Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/yEP7iBQY-ezqoErL-LoVzwaBdeU.roa
File: yEP7iBQY-ezqoErL-LoVzwaBdeU.roa (raw, json)
Hash identifier: 14BquGjiIbUR/YvwOF1YRoBXSPp7HF/UClFU31Vhx8w=
Subject key identifier: C8:43:FB:88:14:18:F9:EC:EA:A0:4A:CB:F8:BA:15:CF:06:81:75:E5
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018CC56EB250D92F43C593E686D43B9D61A6
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/yEP7iBQY-ezqoErL-LoVzwaBdeU.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 980
IP address blocks: 5.249.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b2:50:d9:2f:43:c5:93:e6:86:d4:3b:9d:61:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c843fb881418f9eceaa04acbf8ba15cf068175e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:dc:2b:0d:ca:3d:7c:e0:70:b6:8d:7c:eb:
28:ff:8d:ee:cc:6e:b8:62:45:0e:46:83:62:96:30:
69:5b:13:3b:dc:ac:b4:92:ce:88:9c:c2:98:b8:88:
5d:df:af:8e:ac:ca:4d:ef:fc:2c:1d:31:6e:10:46:
82:12:f1:5a:51:f4:02:09:25:e4:1b:d1:7f:15:ae:
0f:59:2a:7f:69:d5:1e:e0:ad:4c:54:16:76:29:03:
4b:36:7e:2d:e7:a4:ef:21:b9:af:13:f1:13:ff:e2:
df:c4:81:87:61:e6:4c:90:29:a0:f9:54:17:27:fb:
ac:b7:a7:7d:a9:2d:cb:1c:99:02:03:d8:81:86:fa:
d3:1a:3a:e0:cd:d8:ba:e6:92:af:aa:3e:01:43:3e:
ec:f6:b0:ca:2d:08:47:ee:64:ad:3b:46:78:ca:52:
6d:ed:c9:cd:ae:d5:16:f2:a4:16:5b:3e:f2:f7:7f:
29:fa:7a:82:78:40:7a:36:db:5d:24:54:a8:ac:aa:
45:53:98:0f:21:0e:54:62:20:72:c7:2f:a9:d5:1c:
77:3f:73:7f:df:18:cc:55:fc:bf:3b:3f:6d:2a:66:
43:73:4e:0c:c0:88:eb:41:49:4d:d4:85:41:43:d9:
ab:1f:af:25:9c:dd:bc:15:96:f7:6b:d2:10:73:3a:
87:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:43:FB:88:14:18:F9:EC:EA:A0:4A:CB:F8:BA:15:CF:06:81:75:E5
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/yEP7iBQY-ezqoErL-LoVzwaBdeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.180.0/22
Signature Algorithm: sha256WithRSAEncryption
90:26:c2:a9:52:27:50:b3:e6:3c:65:e4:47:57:62:a1:24:5b:
de:a5:2d:57:c3:f6:9d:b3:5e:ca:96:43:bc:8f:60:d9:01:1b:
e1:92:c7:d9:5c:57:68:77:c0:34:d8:f3:26:8a:47:c0:1f:dc:
14:2c:77:1c:a6:52:12:96:f1:68:ad:67:a3:47:85:2b:f3:cf:
a2:4f:9f:f6:52:15:b4:f4:64:f9:66:36:9c:9e:b3:75:e6:0c:
59:3d:7c:ad:09:e8:94:5a:76:08:f4:c6:c3:d2:26:10:4d:5b:
33:25:5e:2a:ad:80:b7:f8:eb:30:ab:f4:4f:aa:68:a5:bb:33:
a1:ce:18:e2:83:b5:26:37:d0:6c:72:5f:fc:12:c6:8d:9a:55:
18:2b:68:cf:d6:b9:5c:99:b6:37:6e:3b:16:c0:38:7b:b9:71:
fc:9c:87:9b:4b:b2:02:b4:fb:7e:10:f7:8c:8d:22:7d:64:38:
16:c5:53:cf:63:25:5c:21:da:ed:43:90:6e:52:38:3d:38:ad:
2b:23:1b:41:a6:ef:7f:fa:b1:e0:6c:c7:79:6d:6d:cb:94:4a:
05:17:13:25:16:f7:66:24:b6:29:38:0b:1a:d7:7d:93:86:08:
8f:86:7c:ed:28:5c:27:d6:06:12:a0:11:e4:38:8e:3d:d6:6d:
53:a7:2b:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbrJQ2S9DxZPmhtQ7nWGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjQwMTAxMTQzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQzZmI4ODE0MThmOWVjZWFhMDRhY2JmOGJhMTVjZjA2ODE3NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg3cKw3KPXzgcLaNfOso/43uzG64
YkUORoNiljBpWxM73Ky0ks6InMKYuIhd36+OrMpN7/wsHTFuEEaCEvFaUfQCCSXk
G9F/Fa4PWSp/adUe4K1MVBZ2KQNLNn4t56TvIbmvE/ET/+LfxIGHYeZMkCmg+VQX
J/ust6d9qS3LHJkCA9iBhvrTGjrgzdi65pKvqj4BQz7s9rDKLQhH7mStO0Z4ylJt
7cnNrtUW8qQWWz7y938p+nqCeEB6NttdJFSorKpFU5gPIQ5UYiByxy+p1Rx3P3N/
3xjMVfy/Oz9tKmZDc04MwIjrQUlN1IVBQ9mrH68lnN28FZb3a9IQczqHCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhD+4gUGPns6qBKy/i6Fc8GgXXlMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEveUVQN2lCUVktZXpxb0VyTC1Mb1Z6d2FCZGVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfm0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQJsKpUidQs+Y8ZeRHV2KhJFvepS1Xw/ads17KlkO8
j2DZARvhksfZXFdod8A02PMmikfAH9wULHccplISlvForWejR4Ur88+iT5/2UhW0
9GT5ZjacnrN15gxZPXytCeiUWnYI9MbD0iYQTVszJV4qrYC3+Oswq/RPqmiluzOh
zhjig7UmN9Bscl/8EsaNmlUYK2jP1rlcmbY3bjsWwDh7uXH8nIebS7ICtPt+EPeM
jSJ9ZDgWxVPPYyVcIdrtQ5BuUjg9OK0rIxtBpu9/+rHgbMd5bW3LlEoFFxMlFvdm
JLYpOAsa132ThgiPhnztKFwn1gYSoBHkOI491m1TpysB
-----END CERTIFICATE-----
Generated at Sun May 5 19:59:35 2024 by rpki-client on console-ams.rpki-client.org