Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/tOW4O05EgA3QLzIb17K1eu7anRM.roa
File: tOW4O05EgA3QLzIb17K1eu7anRM.roa (raw, json)
Hash identifier: mXCo1yJeRwmhySr9ccjziVs4hFooojaZbiVVuFYqYRg=
Subject key identifier: B4:E5:B8:3B:4E:44:80:0D:D0:2F:32:1B:D7:B2:B5:7A:EE:DA:9D:13
Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial: 018E601DBC263B4030F746E3CEA20A75A92D
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/tOW4O05EgA3QLzIb17K1eu7anRM.roa
Signing time: Thu 21 Mar 2024 08:25:45 +0000
ROA not before: Thu 21 Mar 2024 08:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51814
IP address blocks: 5.181.17.0/24 maxlen: 24
5.181.18.0/24 maxlen: 24
185.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:1d:bc:26:3b:40:30:f7:46:e3:ce:a2:0a:75:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Validity
Not Before: Mar 21 08:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e5b83b4e44800dd02f321bd7b2b57aeeda9d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:75:ee:11:8d:91:11:64:7a:24:90:a9:28:
c3:a8:fe:e6:5e:3b:9d:0d:fc:b3:89:be:93:94:5a:
6d:ac:35:2c:c1:24:1b:6c:3b:fd:23:9c:5e:c5:4d:
18:4f:a6:af:e2:48:92:2b:be:ff:cc:6d:97:f1:f3:
8f:9e:f4:6f:d6:c3:6f:bc:09:0c:d6:c8:71:f2:17:
81:d1:4e:4a:48:a9:47:13:cf:63:9f:e2:c2:03:d9:
5a:e5:e5:ff:b5:87:1f:91:4b:af:24:8d:73:9f:fc:
67:8d:fd:81:e2:c4:0d:4d:1d:63:89:e1:66:25:13:
68:a0:63:d5:a5:87:f3:9c:0a:74:b1:26:f4:b6:49:
54:16:87:08:55:20:fc:65:8a:53:24:21:09:3b:2e:
e4:56:4b:35:4c:a7:fc:c8:f0:b8:f1:05:5f:c0:89:
f8:3a:90:96:c3:c7:d1:55:ca:91:4c:d2:39:47:0f:
47:4f:29:03:84:38:96:b6:df:1a:ab:66:af:6e:b9:
6c:d9:95:a7:60:f5:1b:e3:71:f2:26:51:c9:ea:1e:
3b:f0:a1:6c:9e:3a:a6:8d:43:dc:fa:cc:98:d4:55:
1c:f4:70:9b:b9:ed:0c:dd:a6:4f:79:8d:dd:5f:03:
6d:b4:d3:49:ae:ea:52:e1:46:d8:b5:cf:73:0e:fb:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E5:B8:3B:4E:44:80:0D:D0:2F:32:1B:D7:B2:B5:7A:EE:DA:9D:13
X509v3 Authority Key Identifier:
keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/tOW4O05EgA3QLzIb17K1eu7anRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.17.0-5.181.18.255
185.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
50:42:85:db:13:9d:ff:d8:4b:8c:0e:9b:dc:6a:e4:dd:cb:d2:
ba:b3:a5:60:3b:86:32:12:4e:71:d6:da:47:b1:d8:cc:ec:ce:
21:cc:3e:77:8a:ef:cd:a6:f4:75:07:11:26:fb:7a:bb:11:fd:
d4:d3:bc:7e:cd:4c:5c:0b:a8:2b:88:e8:62:76:04:49:89:d3:
25:f7:48:73:f0:c4:f2:e1:13:03:94:48:b4:f0:e8:5a:11:82:
83:02:f1:ce:12:63:02:54:ca:88:ea:3d:8d:a0:17:7a:90:ee:
84:cf:ca:c4:41:5c:55:6c:c6:66:22:46:57:13:55:66:49:64:
5d:11:19:e5:7a:51:fe:4c:91:ee:77:0e:63:6d:ad:d6:2b:33:
1f:7f:85:2a:81:10:50:cf:59:58:16:25:6e:9e:3b:43:0e:6f:
8f:b8:66:24:60:6a:34:1d:c4:a2:7a:37:08:9e:bc:79:32:b3:
ee:ba:3c:3b:f1:3e:3a:d0:e6:99:71:2c:8c:10:7c:21:42:06:
91:6b:95:77:31:6c:5f:08:30:43:96:96:74:ce:55:9a:8d:9d:
cd:3c:01:85:0d:bb:42:f3:ac:54:c2:6c:90:24:93:fa:dd:69:
7e:33:95:6c:aa:73:80:e0:4d:69:63:af:67:ff:67:2e:52:7c:
e8:fd:5b:df
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY5gHbwmO0Aw90bjzqIKdaktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjQwMzIxMDgyNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGU1YjgzYjRlNDQ4MDBkZDAyZjMyMWJkN2IyYjU3YWVlZGE5ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVx17hGNkRFkeiSQqSjDqP7mXjud
Dfyzib6TlFptrDUswSQbbDv9I5xexU0YT6av4kiSK77/zG2X8fOPnvRv1sNvvAkM
1shx8heB0U5KSKlHE89jn+LCA9la5eX/tYcfkUuvJI1zn/xnjf2B4sQNTR1jieFm
JRNooGPVpYfznAp0sSb0tklUFocIVSD8ZYpTJCEJOy7kVks1TKf8yPC48QVfwIn4
OpCWw8fRVcqRTNI5Rw9HTykDhDiWtt8aq2avbrls2ZWnYPUb43HyJlHJ6h478KFs
njqmjUPc+syY1FUc9HCbue0M3aZPeY3dXwNttNNJrupS4UbYtc9zDvtZWwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLTluDtORIAN0C8yG9eytXru2p0TMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvdE9XNE8wNUVnQTNRTHpJYjE3SzFldTdhblJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAFtRED
BAAFtRIDBAC5YxYwDQYJKoZIhvcNAQELBQADggEBAFBChdsTnf/YS4wOm9xq5N3L
0rqzpWA7hjISTnHW2kex2MzsziHMPneK782m9HUHESb7ersR/dTTvH7NTFwLqCuI
6GJ2BEmJ0yX3SHPwxPLhEwOUSLTw6FoRgoMC8c4SYwJUyojqPY2gF3qQ7oTPysRB
XFVsxmYiRlcTVWZJZF0RGeV6Uf5Mke53DmNtrdYrMx9/hSqBEFDPWVgWJW6eO0MO
b4+4ZiRgajQdxKJ6NwievHkys+66PDvxPjrQ5plxLIwQfCFCBpFrlXcxbF8IMEOW
lnTOVZqNnc08AYUNu0LzrFTCbJAkk/rdaX4zlWyqc4DgTWljr2f/Zy5SfOj9W98=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:58 2024 by rpki-client on console-ams.rpki-client.org