Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/SfoTTth3rrA5wQYE34lMo8DB-8M.roa
File: SfoTTth3rrA5wQYE34lMo8DB-8M.roa (raw, json)
Hash identifier: +P/FPPP55Q/FXM9aimJ+RSJFN5GuJwJnpROSmVWU770=
Subject key identifier: 49:FA:13:4E:D8:77:AE:B0:39:C1:06:04:DF:89:4C:A3:C0:C1:FB:C3
Certificate issuer: /CN=d99becd088794b11daf34c7f54e59f6939fe9864
Certificate serial: 01924891D15B0731CCF5B0D258ED3ADD72AC
Authority key identifier: D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/SfoTTth3rrA5wQYE34lMo8DB-8M.roa
Signing time: Tue 01 Oct 2024 14:52:48 +0000
ROA not before: Tue 01 Oct 2024 14:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211573
IP address blocks: 5.42.201.0/24 maxlen: 24
2a13:3c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:91:d1:5b:07:31:cc:f5:b0:d2:58:ed:3a:dd:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99becd088794b11daf34c7f54e59f6939fe9864
Validity
Not Before: Oct 1 14:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49fa134ed877aeb039c10604df894ca3c0c1fbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:de:f1:d4:e8:d5:f4:f9:eb:e2:80:33:17:
32:f0:f5:f1:47:81:b6:99:7a:b7:d4:01:85:b5:0f:
1e:c4:e6:c3:48:c4:f0:dd:c0:3d:bd:5d:97:ab:67:
59:0e:dd:21:06:4c:45:90:57:f7:a1:f7:09:c1:19:
5d:f9:4d:3d:3e:a2:3f:7d:91:9c:c7:8c:64:9d:4c:
32:c1:45:7d:30:08:e8:12:36:87:78:6f:87:eb:24:
54:64:5e:f1:8a:97:13:c8:c7:4d:4f:56:41:55:9a:
b4:8c:9d:c1:6e:82:fc:32:7b:28:3e:e5:0c:3f:fe:
53:76:43:78:d1:ba:67:d5:a1:30:50:61:2b:b1:e1:
0f:78:f4:84:30:b7:db:54:72:1d:13:ce:24:b6:03:
ed:df:59:8c:38:a7:c5:3c:07:41:dd:07:b0:1b:94:
16:e4:22:21:83:89:59:7b:1e:41:ee:02:f3:a1:8a:
c7:aa:c6:1c:6f:a1:ae:a8:ac:4a:e5:64:d0:2a:5d:
9c:6c:fa:45:9d:51:22:4b:5e:01:32:63:d9:27:db:
79:ae:f1:1f:94:2e:3d:c0:9e:6b:ad:3d:9c:5e:c8:
50:29:e8:30:66:a8:c9:68:6c:3f:8f:85:02:ce:72:
ef:75:5c:90:8d:e4:20:6d:cf:6c:b3:d8:04:fa:72:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:13:4E:D8:77:AE:B0:39:C1:06:04:DF:89:4C:A3:C0:C1:FB:C3
X509v3 Authority Key Identifier:
keyid:D9:9B:EC:D0:88:79:4B:11:DA:F3:4C:7F:54:E5:9F:69:39:FE:98:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/SfoTTth3rrA5wQYE34lMo8DB-8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/94aab2-b41e-460e-9fcb-242b58140e37/1/2Zvs0Ih5SxHa80x_VOWfaTn-mGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.201.0/24
IPv6:
2a13:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
22:76:14:7b:84:d7:4d:c3:dd:22:0f:05:bc:ea:c7:72:6f:1e:
47:7e:87:94:72:bf:d6:89:42:62:62:0f:90:50:89:58:1a:43:
c4:6c:28:77:39:5f:15:fb:29:c4:f7:1c:25:f5:48:ae:3a:07:
2a:0e:3e:93:dc:7a:c2:0d:17:29:ee:2a:01:65:1f:83:e1:8f:
39:c6:92:5f:dd:2b:bc:e6:b3:31:f7:a9:3d:48:fc:be:8d:1c:
18:2d:9c:cd:4f:e5:5d:e9:8e:b5:c7:73:55:fe:f8:c3:bb:48:
95:84:79:20:c7:f1:90:12:8b:3d:44:52:d1:b1:fe:33:08:37:
78:2a:e5:8d:94:16:de:a9:74:1d:60:9d:91:b6:d6:b0:fb:a1:
08:3c:71:7c:e0:d3:d9:bd:f3:9f:ca:8b:79:9e:2d:e7:8a:aa:
fe:d1:e9:a0:b3:43:87:5b:fa:6a:51:df:85:79:35:8e:a2:0e:
fd:ae:e1:cb:9a:22:57:5a:b5:f3:ca:2d:b5:f8:f4:be:2c:22:
1d:ef:ac:8f:1a:10:58:4f:c6:ae:55:bb:93:17:83:e3:cb:e6:
80:20:f4:62:62:29:23:87:ef:ae:11:15:f6:17:2e:88:a8:a4:
e0:0d:f8:75:f9:dd:39:16:19:10:45:45:6e:d2:67:38:ac:58:
45:5b:cd:3b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZJIkdFbBzHM9bDSWO063XKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWJlY2QwODg3OTRiMTFkYWYzNGM3ZjU0ZTU5ZjY5Mzlm
ZTk4NjQwHhcNMjQxMDAxMTQ1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWZhMTM0ZWQ4NzdhZWIwMzljMTA2MDRkZjg5NGNhM2MwYzFmYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJXe8dTo1fT56+KAMxcy8PXxR4G2
mXq31AGFtQ8exObDSMTw3cA9vV2Xq2dZDt0hBkxFkFf3ofcJwRld+U09PqI/fZGc
x4xknUwywUV9MAjoEjaHeG+H6yRUZF7xipcTyMdNT1ZBVZq0jJ3BboL8MnsoPuUM
P/5TdkN40bpn1aEwUGErseEPePSEMLfbVHIdE84ktgPt31mMOKfFPAdB3QewG5QW
5CIhg4lZex5B7gLzoYrHqsYcb6GuqKxK5WTQKl2cbPpFnVEiS14BMmPZJ9t5rvEf
lC49wJ5rrT2cXshQKegwZqjJaGw/j4UCznLvdVyQjeQgbc9ss9gE+nIiNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEn6E07Yd66wOcEGBN+JTKPAwfvDMB8GA1UdIwQY
MBaAFNmb7NCIeUsR2vNMf1Tln2k5/phkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2It
MjQyYjU4MTQwZTM3LzEvU2ZvVFR0aDNyckE1d1FZRTM0bE1vOERCLThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NGFhYjItYjQxZS00NjBlLTlmY2ItMjQyYjU4MTQwZTM3
LzEvMlp2czBJaDVTeEhhODB4X1ZPV2ZhVG4tbUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABSrJMA0E
AgACMAcDBQMqEzwAMA0GCSqGSIb3DQEBCwUAA4IBAQAidhR7hNdNw90iDwW86sdy
bx5HfoeUcr/WiUJiYg+QUIlYGkPEbCh3OV8V+ynE9xwl9UiuOgcqDj6T3HrCDRcp
7ioBZR+D4Y85xpJf3Su85rMx96k9SPy+jRwYLZzNT+Vd6Y61x3NV/vjDu0iVhHkg
x/GQEos9RFLRsf4zCDd4KuWNlBbeqXQdYJ2Rttaw+6EIPHF84NPZvfOfyot5ni3n
iqr+0emgs0OHW/pqUd+FeTWOog79ruHLmiJXWrXzyi21+PS+LCId76yPGhBYT8au
VbuTF4Pjy+aAIPRiYikjh++uERX2Fy6IqKTgDfh1+d05FhkQRUVu0mc4rFhFW807
-----END CERTIFICATE-----
Generated at Sat Dec 28 03:00:25 2024 by rpki-client on console-ams.rpki-client.org