Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa
File: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (raw, json)
Hash identifier: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=
Subject key identifier: E5:89:43:B4:5E:C8:83:94:E6:6E:E4:BF:36:80:AF:AB:47:52:52:F3
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019426D91D8B960E803CE0952FFF21BF7426
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa
Signing time: Thu 02 Jan 2025 11:49:10 +0000
ROA not before: Thu 02 Jan 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44991
IP address blocks: 195.230.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1d:8b:96:0e:80:3c:e0:95:2f:ff:21:bf:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58943b45ec88394e66ee4bf3680afab475252f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:42:0b:ab:6d:c8:4c:1e:56:0b:fa:a8:f5:
ff:56:56:1b:e8:2c:8c:c5:d4:f8:d1:e6:3d:a4:b6:
8e:32:9d:54:56:29:63:7d:a5:b3:e6:dd:f9:6b:8d:
30:fe:58:76:74:8d:06:d1:b7:53:90:06:12:2b:18:
9d:8f:a7:d9:b9:fb:bd:3a:d8:82:5f:66:e5:24:2c:
7c:36:f4:34:2c:74:31:81:bc:27:49:d8:47:e5:27:
28:22:a9:19:61:82:ad:2d:b6:56:e7:12:a8:60:af:
8d:3c:a2:33:ac:0a:e7:3b:9f:7f:5d:68:d5:84:60:
e3:43:be:fc:14:c7:f0:35:68:0e:ac:13:ba:f7:81:
88:bc:07:c2:77:50:fa:0c:56:3f:5d:8f:18:80:90:
9d:28:4f:f8:fe:01:97:b9:c9:4c:3c:f4:eb:13:38:
9d:cb:9d:ec:82:9a:17:79:71:4e:a2:1c:0b:f7:9d:
31:12:85:51:f9:1d:82:6d:d1:14:e0:ba:49:1e:f2:
f1:bb:58:a7:2b:b7:d0:09:ae:f8:f1:00:6f:84:41:
38:44:be:9a:3d:dc:b8:14:be:ee:e7:57:d7:7e:0e:
5d:76:b4:a3:b0:33:5d:37:f6:bf:b7:65:3d:03:92:
c1:6a:50:0e:3b:11:cb:c2:f8:57:7e:9f:03:52:8a:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:43:B4:5E:C8:83:94:E6:6E:E4:BF:36:80:AF:AB:47:52:52:F3
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1d:f9:b3:33:b9:47:da:bd:3d:f3:be:62:ac:0a:bd:3c:9a:
c6:2d:f6:63:76:94:cb:17:21:98:dc:d5:57:ab:b8:4b:9f:82:
17:1b:a5:82:53:e1:71:45:01:47:b7:32:27:03:15:a0:1d:41:
8e:3b:13:71:ea:61:78:1f:dd:96:3e:dd:53:bf:44:ac:9b:55:
fa:35:2b:f9:cb:1a:64:52:26:d4:ef:69:49:e7:b2:10:ed:1c:
2e:34:05:87:3c:9e:24:0f:e4:1d:9e:eb:b5:e7:7e:04:50:a8:
d1:a7:92:5c:a6:24:e1:9c:31:a3:7e:5c:05:da:bd:7a:29:0f:
bd:f0:80:06:ab:45:8d:5a:5a:fe:5f:1f:da:39:ec:be:d5:b6:
18:29:2e:12:2f:a0:c4:c6:6a:85:09:da:54:c0:f5:66:19:17:
a2:97:3a:5d:e9:41:84:96:73:5a:fe:fd:d0:c8:65:01:76:4e:
37:0c:20:a3:34:8e:ed:fb:ad:c9:9c:6d:cb:59:15:46:5c:4e:
a0:61:0e:19:e8:0f:8e:fb:4d:4b:4e:f3:da:17:01:a7:b7:c0:
b1:01:57:6e:9b:3c:38:f9:02:5f:ea:19:51:39:53:9b:de:cb:
4c:23:13:14:98:ef:d7:f5:d4:80:fe:09:e7:ea:0a:7e:c1:83:
8c:60:90:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2R2Llg6APOCVL/8hv3QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjUwMTAyMTE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTg5NDNiNDVlYzg4Mzk0ZTY2ZWU0YmYzNjgwYWZhYjQ3NTI1MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd1CC6ttyEweVgv6qPX/VlYb6CyM
xdT40eY9pLaOMp1UViljfaWz5t35a40w/lh2dI0G0bdTkAYSKxidj6fZufu9OtiC
X2blJCx8NvQ0LHQxgbwnSdhH5ScoIqkZYYKtLbZW5xKoYK+NPKIzrArnO59/XWjV
hGDjQ778FMfwNWgOrBO694GIvAfCd1D6DFY/XY8YgJCdKE/4/gGXuclMPPTrEzid
y53sgpoXeXFOohwL950xEoVR+R2CbdEU4LpJHvLxu1inK7fQCa748QBvhEE4RL6a
Pdy4FL7u51fXfg5ddrSjsDNdN/a/t2U9A5LBalAOOxHLwvhXfp8DUooHXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWJQ7ReyIOU5m7kvzaAr6tHUlLzMB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvNVlsRHRGN0lnNVRtYnVTX05vQ3ZxMGRTVXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZqMA0G
CSqGSIb3DQEBCwUAA4IBAQCzHfmzM7lH2r09875irAq9PJrGLfZjdpTLFyGY3NVX
q7hLn4IXG6WCU+FxRQFHtzInAxWgHUGOOxNx6mF4H92WPt1Tv0Ssm1X6NSv5yxpk
UibU72lJ57IQ7RwuNAWHPJ4kD+Qdnuu1534EUKjRp5JcpiThnDGjflwF2r16KQ+9
8IAGq0WNWlr+Xx/aOey+1bYYKS4SL6DExmqFCdpUwPVmGReilzpd6UGElnNa/v3Q
yGUBdk43DCCjNI7t+63JnG3LWRVGXE6gYQ4Z6A+O+01LTvPaFwGnt8CxAVdumzw4
+QJf6hlROVOb3stMIxMUmO/X9dSA/gnn6gp+wYOMYJDQ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:21 2025 by rpki-client