Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/5eVmMCsF3wvdUhJgc9XdYPP1Y6U.roa
File: 5eVmMCsF3wvdUhJgc9XdYPP1Y6U.roa (raw, json)
Hash identifier: UwukM/YPDcxg55N79ZLfsI7cXx5g14bpUugNsYdJCvA=
Subject key identifier: E5:E5:66:30:2B:05:DF:0B:DD:52:12:60:73:D5:DD:60:F3:F5:63:A5
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 018CC5DC876E18CE836C548F3164B8D73BCE
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/5eVmMCsF3wvdUhJgc9XdYPP1Y6U.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25115
IP address blocks: 193.201.236.0/22 maxlen: 22
193.23.243.0/24 maxlen: 24
194.15.176.0/23 maxlen: 23
2a09:20c1::/32 maxlen: 32
2a09:20c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:87:6e:18:ce:83:6c:54:8f:31:64:b8:d7:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e566302b05df0bdd52126073d5dd60f3f563a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:fe:c3:b7:bf:e2:f6:9e:8a:06:e8:d8:d6:
13:83:5c:0f:cf:8d:c1:d7:f9:c2:ff:a2:1d:68:36:
a8:54:ae:c8:21:ae:fd:aa:d8:7f:fa:4e:76:03:8a:
49:a7:2f:96:c6:eb:9c:3f:8f:54:30:e8:05:d1:93:
7d:ca:49:68:b1:82:d8:05:f1:55:4e:ee:fd:87:5a:
57:e9:71:d2:26:e3:06:90:81:85:54:e8:b7:e4:77:
67:3b:72:1c:bc:ee:77:da:ab:e7:c4:f8:72:cc:94:
53:5d:b4:bd:94:c5:8c:05:55:90:8d:5e:cc:32:3b:
62:3c:04:45:3e:a6:54:54:fb:be:2e:b5:ab:d1:68:
e7:7e:87:cf:2c:87:35:f0:90:98:b8:10:33:06:47:
58:c6:c1:00:6b:d4:44:71:d8:3c:86:7f:01:b3:a0:
1a:48:e1:8c:09:8a:e4:e9:6d:d4:ad:45:7f:16:b3:
20:28:4b:b6:21:76:f7:00:5c:a5:fe:0e:2a:c1:45:
ca:17:5d:61:80:e2:5b:9a:8e:f2:13:d1:15:72:58:
c2:32:b3:bf:5a:13:22:6a:52:31:ff:cb:4b:56:fb:
8f:c8:ff:be:b5:19:09:b8:3c:a5:ee:21:e4:6c:21:
db:4e:64:5f:66:06:41:2a:75:5e:ed:ea:1c:7b:39:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E5:66:30:2B:05:DF:0B:DD:52:12:60:73:D5:DD:60:F3:F5:63:A5
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/5eVmMCsF3wvdUhJgc9XdYPP1Y6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.243.0/24
193.201.236.0/22
194.15.176.0/23
IPv6:
2a09:20c0::/31
Signature Algorithm: sha256WithRSAEncryption
68:ce:70:f5:79:23:c2:9f:a5:47:2d:4c:ec:ab:5d:6d:f7:bd:
c4:09:68:7b:d4:17:d6:ec:d7:93:d9:5a:26:57:53:7d:18:43:
70:09:f9:93:82:8a:7f:c7:f2:ff:96:95:35:81:47:ca:5b:94:
e7:2a:f4:f2:63:f5:40:8f:b8:9a:69:c3:f9:a1:4f:99:3b:b4:
68:b9:d7:db:8d:83:02:09:27:3c:d2:9a:93:42:46:cc:40:7f:
7a:c8:95:49:65:25:2b:86:18:8f:88:ae:95:a7:6d:bf:29:78:
d1:46:d0:c6:a2:28:9b:1b:1c:2b:17:a1:bf:86:b0:3a:10:8f:
a5:37:8c:d0:d9:4a:e5:ee:10:5d:fa:9a:10:d3:27:4e:9f:d9:
5d:fe:43:f8:1b:55:5d:10:35:98:33:45:f8:a0:6c:d1:cb:a5:
84:43:08:01:5e:a2:67:ad:4a:20:92:36:55:41:ef:fe:95:03:
60:18:5f:27:37:b2:69:8b:40:ca:14:24:26:dc:5b:ec:b6:c1:
a3:d1:1e:84:16:96:93:bf:98:c8:70:b2:c9:f2:8b:a6:68:27:
51:d2:96:84:0a:62:2f:53:f2:9d:b1:5a:39:08:69:48:26:87:
c3:a0:4d:8b:4b:ad:95:c5:ab:88:94:5b:79:7d:c2:71:23:79:
86:85:67:cf
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzF3IduGM6DbFSPMWS41zvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGFiYTE1ZDFkMzY2Y2I1MzA5NTQxMmQwNjQ5MGUyMzQ5
OGUxNzAwHhcNMjQwMTAxMTYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWU1NjYzMDJiMDVkZjBiZGQ1MjEyNjA3M2Q1ZGQ2MGYzZjU2M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMT+w7e/4vaeigbo2NYTg1wPz43B
1/nC/6IdaDaoVK7IIa79qth/+k52A4pJpy+WxuucP49UMOgF0ZN9yklosYLYBfFV
Tu79h1pX6XHSJuMGkIGFVOi35HdnO3IcvO532qvnxPhyzJRTXbS9lMWMBVWQjV7M
MjtiPARFPqZUVPu+LrWr0WjnfofPLIc18JCYuBAzBkdYxsEAa9REcdg8hn8Bs6Aa
SOGMCYrk6W3UrUV/FrMgKEu2IXb3AFyl/g4qwUXKF11hgOJbmo7yE9EVcljCMrO/
WhMialIx/8tLVvuPyP++tRkJuDyl7iHkbCHbTmRfZgZBKnVe7eoceznl3wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOXlZjArBd8L3VISYHPV3WDz9WOlMB8GA1UdIwQY
MBaAFGTauhXR02bLUwlUEtBkkOI0mOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2Et
YTk0ZGQ4Y2NhZjlmLzEvNWVWbU1Dc0Yzd3ZkVWhKZ2M5WGRZUFAxWTZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2EtYTk0ZGQ4Y2NhZjlm
LzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwRfzAwQC
wcnsAwQBwg+wMA0EAgACMAcDBQEqCSDAMA0GCSqGSIb3DQEBCwUAA4IBAQBoznD1
eSPCn6VHLUzsq11t973ECWh71BfW7NeT2VomV1N9GENwCfmTgop/x/L/lpU1gUfK
W5TnKvTyY/VAj7iaacP5oU+ZO7RoudfbjYMCCSc80pqTQkbMQH96yJVJZSUrhhiP
iK6Vp22/KXjRRtDGoiibGxwrF6G/hrA6EI+lN4zQ2Url7hBd+poQ0ydOn9ld/kP4
G1VdEDWYM0X4oGzRy6WEQwgBXqJnrUogkjZVQe/+lQNgGF8nN7Jpi0DKFCQm3Fvs
tsGj0R6EFpaTv5jIcLLJ8oumaCdR0paECmIvU/KdsVo5CGlIJofDoE2LS62VxauI
lFt5fcJxI3mGhWfP
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:40:40 2024 by rpki-client on console-ams.rpki-client.org