFpIxv
0gdPDR0opHTGrl+Z3Xh8D0tkglM6VE9ti+HzNXrOGvhWvQnuNqODXYtKSloIhZ+D
EoZw0PnYFFsQ8bvTUs1RpSvIT8Ych5X3GmoHJJYxepfjGeCdU3JaV3zfAgOWaDVC
JVr9MFV/LJZrfO+J4z19pRbuxn1p6N+yexS7OEfIGfY6otr3xU/fdzAW2PRny7y+
7jpxsDVa+DjPBawkr1L+W3HTW9h/AOmRbp0jRKb5gQdAIKv+gFHuKwK1AQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP2y2CjAU/ir2MUc4/v8fN6+6srdMB8GA1UdIwQY
MBaAFG9d6fnbvUYYhXtYEFxnQ3IKEbxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTkt
YWUwNTc5NGM4ZTEzLzEvX2JMWUtNQlQtS3ZZeFJ6ai1feDgzcjdxeXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTktYWUwNTc5NGM4ZTEz
LzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBbs4MA0E
AgACMAcDBQAqAUHAMA0GCSqGSIb3DQEBCwUAA4IBAQAP2p/2heVlRObpfnIduGoV
sXoig84GnV+qZXT12yFFePHbHr6L5LBaD4ZS+914vF7zbYryq6DXvnlkYk06m4kJ
HIHK/Ri/+PhZWkCo/9TLLBFs40eTM6mX/TvWG8vGG6VOMvvrxAznyJ9zldZ12MwJ
LNygkzATYxSk4NUYFgX3IBZGjXxuvsxWdj3yd/xfUyHMF7eAjmedbKCWENs5Vv4L
TP30n3Ew8XDQVcmxc2ywY96Xtxs9cWIiNPKkbzhgU2Hm065/y897k+kaw62xxybx
feNiRYhuSYvFKRUiIes2+VI3JT76O1cvYsJ4wZurQH6eMgdzB8TiJMJAswgUOLmL
-----END CERTIFICATE-----
Generated at Thu Jun 6 13:25:44 2024 by rpki-client on console-ams.rpki-client.org