Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/sCHyn5DGEnhdj2KlKtHmM2DhKVI.roa
File: sCHyn5DGEnhdj2KlKtHmM2DhKVI.roa (raw, json)
Hash identifier: 8DjF963Q2fNMXEoR4doE6kTz02KEHf89CXZ1+wOLUls=
Subject key identifier: B0:21:F2:9F:90:C6:12:78:5D:8F:62:A5:2A:D1:E6:33:60:E1:29:52
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 018CC26D525E7BC8F6F42FECD1AFCBD2931D
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/sCHyn5DGEnhdj2KlKtHmM2DhKVI.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39700
IP address blocks: 185.72.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:52:5e:7b:c8:f6:f4:2f:ec:d1:af:cb:d2:93:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b021f29f90c612785d8f62a52ad1e63360e12952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:38:50:05:2f:42:12:28:df:7b:9e:cc:c5:
ad:56:ce:ab:78:29:4e:94:51:8c:8b:e9:94:06:52:
41:2c:d5:c8:86:6a:27:ae:3e:a2:d7:86:fd:fe:06:
ca:b7:c0:5c:4b:24:9d:36:d3:5e:52:d1:1e:f3:8f:
f2:80:a0:7d:a6:cc:ce:ef:ff:0b:cb:4e:51:b1:af:
5d:0e:9f:7d:1b:4a:63:c8:24:22:f5:48:54:04:09:
88:b5:ea:4b:b4:b4:86:5c:65:b1:be:be:ad:0b:76:
b3:81:a3:05:21:d3:f0:27:a0:27:ae:d9:76:d8:45:
cb:b9:b6:95:05:1a:5d:84:8e:2f:6d:00:9f:56:79:
5f:6b:80:10:1b:34:83:40:15:87:59:93:6f:2a:51:
b2:93:f4:e1:10:48:47:22:0f:2f:c8:bf:d0:9f:69:
8d:d2:7c:35:2e:b8:0d:b4:7e:2e:df:83:80:6f:78:
73:e1:a1:49:5f:ae:fd:96:23:ec:a8:24:71:22:61:
7a:47:76:9f:2d:f0:17:c6:23:15:07:42:72:25:1b:
7e:63:2e:a7:a3:b5:09:c9:f4:75:d8:d0:9f:80:c3:
c4:b6:30:b0:64:0f:33:8a:86:1f:a9:29:81:ae:13:
8b:45:c1:a4:49:82:c5:54:44:57:69:0c:44:96:b7:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:21:F2:9F:90:C6:12:78:5D:8F:62:A5:2A:D1:E6:33:60:E1:29:52
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/sCHyn5DGEnhdj2KlKtHmM2DhKVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1e:4e:1d:2b:5e:6f:95:8f:8e:39:14:9c:79:e9:63:10:87:
24:04:34:3d:d4:f9:f3:c1:3e:52:73:1e:bc:ea:aa:2a:d7:a0:
53:a4:03:09:94:3e:93:eb:a3:07:e4:57:cb:ef:80:9e:6e:54:
17:54:d1:2c:ed:e2:a9:ed:b6:08:83:a5:64:7e:57:ce:96:e0:
91:1b:78:19:fb:7b:0b:20:4e:ff:0c:2a:5e:61:47:f9:b2:12:
28:0f:2d:40:17:bb:40:c7:c9:23:d0:02:cf:3f:35:a0:6e:e0:
2b:bb:c5:a6:fb:3b:ba:c7:ad:13:6f:6f:fe:0c:f0:03:b3:fc:
aa:8e:93:a5:77:91:c6:33:16:78:a6:2c:71:ae:59:66:16:f7:
db:54:ea:3a:bc:c6:69:02:40:22:ba:5e:10:1f:e8:80:32:66:
81:ed:b8:bd:96:b7:5c:a1:47:20:d9:61:ed:18:1f:88:5d:61:
64:a2:39:f4:2b:9c:73:e3:ba:87:48:0c:f1:70:32:40:7e:66:
37:74:c1:5f:bd:30:65:a0:4e:59:69:bf:01:e7:a4:a0:87:f7:
22:78:6a:09:4a:e5:bb:f0:15:07:44:94:7f:63:14:51:5b:1f:
80:e6:e0:0d:eb:60:cf:65:a4:3d:b2:30:3f:c5:ca:09:f8:21:
03:75:5e:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVJee8j29C/s0a/L0pMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1
ZGQ1OTUwHhcNMjQwMTAxMDAyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDIxZjI5ZjkwYzYxMjc4NWQ4ZjYyYTUyYWQxZTYzMzYwZTEyOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS04UAUvQhIo33uezMWtVs6reClO
lFGMi+mUBlJBLNXIhmonrj6i14b9/gbKt8BcSySdNtNeUtEe84/ygKB9pszO7/8L
y05Rsa9dDp99G0pjyCQi9UhUBAmItepLtLSGXGWxvr6tC3azgaMFIdPwJ6Anrtl2
2EXLubaVBRpdhI4vbQCfVnlfa4AQGzSDQBWHWZNvKlGyk/ThEEhHIg8vyL/Qn2mN
0nw1LrgNtH4u34OAb3hz4aFJX679liPsqCRxImF6R3afLfAXxiMVB0JyJRt+Yy6n
o7UJyfR12NCfgMPEtjCwZA8zioYfqSmBrhOLRcGkSYLFVERXaQxElre5tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAh8p+QxhJ4XY9ipSrR5jNg4SlSMB8GA1UdIwQY
MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt
ZGFhOWYyYTMzYmFmLzEvc0NIeW41REdFbmhkajJLbEt0SG1NMkRoS1ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm
LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUiEMA0G
CSqGSIb3DQEBCwUAA4IBAQBuHk4dK15vlY+OORSceeljEIckBDQ91PnzwT5Scx68
6qoq16BTpAMJlD6T66MH5FfL74CeblQXVNEs7eKp7bYIg6VkflfOluCRG3gZ+3sL
IE7/DCpeYUf5shIoDy1AF7tAx8kj0ALPPzWgbuAru8Wm+zu6x60Tb2/+DPADs/yq
jpOld5HGMxZ4pixxrllmFvfbVOo6vMZpAkAiul4QH+iAMmaB7bi9lrdcoUcg2WHt
GB+IXWFkojn0K5xz47qHSAzxcDJAfmY3dMFfvTBloE5Zab8B56Sgh/cieGoJSuW7
8BUHRJR/YxRRWx+A5uAN62DPZaQ9sjA/xcoJ+CEDdV69
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:57:27 2024 by rpki-client on console-fra.rpki-client.org