Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/5YPHwg3qBqZuWY-Ifa6rUXPsLLU.roa
File: 5YPHwg3qBqZuWY-Ifa6rUXPsLLU.roa (raw, json)
Hash identifier: 8YR8ZyFzYmCPdS1B37msJSpP6zHpQVuPc3CIORSoO1s=
Subject key identifier: E5:83:C7:C2:0D:EA:06:A6:6E:59:8F:88:7D:AE:AB:51:73:EC:2C:B5
Certificate issuer: /CN=1ee51ed90c49cae92fca2e8238114c7638380483
Certificate serial: 018CC4245601D92476A1D2F82111128463D6
Authority key identifier: 1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/5YPHwg3qBqZuWY-Ifa6rUXPsLLU.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209014
IP address blocks: 146.19.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:56:01:d9:24:76:a1:d2:f8:21:11:12:84:63:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee51ed90c49cae92fca2e8238114c7638380483
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e583c7c20dea06a66e598f887daeab5173ec2cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:c3:36:61:4d:91:ca:34:8f:d3:e1:84:74:
9e:0d:0f:99:e6:fc:53:db:fd:62:e4:27:00:32:d8:
57:74:9c:d3:8e:48:d8:51:a3:b7:88:7c:e5:30:13:
9f:6d:7c:b6:d5:94:74:1b:86:9c:53:b3:27:4b:22:
b6:fc:5f:4e:c5:62:fd:63:26:47:a9:1e:81:fe:64:
2c:56:79:09:12:04:6d:aa:eb:cb:d7:14:57:fa:17:
f9:ac:f2:1a:68:e3:a8:67:9c:68:5e:91:5e:6b:94:
9d:bf:2e:f8:3e:de:a3:6f:1b:19:34:9a:04:e1:ad:
f9:d9:b2:8f:bf:0c:f3:f6:24:48:a0:fe:1c:14:de:
71:bc:57:4e:1c:e8:29:25:42:e8:03:ed:2b:99:2b:
90:03:ff:0e:12:bf:4c:7f:49:fe:e5:6e:cb:89:40:
51:89:54:b9:1f:71:bd:88:b4:ea:f3:bb:20:81:f3:
da:84:b0:41:d2:df:49:af:2b:8c:fe:57:d6:8a:69:
25:df:3a:f2:2f:e7:b5:87:5e:a3:17:0f:20:2c:e7:
33:a2:b5:77:51:83:b0:ff:0e:4e:86:c5:1d:9d:47:
bf:67:5b:fe:df:f0:44:7f:71:5f:bf:de:1b:d1:0b:
98:15:03:10:45:67:0b:ac:a7:64:1d:63:37:ed:a6:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:C7:C2:0D:EA:06:A6:6E:59:8F:88:7D:AE:AB:51:73:EC:2C:B5
X509v3 Authority Key Identifier:
keyid:1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/5YPHwg3qBqZuWY-Ifa6rUXPsLLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:34:66:ec:aa:d4:21:60:86:fa:fe:89:b7:3e:ac:c2:71:35:
aa:9d:e4:fb:4d:06:be:4d:34:75:c7:3e:a8:38:af:b1:77:33:
9f:d7:74:df:6f:59:1f:0d:c9:fb:d6:f9:9d:74:3e:d3:dd:de:
6f:c6:ac:70:b1:34:bb:24:95:18:2d:68:df:26:42:50:f5:71:
78:c9:39:bf:fc:82:86:af:b0:d7:3d:42:03:26:49:39:cd:54:
b1:04:23:6f:cd:8b:00:53:a7:1d:16:23:12:89:ab:fb:2d:02:
4b:ad:d0:a3:8f:f4:56:ee:c6:3e:83:05:62:0c:c9:d2:24:32:
bd:9b:a1:66:9a:18:38:38:7f:e5:e1:8d:87:11:83:d9:cb:95:
de:36:0c:08:3a:c4:7a:e3:a6:90:5e:99:2c:b2:23:b3:6c:e3:
d4:c8:0e:7e:c3:c6:39:00:4b:50:06:92:56:ac:f2:55:1e:e0:
c8:9e:c3:64:24:d5:72:9c:ee:4f:67:51:85:60:da:23:9c:2c:
d4:5e:21:59:3d:4b:49:ee:b2:83:9c:63:c6:99:a9:72:4d:c8:
0c:40:18:5b:cb:89:e4:40:4b:d8:e4:61:22:9d:64:e3:2c:26:
53:54:46:b5:6f:4a:41:2f:7a:64:e7:e1:d3:54:74:b0:77:4a:
2d:4f:f9:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJFYB2SR2odL4IREShGPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTUxZWQ5MGM0OWNhZTkyZmNhMmU4MjM4MTE0Yzc2Mzgz
ODA0ODMwHhcNMjQwMTAxMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTgzYzdjMjBkZWEwNmE2NmU1OThmODg3ZGFlYWI1MTczZWMyY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRrDNmFNkco0j9PhhHSeDQ+Z5vxT
2/1i5CcAMthXdJzTjkjYUaO3iHzlMBOfbXy21ZR0G4acU7MnSyK2/F9OxWL9YyZH
qR6B/mQsVnkJEgRtquvL1xRX+hf5rPIaaOOoZ5xoXpFea5Sdvy74Pt6jbxsZNJoE
4a352bKPvwzz9iRIoP4cFN5xvFdOHOgpJULoA+0rmSuQA/8OEr9Mf0n+5W7LiUBR
iVS5H3G9iLTq87sggfPahLBB0t9JryuM/lfWimkl3zryL+e1h16jFw8gLOczorV3
UYOw/w5OhsUdnUe/Z1v+3/BEf3Ffv94b0QuYFQMQRWcLrKdkHWM37aYMPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWDx8IN6gamblmPiH2uq1Fz7Cy1MB8GA1UdIwQY
MBaAFB7lHtkMScrpL8ougjgRTHY4OASDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVVZTJReEp5dWt2eWk2Q09CRk1kamc0QklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83OTBlODctMjAxYS00NTQzLWI0NmMt
NzI5OGM0NzQ1NGZlLzEvNVlQSHdnM3FCcVp1V1ktSWZhNnJVWFBzTExVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83OTBlODctMjAxYS00NTQzLWI0NmMtNzI5OGM0NzQ1NGZl
LzEvSHVVZTJReEp5dWt2eWk2Q09CRk1kamc0QklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOSMA0G
CSqGSIb3DQEBCwUAA4IBAQB7NGbsqtQhYIb6/om3PqzCcTWqneT7TQa+TTR1xz6o
OK+xdzOf13Tfb1kfDcn71vmddD7T3d5vxqxwsTS7JJUYLWjfJkJQ9XF4yTm//IKG
r7DXPUIDJkk5zVSxBCNvzYsAU6cdFiMSiav7LQJLrdCjj/RW7sY+gwViDMnSJDK9
m6Fmmhg4OH/l4Y2HEYPZy5XeNgwIOsR646aQXpkssiOzbOPUyA5+w8Y5AEtQBpJW
rPJVHuDInsNkJNVynO5PZ1GFYNojnCzUXiFZPUtJ7rKDnGPGmalyTcgMQBhby4nk
QEvY5GEinWTjLCZTVEa1b0pBL3pk5+HTVHSwd0otT/lj
-----END CERTIFICATE-----
Generated at Wed May 15 20:24:19 2024 by rpki-client on console-ams.rpki-client.org