Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/DHpRWwFkAWEoWPnhh1Cs_AqkkLU.roa
File: DHpRWwFkAWEoWPnhh1Cs_AqkkLU.roa (raw, json)
Hash identifier: 5B/TUQ7z7wHz0GjBatOI3+yf+tBi/4x6upFwoVlO1z8=
Subject key identifier: 0C:7A:51:5B:01:64:01:61:28:58:F9:E1:87:50:AC:FC:0A:A4:90:B5
Certificate issuer: /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial: 018F37582D31A9822D12437818751508E89C
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/DHpRWwFkAWEoWPnhh1Cs_AqkkLU.roa
Signing time: Thu 02 May 2024 03:27:56 +0000
ROA not before: Thu 02 May 2024 03:27:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197075
IP address blocks: 5.152.154.0/24 maxlen: 24
5.152.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:37:58:2d:31:a9:82:2d:12:43:78:18:75:15:08:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Validity
Not Before: May 2 03:27:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c7a515b016401612858f9e18750acfc0aa490b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:cf:33:2d:e6:9b:80:ee:76:8d:a8:cb:cb:
ab:bc:df:c0:b8:06:c0:ac:89:b8:d2:65:d9:2c:9a:
2f:10:a8:51:01:c3:7b:b5:b2:c1:ca:50:f9:fe:90:
fa:29:94:8a:d6:23:1a:43:cd:b4:f7:12:10:cc:4c:
07:50:9e:92:f0:1a:e5:a7:72:88:90:0d:92:d7:97:
07:0d:7b:89:87:e8:8c:7f:5f:52:80:59:af:82:23:
31:59:3c:83:4a:c8:1c:36:f6:c9:e0:a6:c2:5b:cb:
e5:31:3c:bf:9d:6a:47:7e:a9:fc:4a:45:c4:2c:89:
ba:56:1e:4a:13:45:38:a7:0e:32:a2:0d:da:ab:5f:
6d:04:78:22:08:ab:22:9b:14:a0:d6:4b:30:ed:17:
28:c5:35:57:db:ee:cc:53:2a:70:f4:08:07:d4:69:
5d:62:c8:c6:f7:8e:a8:c3:dd:66:57:7f:c0:3f:25:
2e:a6:02:10:b4:05:9c:77:fe:4f:7a:ed:71:f1:c6:
a2:b0:88:4c:58:7e:53:95:6c:e1:0a:8f:a6:9b:dc:
3a:9e:07:f5:72:4f:c2:49:05:f8:5a:be:76:f1:26:
6a:6c:c2:8f:49:30:eb:47:12:18:c8:ed:d3:1f:fd:
4f:f0:7e:0a:c0:7e:a6:b9:15:94:0d:ec:a2:1a:12:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:51:5B:01:64:01:61:28:58:F9:E1:87:50:AC:FC:0A:A4:90:B5
X509v3 Authority Key Identifier:
keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/DHpRWwFkAWEoWPnhh1Cs_AqkkLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.154.0/24
5.152.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a0:35:b6:a8:89:55:55:75:4e:3f:eb:38:be:23:75:b0:84:
2b:f3:59:6a:70:3c:3e:9c:bc:87:51:e4:dd:bb:bc:fc:b9:15:
2d:07:9b:c4:26:01:8b:73:7d:da:11:e7:29:98:65:4b:cb:8d:
e9:99:a2:5a:b0:3d:7a:da:60:59:1e:17:b5:59:d9:61:5b:7d:
65:25:27:8d:57:6f:d2:26:c2:95:19:b2:6f:db:1c:f1:c6:d8:
10:34:04:32:f7:09:55:9d:70:19:a7:8a:f3:b5:7c:22:b5:b1:
3e:d6:7c:10:bd:13:28:03:b9:e7:67:3f:9d:e8:cb:a9:a2:cb:
6f:09:aa:49:82:0e:9b:73:c2:3c:c9:24:d2:97:13:9a:ff:11:
49:4d:0a:06:58:c3:27:1d:43:f1:ae:8c:f6:8b:fa:0b:d5:84:
1a:74:47:bc:67:4a:a3:0b:48:02:d7:c0:6d:da:9d:ff:fd:b5:
48:5e:88:20:e1:f6:05:5a:e7:eb:16:42:2b:4d:80:70:ed:23:
fa:16:2c:56:53:a3:07:96:9a:ab:68:62:9c:f0:a5:6b:51:98:
57:64:a3:bb:fe:d1:36:d7:ec:48:08:fb:24:c5:8e:76:7e:3f:
07:b4:07:75:5c:89:75:8e:c5:ad:ac:33:eb:b8:a4:e9:5d:23:
4a:91:c2:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY83WC0xqYItEkN4GHUVCOicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjQwNTAyMDMyNzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzdhNTE1YjAxNjQwMTYxMjg1OGY5ZTE4NzUwYWNmYzBhYTQ5MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaXPMy3mm4Dudo2oy8urvN/AuAbA
rIm40mXZLJovEKhRAcN7tbLBylD5/pD6KZSK1iMaQ8209xIQzEwHUJ6S8Brlp3KI
kA2S15cHDXuJh+iMf19SgFmvgiMxWTyDSsgcNvbJ4KbCW8vlMTy/nWpHfqn8SkXE
LIm6Vh5KE0U4pw4yog3aq19tBHgiCKsimxSg1ksw7RcoxTVX2+7MUypw9AgH1Gld
YsjG946ow91mV3/APyUupgIQtAWcd/5Peu1x8caisIhMWH5TlWzhCo+mm9w6ngf1
ck/CSQX4Wr528SZqbMKPSTDrRxIYyO3TH/1P8H4KwH6muRWUDeyiGhLbDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAx6UVsBZAFhKFj54YdQrPwKpJC1MB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvREhwUld3RmtBV0VvV1BuaGgxQ3NfQXFra0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZiaAwQA
BZicMA0GCSqGSIb3DQEBCwUAA4IBAQBPoDW2qIlVVXVOP+s4viN1sIQr81lqcDw+
nLyHUeTdu7z8uRUtB5vEJgGLc33aEecpmGVLy43pmaJasD162mBZHhe1WdlhW31l
JSeNV2/SJsKVGbJv2xzxxtgQNAQy9wlVnXAZp4rztXwitbE+1nwQvRMoA7nnZz+d
6MupostvCapJgg6bc8I8ySTSlxOa/xFJTQoGWMMnHUPxroz2i/oL1YQadEe8Z0qj
C0gC18Bt2p3//bVIXogg4fYFWufrFkIrTYBw7SP6FixWU6MHlpqraGKc8KVrUZhX
ZKO7/tE21+xICPskxY52fj8HtAd1XIl1jsWtrDPruKTpXSNKkcKj
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:21 2024 by rpki-client on console-fra.rpki-client.org