Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/dR5-16fvPW3r6rspiiVzQfZDtI4.roa
File: dR5-16fvPW3r6rspiiVzQfZDtI4.roa (raw, json)
Hash identifier: tgUx1QDVt/FCYqngiOnq+mDntridv6gKo0d3vtQ+NDg=
Subject key identifier: 75:1E:7E:D7:A7:EF:3D:6D:EB:EA:BB:29:8A:25:73:41:F6:43:B4:8E
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 018CC6B8612652715232F5C57A85F1148802
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/dR5-16fvPW3r6rspiiVzQfZDtI4.roa
Signing time: Mon 01 Jan 2024 20:30:21 +0000
ROA not before: Mon 01 Jan 2024 20:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216352
IP address blocks: 2a10:a642:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:61:26:52:71:52:32:f5:c5:7a:85:f1:14:88:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Jan 1 20:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=751e7ed7a7ef3d6debeabb298a257341f643b48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:2e:34:50:a4:dc:b4:6e:35:62:48:40:e5:
4d:8b:10:24:0d:14:b6:28:2a:f8:f2:66:0c:b5:e9:
85:06:98:81:a6:02:be:5a:2b:9e:25:56:01:1c:4c:
fd:db:c7:49:18:51:c1:9f:a4:7a:b4:e9:56:28:62:
a5:66:82:e0:cb:b1:1f:7c:03:3b:a6:61:4a:40:5f:
4f:e2:89:4f:54:c1:24:b2:98:02:4f:86:18:b3:33:
b1:35:ca:64:da:fb:cc:e7:ca:33:70:c3:3a:1e:7d:
b2:f4:04:58:48:70:b6:38:ad:1d:2c:98:69:24:fb:
26:c5:21:c8:f1:d5:73:6b:00:c3:2e:97:e8:3d:07:
6f:a6:21:19:6e:da:2c:e7:8f:9c:93:44:d3:c2:bc:
49:d2:04:42:cb:e2:01:55:8c:ff:13:10:dc:04:e9:
c5:02:dd:f8:44:76:55:7c:fa:87:55:f4:95:b4:5e:
83:f9:9a:1a:3f:e5:da:3e:a1:ee:7a:07:b3:c2:60:
34:a7:3d:f7:0a:5e:ad:48:38:49:40:0a:0d:dd:ca:
66:36:9f:0d:48:e1:92:0c:b6:83:33:73:db:2d:be:
24:60:33:b9:f0:d8:01:1a:98:c9:11:b8:30:b5:16:
55:ae:6b:fa:28:b7:3c:55:20:c4:1c:50:38:bf:61:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:7E:D7:A7:EF:3D:6D:EB:EA:BB:29:8A:25:73:41:F6:43:B4:8E
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/dR5-16fvPW3r6rspiiVzQfZDtI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:100::/40
Signature Algorithm: sha256WithRSAEncryption
b0:22:dc:21:a8:86:0f:66:0b:dd:b8:12:75:86:dd:e7:ca:7b:
b5:41:82:e7:b3:0a:30:f4:ee:be:78:c9:8b:0b:f5:0b:b1:f9:
40:77:a3:8a:79:22:7c:6f:89:48:19:6a:57:48:9f:53:d0:94:
36:91:6b:81:c6:c7:a6:64:4d:ad:52:76:58:c7:75:11:c9:1c:
0b:d2:d8:50:47:a5:6b:b9:19:72:20:a7:cc:c7:2d:39:d5:6e:
b6:d7:3d:78:ad:49:08:73:8b:f7:b3:a1:1b:9f:96:08:e7:39:
56:93:2e:26:da:6c:9f:af:f0:33:b7:82:46:9b:5f:ad:28:d8:
fc:75:ae:0c:1e:63:7f:a7:fa:2e:b6:dc:ea:6f:f0:e6:42:35:
51:88:91:ac:5e:a7:40:dd:de:93:55:1a:6f:67:cc:31:5b:51:
f7:96:df:c9:a2:7d:93:ed:dd:07:0e:4a:3b:83:c2:11:ed:77:
4b:de:8f:7c:09:8e:b0:90:71:4c:75:a4:a8:7a:e7:a7:3f:a3:
cf:ca:80:11:a7:51:b0:d3:71:d1:9c:eb:9c:46:15:86:3b:ca:
69:05:f9:7f:97:da:e7:6f:84:74:49:71:95:02:a7:cb:37:56:
88:b0:22:e1:fe:86:24:88:25:46:df:ce:f4:bb:c2:32:47:36:
b0:ee:82:47
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzGuGEmUnFSMvXFeoXxFIgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl
OGI4YzUwHhcNMjQwMTAxMjAzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTFlN2VkN2E3ZWYzZDZkZWJlYWJiMjk4YTI1NzM0MWY2NDNiNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ8uNFCk3LRuNWJIQOVNixAkDRS2
KCr48mYMtemFBpiBpgK+WiueJVYBHEz928dJGFHBn6R6tOlWKGKlZoLgy7EffAM7
pmFKQF9P4olPVMEkspgCT4YYszOxNcpk2vvM58ozcMM6Hn2y9ARYSHC2OK0dLJhp
JPsmxSHI8dVzawDDLpfoPQdvpiEZbtos54+ck0TTwrxJ0gRCy+IBVYz/ExDcBOnF
At34RHZVfPqHVfSVtF6D+ZoaP+XaPqHuegezwmA0pz33Cl6tSDhJQAoN3cpmNp8N
SOGSDLaDM3PbLb4kYDO58NgBGpjJEbgwtRZVrmv6KLc8VSDEHFA4v2EywwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHUeften7z1t6+q7KYolc0H2Q7SOMB8GA1UdIwQY
MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt
YzBiYTJmM2ZjNzJhLzEvZFI1LTE2ZnZQVzNyNnJzcGlpVnpRZlpEdEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh
LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhCmQgEw
DQYJKoZIhvcNAQELBQADggEBALAi3CGohg9mC924EnWG3efKe7VBguezCjD07r54
yYsL9Qux+UB3o4p5InxviUgZaldIn1PQlDaRa4HGx6ZkTa1SdljHdRHJHAvS2FBH
pWu5GXIgp8zHLTnVbrbXPXitSQhzi/ezoRuflgjnOVaTLibabJ+v8DO3gkabX60o
2Px1rgweY3+n+i623Opv8OZCNVGIkaxep0Dd3pNVGm9nzDFbUfeW38mifZPt3QcO
SjuDwhHtd0vej3wJjrCQcUx1pKh656c/o8/KgBGnUbDTcdGc65xGFYY7ymkF+X+X
2udvhHRJcZUCp8s3VoiwIuH+hiSIJUbfzvS7wjJHNrDugkc=
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:59:17 2024 by rpki-client on console-fra.rpki-client.org