Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/A55m4-uMGZkrco8bEZaTTGo64WQ.roa
File: A55m4-uMGZkrco8bEZaTTGo64WQ.roa (raw, json)
Hash identifier: LHNBMQfs2mG731Hns+VsCqAJy9IOWZRqbMhJTSf6dps=
Subject key identifier: 03:9E:66:E3:EB:8C:19:99:2B:72:8F:1B:11:96:93:4C:6A:3A:E1:64
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 018CC500F584DB2009CDEE232FAC26F842E9
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/A55m4-uMGZkrco8bEZaTTGo64WQ.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207148
IP address blocks: 5.154.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f5:84:db:20:09:cd:ee:23:2f:ac:26:f8:42:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=039e66e3eb8c19992b728f1b1196934c6a3ae164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:c3:79:f8:d0:bd:ea:5c:fe:1d:75:6e:68:
58:0a:e7:32:7f:17:15:4e:b8:be:6f:74:63:53:38:
f0:00:8c:95:f4:17:15:95:4c:93:43:4a:9f:1b:13:
c3:e0:2a:af:2f:8f:4f:9d:17:45:c5:89:36:37:db:
c1:cc:20:f6:a7:a6:33:05:ae:bf:71:80:b7:cb:3b:
a2:11:52:c0:33:cf:f2:d3:fc:af:fa:e7:f4:de:3f:
47:86:56:36:91:0a:cb:48:64:b0:8f:86:bd:3f:eb:
49:0b:68:64:93:13:cc:77:de:02:20:f8:d7:05:ed:
bf:6d:1c:d2:60:84:22:b4:60:01:f1:5f:58:e8:e4:
6b:bb:d4:a4:76:ff:a8:b0:23:50:99:e4:cf:0e:3a:
c0:ad:60:38:3d:86:57:11:fb:c6:a2:ad:1a:12:17:
49:b0:62:8e:57:4b:b9:63:f1:c4:27:20:32:8b:4b:
4b:5d:7e:f3:e0:83:45:0d:5d:5f:19:3f:b7:83:2c:
40:d1:c9:83:95:2e:c1:c0:6a:13:31:2c:79:99:fd:
00:23:19:47:7e:47:4b:fd:71:0d:be:07:fa:c2:ab:
43:68:4d:c4:96:ed:24:b0:77:fe:fa:97:8f:d8:b0:
92:2d:90:b5:57:99:05:8a:66:61:89:de:d7:7c:43:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:66:E3:EB:8C:19:99:2B:72:8F:1B:11:96:93:4C:6A:3A:E1:64
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/A55m4-uMGZkrco8bEZaTTGo64WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:99:60:f7:94:84:3c:09:10:23:ef:c4:8c:d4:d4:4a:2f:35:
7a:63:85:74:0a:c2:29:58:0f:33:c8:6a:43:8c:34:b5:05:42:
03:13:8f:56:bd:a0:6e:a2:dc:b8:7f:d2:51:d2:96:3d:89:fc:
f9:15:59:b4:4f:1c:e9:ae:44:45:7f:f2:83:78:5c:a0:ee:d2:
69:74:88:0c:80:8e:60:eb:13:d3:7c:48:64:ba:69:14:9e:95:
fa:77:a2:58:d0:98:4d:4c:fe:fe:ab:c9:00:c8:ff:f1:f4:55:
b9:f1:25:f2:c6:51:e3:f3:41:74:b0:2a:e4:67:3a:b2:a8:f4:
c8:2b:e1:28:01:2a:39:2e:dc:25:55:78:2c:76:ec:de:ef:fa:
e3:8d:e7:e7:25:ad:b6:9f:3e:1a:a1:43:f4:77:85:0f:cd:36:
6b:f1:b8:94:83:ad:13:39:ee:ee:84:7a:b7:4b:b4:f5:60:98:
57:e5:e2:dc:5c:c0:86:bd:00:78:16:32:69:79:a8:6f:b3:50:
bd:35:2b:9a:95:d6:ed:3d:f9:b0:83:63:79:d7:bb:b6:88:ff:
a8:42:d4:4a:dd:28:fb:3d:2a:7b:36:af:c2:0a:c5:ce:7d:d2:
1c:04:72:bb:b3:f4:4d:a6:a1:b3:84:ed:19:8e:50:08:4f:99:
95:80:ef:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAPWE2yAJze4jL6wm+ELpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjQwMTAxMTIzMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzllNjZlM2ViOGMxOTk5MmI3MjhmMWIxMTk2OTM0YzZhM2FlMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLDDefjQvepc/h11bmhYCucyfxcV
Tri+b3RjUzjwAIyV9BcVlUyTQ0qfGxPD4CqvL49PnRdFxYk2N9vBzCD2p6YzBa6/
cYC3yzuiEVLAM8/y0/yv+uf03j9HhlY2kQrLSGSwj4a9P+tJC2hkkxPMd94CIPjX
Be2/bRzSYIQitGAB8V9Y6ORru9Skdv+osCNQmeTPDjrArWA4PYZXEfvGoq0aEhdJ
sGKOV0u5Y/HEJyAyi0tLXX7z4INFDV1fGT+3gyxA0cmDlS7BwGoTMSx5mf0AIxlH
fkdL/XENvgf6wqtDaE3Elu0ksHf++peP2LCSLZC1V5kFimZhid7XfENCEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOeZuPrjBmZK3KPGxGWk0xqOuFkMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvQTU1bTQtdU1HWmtyY284YkVaYVRUR282NFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZrsMA0G
CSqGSIb3DQEBCwUAA4IBAQC6mWD3lIQ8CRAj78SM1NRKLzV6Y4V0CsIpWA8zyGpD
jDS1BUIDE49WvaBuoty4f9JR0pY9ifz5FVm0TxzprkRFf/KDeFyg7tJpdIgMgI5g
6xPTfEhkumkUnpX6d6JY0JhNTP7+q8kAyP/x9FW58SXyxlHj80F0sCrkZzqyqPTI
K+EoASo5LtwlVXgsduze7/rjjefnJa22nz4aoUP0d4UPzTZr8biUg60TOe7uhHq3
S7T1YJhX5eLcXMCGvQB4FjJpeahvs1C9NSualdbtPfmwg2N517u2iP+oQtRK3Sj7
PSp7Nq/CCsXOfdIcBHK7s/RNpqGzhO0ZjlAIT5mVgO9v
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:52 2024 by rpki-client on console-fra.rpki-client.org