Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/hLse4DbMlzlFABNIrsPy_j2_ePs.roa
File: hLse4DbMlzlFABNIrsPy_j2_ePs.roa (raw, json)
Hash identifier: D52qDJ65U/hg0sO9IjQ/RNMvSnu/OhTuzuZwufYcWhU=
Subject key identifier: 84:BB:1E:E0:36:CC:97:39:45:00:13:48:AE:C3:F2:FE:3D:BF:78:FB
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0192F87EA1E15856512ADFCFC708FE786B24
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/hLse4DbMlzlFABNIrsPy_j2_ePs.roa
Signing time: Mon 04 Nov 2024 18:45:01 +0000
ROA not before: Mon 04 Nov 2024 18:45:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 194.179.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:7e:a1:e1:58:56:51:2a:df:cf:c7:08:fe:78:6b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Nov 4 18:45:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84bb1ee036cc973945001348aec3f2fe3dbf78fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:c9:ca:d9:23:64:f0:96:70:f3:40:bb:b3:
b7:e2:33:0e:23:17:29:9b:be:b5:fa:97:66:56:7d:
22:48:23:05:c9:3a:83:1d:8c:a3:4a:35:d9:5a:78:
a1:60:ea:90:4c:08:27:b3:6d:c5:2b:24:ca:91:93:
97:38:66:96:32:1c:0a:b8:96:10:25:55:66:32:c2:
c0:f5:e0:26:bc:14:80:1b:36:3b:d2:3f:30:de:5f:
ca:22:37:9a:25:5b:a8:5c:0d:ba:3c:46:78:54:30:
56:d9:c8:87:16:c1:b1:ac:2d:d1:ee:2f:cf:7e:d1:
50:db:6e:3b:45:9e:e5:d4:b3:ef:b5:0e:fe:66:e2:
10:de:1c:55:b3:e9:1d:15:99:a1:4f:d7:7f:3c:d8:
42:3e:05:8e:50:79:43:89:9c:58:12:59:17:ef:07:
17:54:a4:9a:6f:39:4d:ed:91:b8:28:a3:cf:c0:db:
61:c4:95:2f:19:3c:6d:0b:a0:8c:b7:66:3e:03:49:
72:cd:ca:de:c2:28:69:49:4d:7f:95:b8:94:06:e1:
04:7e:1f:ce:41:b5:6c:bf:90:c7:48:3a:b3:36:83:
dd:ea:62:c9:fa:98:3e:05:9e:93:31:b2:7b:6d:cb:
43:36:86:b6:84:b5:5c:73:51:f3:33:cb:03:6c:e1:
8d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:1E:E0:36:CC:97:39:45:00:13:48:AE:C3:F2:FE:3D:BF:78:FB
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/hLse4DbMlzlFABNIrsPy_j2_ePs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.160.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:76:d3:ff:38:09:3e:1a:55:46:28:27:06:9c:56:4d:4c:52:
7d:9b:5f:e2:58:ab:c9:f5:f7:d1:5c:17:5d:f4:7d:aa:70:6d:
ac:b7:25:cc:00:5b:20:7d:4b:92:7a:b1:75:e6:40:fe:50:72:
53:bb:fa:32:11:5d:8c:ca:2a:22:17:dc:31:71:a1:a4:c8:de:
b6:cd:e0:1f:30:a4:5b:c5:55:6b:13:85:9b:35:cb:92:f7:f6:
35:09:1b:2f:d0:09:02:fd:31:dd:6f:77:f7:70:e4:76:c3:fb:
e8:45:85:6a:03:75:3e:87:16:1a:c4:eb:f7:af:16:5e:bf:83:
40:3c:27:16:05:87:e2:4d:96:c6:7a:c9:a1:c3:6e:22:8b:ba:
b2:b0:1b:87:6b:0e:bc:0d:d0:69:03:8f:cf:96:e0:70:99:3a:
4a:81:c2:bb:21:86:f5:90:0b:d6:ba:d9:91:bf:c5:ee:33:fd:
4d:41:93:78:f1:42:64:a4:94:07:46:9d:37:38:f0:cf:84:43:
41:21:ef:4d:c4:4b:07:b9:23:b0:c9:31:57:69:38:98:00:5d:
56:95:e1:31:ad:e5:92:e2:d4:e7:59:34:b4:45:a5:07:65:c6:
ee:f0:2f:8c:6c:54:a5:45:15:1c:65:65:eb:f6:62:08:0d:a5:
8c:36:80:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL4fqHhWFZRKt/Pxwj+eGskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjQxMTA0MTg0NTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGJiMWVlMDM2Y2M5NzM5NDUwMDEzNDhhZWMzZjJmZTNkYmY3OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhfJytkjZPCWcPNAu7O34jMOIxcp
m761+pdmVn0iSCMFyTqDHYyjSjXZWnihYOqQTAgns23FKyTKkZOXOGaWMhwKuJYQ
JVVmMsLA9eAmvBSAGzY70j8w3l/KIjeaJVuoXA26PEZ4VDBW2ciHFsGxrC3R7i/P
ftFQ2247RZ7l1LPvtQ7+ZuIQ3hxVs+kdFZmhT9d/PNhCPgWOUHlDiZxYElkX7wcX
VKSabzlN7ZG4KKPPwNthxJUvGTxtC6CMt2Y+A0lyzcrewihpSU1/lbiUBuEEfh/O
QbVsv5DHSDqzNoPd6mLJ+pg+BZ6TMbJ7bctDNoa2hLVcc1HzM8sDbOGNxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIS7HuA2zJc5RQATSK7D8v49v3j7MB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvaExzZTREYk1semxGQUJOSXJzUHlfajJfZVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwrOgMA0G
CSqGSIb3DQEBCwUAA4IBAQDKdtP/OAk+GlVGKCcGnFZNTFJ9m1/iWKvJ9ffRXBdd
9H2qcG2styXMAFsgfUuSerF15kD+UHJTu/oyEV2MyioiF9wxcaGkyN62zeAfMKRb
xVVrE4WbNcuS9/Y1CRsv0AkC/THdb3f3cOR2w/voRYVqA3U+hxYaxOv3rxZev4NA
PCcWBYfiTZbGesmhw24ii7qysBuHaw68DdBpA4/PluBwmTpKgcK7IYb1kAvWutmR
v8XuM/1NQZN48UJkpJQHRp03OPDPhENBIe9NxEsHuSOwyTFXaTiYAF1WleExreWS
4tTnWTS0RaUHZcbu8C+MbFSlRRUcZWXr9mIIDaWMNoAI
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:43:37 2024 by rpki-client on console-fra.rpki-client.org