Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/fWBb8EmQxp3ELQB4EVBdoR8_rhY.roa
File: fWBb8EmQxp3ELQB4EVBdoR8_rhY.roa (raw, json)
Hash identifier: 5EmXiTG8/iObwfimmlMQDb96oD9ISOu5blHKUdwWMaM=
Subject key identifier: 7D:60:5B:F0:49:90:C6:9D:C4:2D:00:78:11:50:5D:A1:1F:3F:AE:16
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945FF259B4C4640F3F5BC4A2A47D9A
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/fWBb8EmQxp3ELQB4EVBdoR8_rhY.roa
Signing time: Tue 02 Jan 2024 00:30:39 +0000
ROA not before: Tue 02 Jan 2024 00:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212109
IP address blocks: 5.59.182.0/24 maxlen: 24
5.59.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5f:f2:59:b4:c4:64:0f:3f:5b:c4:a2:a4:7d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d605bf04990c69dc42d007811505da11f3fae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:0c:42:fc:1d:13:c4:cd:84:cd:9e:cc:5c:
3c:2f:19:4f:29:fb:0b:ea:0f:e7:42:4d:83:25:f6:
df:f6:52:04:59:cf:6e:01:07:48:aa:6d:ca:f9:07:
6d:b9:b6:28:25:90:60:56:3a:bb:f9:46:3c:ea:4f:
a1:43:7d:d4:49:27:04:99:72:b4:5b:70:fd:c7:a8:
f7:a0:c1:dc:0d:83:c7:b2:e8:b4:c6:f3:1e:ad:5f:
6f:83:ba:a8:52:d5:83:55:93:ca:d6:d6:4b:25:2b:
a4:ad:6f:cd:e1:85:41:57:cf:d1:c7:b4:80:20:28:
67:01:48:91:94:d6:5e:ab:54:7d:19:7e:8b:99:ef:
e6:17:53:82:48:32:50:9e:c1:6f:14:65:e7:ad:68:
41:29:0d:ae:2a:36:f3:f0:78:11:1a:d8:d1:9a:8a:
59:9a:00:1c:63:0e:6c:e8:67:01:ac:4b:e6:24:2d:
80:d9:a7:95:a9:5e:5c:fe:19:30:d0:8b:3a:be:62:
2e:d8:5e:cd:7b:04:32:41:3e:55:87:bb:49:07:39:
18:8f:48:9d:77:e5:70:b2:33:76:f7:e3:ae:b2:82:
c6:6f:6b:13:4f:4f:9e:51:f2:d1:36:73:b5:bc:19:
a1:10:31:9f:4c:ef:ef:b3:25:3a:7b:66:30:0e:e6:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:60:5B:F0:49:90:C6:9D:C4:2D:00:78:11:50:5D:A1:1F:3F:AE:16
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/fWBb8EmQxp3ELQB4EVBdoR8_rhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.182.0/24
5.59.241.0/24
Signature Algorithm: sha256WithRSAEncryption
87:57:34:1b:28:c1:6a:08:95:32:72:0c:09:27:c0:23:f0:b1:
ae:0b:c9:1d:3d:cc:6b:bb:98:c1:28:e7:ec:85:b4:2f:66:51:
20:9f:fb:93:7c:2f:e8:79:1f:92:f3:16:c5:80:80:bb:8d:2b:
8b:30:54:5f:dd:19:14:5b:87:f3:f0:59:1c:1c:a9:05:ba:d5:
19:a3:cc:25:d8:90:c9:01:f6:0e:14:8f:58:4a:2e:97:ab:a7:
12:0e:91:68:f8:db:1f:c0:04:60:ea:b0:06:88:e8:50:5c:5d:
7e:d9:a3:12:a0:ad:90:8d:82:59:82:c2:1a:01:24:ab:91:5a:
d1:33:1f:4e:30:1f:42:ca:fb:8d:48:08:49:7f:c5:8d:71:0a:
b7:78:aa:1c:23:f8:53:c0:51:8b:60:83:8b:97:86:9a:08:33:
fe:e1:dd:01:0c:55:d7:53:33:08:06:2c:27:83:02:49:7d:11:
d8:9e:61:e7:a7:12:13:86:eb:2d:5f:ac:34:e4:9e:61:c1:3c:
ba:ad:02:40:e9:3e:1d:a1:31:d1:e7:7b:56:2e:ac:ee:33:29:
88:65:4a:3e:7e:d4:c0:a6:09:f6:36:5f:87:34:9f:ad:e9:30:
89:bf:da:17:80:8a:a8:d2:26:a6:0b:34:30:50:09:d8:77:91:
91:57:35:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlF/yWbTEZA8/W8SipH2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjQwMTAyMDAzMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDYwNWJmMDQ5OTBjNjlkYzQyZDAwNzgxMTUwNWRhMTFmM2ZhZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6wMQvwdE8TNhM2ezFw8LxlPKfsL
6g/nQk2DJfbf9lIEWc9uAQdIqm3K+QdtubYoJZBgVjq7+UY86k+hQ33USScEmXK0
W3D9x6j3oMHcDYPHsui0xvMerV9vg7qoUtWDVZPK1tZLJSukrW/N4YVBV8/Rx7SA
IChnAUiRlNZeq1R9GX6Lme/mF1OCSDJQnsFvFGXnrWhBKQ2uKjbz8HgRGtjRmopZ
mgAcYw5s6GcBrEvmJC2A2aeVqV5c/hkw0Is6vmIu2F7NewQyQT5Vh7tJBzkYj0id
d+VwsjN29+OusoLGb2sTT0+eUfLRNnO1vBmhEDGfTO/vsyU6e2YwDuaTxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH1gW/BJkMadxC0AeBFQXaEfP64WMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvZldCYjhFbVF4cDNFTFFCNEVWQmRvUjhfcmhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABTu2AwQA
BTvxMA0GCSqGSIb3DQEBCwUAA4IBAQCHVzQbKMFqCJUycgwJJ8Aj8LGuC8kdPcxr
u5jBKOfshbQvZlEgn/uTfC/oeR+S8xbFgIC7jSuLMFRf3RkUW4fz8FkcHKkFutUZ
o8wl2JDJAfYOFI9YSi6Xq6cSDpFo+NsfwARg6rAGiOhQXF1+2aMSoK2QjYJZgsIa
ASSrkVrRMx9OMB9CyvuNSAhJf8WNcQq3eKocI/hTwFGLYIOLl4aaCDP+4d0BDFXX
UzMIBiwngwJJfRHYnmHnpxIThustX6w05J5hwTy6rQJA6T4doTHR53tWLqzuMymI
ZUo+ftTApgn2Nl+HNJ+t6TCJv9oXgIqo0iamCzQwUAnYd5GRVzXT
-----END CERTIFICATE-----
Generated at Wed May 15 16:33:07 2024 by rpki-client on console-fra.rpki-client.org