Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/S5QWM24MUiT6mWUCeYQtVOK0re4.roa
File: S5QWM24MUiT6mWUCeYQtVOK0re4.roa (raw, json)
Hash identifier: 0/GuMve4TCNIFx2cczlP3hVdL0AZnyvDC0dn6syuyRw=
Subject key identifier: 4B:94:16:33:6E:0C:52:24:FA:99:65:02:79:84:2D:54:E2:B4:AD:EE
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019243022BE2C05EB82861D76FC6267BD6D3
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/S5QWM24MUiT6mWUCeYQtVOK0re4.roa
Signing time: Mon 30 Sep 2024 12:57:48 +0000
ROA not before: Mon 30 Sep 2024 12:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206994
IP address blocks: 193.5.147.0/24 maxlen: 24
2a0c:8180::/29 maxlen: 29
2a0c:8187::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:02:2b:e2:c0:5e:b8:28:61:d7:6f:c6:26:7b:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Sep 30 12:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b9416336e0c5224fa99650279842d54e2b4adee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e7:94:82:f9:04:80:7f:33:af:9c:55:f2:de:
54:d2:c3:09:b9:c5:07:9d:21:51:f1:a4:dc:1d:f5:
80:80:da:c0:5b:e5:02:9a:35:3f:d1:b9:fd:4a:78:
7d:79:88:d8:b3:b2:3f:3a:f7:38:58:61:9f:2e:7d:
f2:07:cf:c2:23:d9:05:3c:90:35:79:36:c2:c1:b2:
e2:be:e1:a3:94:a4:79:31:86:7f:da:22:32:49:5a:
7f:fa:37:62:76:e6:ed:a1:ef:a4:ee:51:49:d9:61:
3c:af:85:4f:65:83:82:92:41:f5:42:55:20:ed:7e:
3c:a6:93:3b:a5:47:db:93:c2:7a:7e:ad:ac:e9:ab:
8b:ff:21:9c:08:13:01:4c:99:81:62:22:19:db:ef:
2c:90:a5:67:90:17:73:b6:4c:4b:00:dc:2c:f0:ab:
fc:89:65:3e:cc:b9:85:cf:1e:12:cc:34:e3:3d:a9:
6f:1e:df:b9:fe:a2:1e:a2:a6:85:df:e5:77:9b:58:
7b:c5:28:30:a7:77:c0:2d:c9:60:cf:b4:6d:3d:77:
9e:0f:a5:9f:04:13:9d:e4:ce:62:95:39:b7:2f:63:
84:96:99:64:f0:58:9f:66:c9:7d:1b:75:75:fc:ad:
9b:02:3c:ee:eb:40:0f:22:56:db:9c:df:99:e5:90:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:94:16:33:6E:0C:52:24:FA:99:65:02:79:84:2D:54:E2:B4:AD:EE
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/S5QWM24MUiT6mWUCeYQtVOK0re4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.147.0/24
IPv6:
2a0c:8180::/29
Signature Algorithm: sha256WithRSAEncryption
89:94:f6:4a:8d:5f:94:06:a4:f4:f6:06:af:d0:44:89:ed:75:
ed:40:bb:94:ab:53:e1:c6:64:59:0e:cc:65:e5:c4:09:68:a8:
2d:82:7e:47:cf:77:e7:bc:9a:72:9a:eb:14:e1:0e:27:ab:23:
98:69:4d:e6:18:b9:f8:ec:c8:a7:5f:7a:e6:5f:dc:ad:06:6e:
e3:8c:f6:e8:7a:45:64:aa:8d:83:85:f0:e5:07:f0:69:a3:5c:
6d:88:21:b3:64:35:74:36:3f:79:b1:db:7c:46:43:7f:3b:5f:
3b:38:f7:e0:98:d2:77:8c:ff:c4:99:35:ae:71:d0:b6:91:1b:
e5:d2:9b:9f:be:5d:44:25:48:d8:ad:f2:f1:14:8a:38:6e:e7:
27:d5:ba:62:11:e9:30:42:d2:6a:24:c3:c4:9e:28:cc:fd:9b:
ff:fd:76:da:30:c6:e7:fb:5b:37:1a:03:64:c5:cd:22:00:40:
40:6c:c4:ce:d5:2e:af:1f:61:70:7f:a8:d3:e6:50:bb:17:7f:
b9:61:45:25:23:60:f2:ae:64:ba:57:05:79:37:ab:a5:5a:2c:
27:88:a7:7d:23:cd:18:5b:e3:d9:26:d6:aa:f3:74:6e:51:f5:
cc:75:1a:4b:41:97:ba:0f:bb:85:61:b9:67:28:28:8d:36:f0:
b1:6c:7d:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZJDAiviwF64KGHXb8Yme9bTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjQwOTMwMTI1NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjk0MTYzMzZlMGM1MjI0ZmE5OTY1MDI3OTg0MmQ1NGUyYjRhZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOeUgvkEgH8zr5xV8t5U0sMJucUH
nSFR8aTcHfWAgNrAW+UCmjU/0bn9Snh9eYjYs7I/Ovc4WGGfLn3yB8/CI9kFPJA1
eTbCwbLivuGjlKR5MYZ/2iIySVp/+jdidubtoe+k7lFJ2WE8r4VPZYOCkkH1QlUg
7X48ppM7pUfbk8J6fq2s6auL/yGcCBMBTJmBYiIZ2+8skKVnkBdztkxLANws8Kv8
iWU+zLmFzx4SzDTjPalvHt+5/qIeoqaF3+V3m1h7xSgwp3fALclgz7RtPXeeD6Wf
BBOd5M5ilTm3L2OElplk8FifZsl9G3V1/K2bAjzu60APIlbbnN+Z5ZA44QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEuUFjNuDFIk+pllAnmELVTitK3uMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvUzVRV00yNE1VaVQ2bVdVQ2VZUXRWT0swcmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwQWTMA0E
AgACMAcDBQMqDIGAMA0GCSqGSIb3DQEBCwUAA4IBAQCJlPZKjV+UBqT09gav0ESJ
7XXtQLuUq1PhxmRZDsxl5cQJaKgtgn5Hz3fnvJpymusU4Q4nqyOYaU3mGLn47Min
X3rmX9ytBm7jjPboekVkqo2DhfDlB/Bpo1xtiCGzZDV0Nj95sdt8RkN/O187OPfg
mNJ3jP/EmTWucdC2kRvl0pufvl1EJUjYrfLxFIo4bucn1bpiEekwQtJqJMPEnijM
/Zv//XbaMMbn+1s3GgNkxc0iAEBAbMTO1S6vH2Fwf6jT5lC7F3+5YUUlI2DyrmS6
VwV5N6ulWiwniKd9I80YW+PZJtaq83RuUfXMdRpLQZe6D7uFYblnKCiNNvCxbH0J
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:25 2024 by rpki-client on console-fra.rpki-client.org