Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/ThY1bSUmM50-RAkz8NEI3wljFfA.roa
File: ThY1bSUmM50-RAkz8NEI3wljFfA.roa (raw, json)
Hash identifier: jDji3cZ/f/JINOlT7G6Qj7E4nvViq/m4FiYoy6bu1dk=
Subject key identifier: 4E:16:35:6D:25:26:33:9D:3E:44:09:33:F0:D1:08:DF:09:63:15:F0
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 018CC4935335F831037035ED48F97603B8F8
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/ThY1bSUmM50-RAkz8NEI3wljFfA.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59463
IP address blocks: 84.54.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:53:35:f8:31:03:70:35:ed:48:f9:76:03:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e16356d2526339d3e440933f0d108df096315f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:87:ab:f5:7e:69:e3:af:3b:a0:01:35:48:
af:b0:16:ca:59:4b:bd:3d:19:20:2f:fa:93:2d:05:
e1:f3:9f:dc:68:1f:d2:5d:af:ab:15:2f:08:71:d5:
79:d8:74:d5:1e:ea:ca:fe:2d:e8:de:a2:dd:ba:25:
61:f2:a6:6d:09:3f:7c:c9:75:0d:c4:ae:99:cb:f1:
6f:51:0d:69:b1:6e:b0:f8:75:7d:9b:7a:8e:1f:ab:
b5:1f:f3:6b:4f:16:81:b5:a1:9e:2b:5b:2d:c0:8f:
e8:53:ae:65:b3:fe:76:87:48:01:fe:dc:ec:02:30:
75:42:8d:72:72:f6:97:c9:03:81:4a:04:6f:7a:ec:
b7:da:78:f7:77:e2:98:7a:dd:dc:c8:7e:ea:61:e3:
22:d4:88:39:6b:1e:68:97:db:88:14:5f:76:96:a2:
2f:41:ba:2b:f1:bc:fd:2e:a7:79:c2:ab:7c:53:67:
05:bd:bd:3c:f7:db:10:6e:8f:23:ef:d0:03:d5:94:
7f:12:5f:e9:0a:98:25:41:bf:66:5c:ef:25:4b:4b:
92:32:94:9d:21:6e:40:38:8c:44:e6:4d:f9:f4:0c:
ba:ea:37:0c:09:77:a9:1c:71:a2:47:95:54:5c:12:
ec:8c:ee:bb:f7:7f:9a:86:12:7d:30:b0:61:bc:5b:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:16:35:6D:25:26:33:9D:3E:44:09:33:F0:D1:08:DF:09:63:15:F0
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/ThY1bSUmM50-RAkz8NEI3wljFfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:68:d4:ce:8e:45:9e:31:67:87:8c:f6:6a:be:05:01:e6:d3:
5e:45:3f:03:66:96:15:04:fc:6f:ae:ca:39:0e:ab:6e:93:c2:
85:54:c5:ea:58:d1:ff:44:fc:0a:a5:a8:b7:a9:ef:2c:37:52:
77:d3:b7:a5:15:82:3d:73:21:b7:20:d2:35:21:78:7d:6f:b0:
6b:d1:da:1a:5e:46:b6:d3:de:20:17:aa:0b:ca:91:d1:70:ff:
3e:6d:b3:f6:9f:40:12:8d:9a:fd:ac:51:7d:e6:7f:f2:40:d9:
03:df:b6:ab:5b:58:d1:2e:42:ae:b7:be:f8:b3:be:a2:24:40:
30:61:63:22:26:86:1f:eb:56:88:ac:7b:8b:19:1c:12:61:13:
25:ef:cb:47:0b:47:f2:64:c6:33:54:3c:85:79:2b:57:a7:d7:
6f:ef:8e:d7:d9:4f:8e:ce:2e:14:9d:17:95:09:60:5d:e1:1f:
13:35:ed:64:0a:1b:bd:1b:06:b5:83:ec:3a:18:72:c9:fa:24:
3e:c9:28:56:8f:29:ee:8c:9a:2b:d5:dc:6e:e8:05:50:a4:3f:
6b:e6:76:4f:96:b5:ed:3f:8f:f6:eb:d7:e3:49:1b:41:e4:1f:
69:8c:f9:f9:f0:01:ee:42:30:11:5d:fc:a6:c8:14:38:62:58:
90:36:aa:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk1M1+DEDcDXtSPl2A7j4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1
ZmY0ODUwHhcNMjQwMTAxMTAzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTE2MzU2ZDI1MjYzMzlkM2U0NDA5MzNmMGQxMDhkZjA5NjMxNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZeHq/V+aeOvO6ABNUivsBbKWUu9
PRkgL/qTLQXh85/caB/SXa+rFS8IcdV52HTVHurK/i3o3qLduiVh8qZtCT98yXUN
xK6Zy/FvUQ1psW6w+HV9m3qOH6u1H/NrTxaBtaGeK1stwI/oU65ls/52h0gB/tzs
AjB1Qo1ycvaXyQOBSgRveuy32nj3d+KYet3cyH7qYeMi1Ig5ax5ol9uIFF92lqIv
Qbor8bz9Lqd5wqt8U2cFvb0899sQbo8j79AD1ZR/El/pCpglQb9mXO8lS0uSMpSd
IW5AOIxE5k359Ay66jcMCXepHHGiR5VUXBLsjO6793+ahhJ9MLBhvFtanwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4WNW0lJjOdPkQJM/DRCN8JYxXwMB8GA1UdIwQY
MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt
NTdlMWQ1YjcyYjJkLzEvVGhZMWJTVW1NNTAtUkFrejhORUkzd2xqRmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk
LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDa/MA0G
CSqGSIb3DQEBCwUAA4IBAQCkaNTOjkWeMWeHjPZqvgUB5tNeRT8DZpYVBPxvrso5
Dqtuk8KFVMXqWNH/RPwKpai3qe8sN1J307elFYI9cyG3INI1IXh9b7Br0doaXka2
094gF6oLypHRcP8+bbP2n0ASjZr9rFF95n/yQNkD37arW1jRLkKut774s76iJEAw
YWMiJoYf61aIrHuLGRwSYRMl78tHC0fyZMYzVDyFeStXp9dv747X2U+Ozi4UnReV
CWBd4R8TNe1kChu9Gwa1g+w6GHLJ+iQ+yShWjynujJor1dxu6AVQpD9r5nZPlrXt
P4/269fjSRtB5B9pjPn58AHuQjARXfymyBQ4YliQNqri
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:22 2024 by rpki-client on console-ams.rpki-client.org