Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D-yI77ti83IqbpODkRizmsORm0k.roa
File: D-yI77ti83IqbpODkRizmsORm0k.roa (raw, json)
Hash identifier: 0i3yTH37LxQtrr6zZb35VHrid54rCobMkOGDbafwOiw=
Subject key identifier: 0F:EC:88:EF:BB:62:F3:72:2A:6E:93:83:91:18:B3:9A:C3:91:9B:49
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE99F12A660D17293F0CDCD11B635
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D-yI77ti83IqbpODkRizmsORm0k.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207439
IP address blocks: 5.1.67.0/24 maxlen: 32
5.1.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e9:9f:12:a6:60:d1:72:93:f0:cd:cd:11:b6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fec88efbb62f3722a6e93839118b39ac3919b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:04:e5:97:b8:f0:5e:26:4e:51:07:16:56:
e2:db:a8:5e:bf:c1:36:8b:17:9e:bf:e4:74:9a:a9:
b7:b6:aa:aa:98:99:0a:3c:37:86:ba:77:76:6f:e9:
e4:f4:ed:74:8f:3f:b4:20:59:e5:f9:33:32:ad:c3:
49:c1:e3:b0:9d:19:b4:e5:5c:43:b6:76:36:f6:20:
eb:56:ab:5f:d4:49:ed:14:78:f0:b3:82:57:c7:d8:
b3:6c:28:1b:07:3b:d0:9c:ca:74:42:d3:f5:ad:27:
a6:f3:ba:04:16:eb:db:3f:4c:de:fa:d8:8d:87:4e:
c8:2c:e6:79:bd:95:76:b6:69:1b:79:8c:37:19:68:
3f:ea:10:c9:6b:8f:a3:bb:07:3f:ff:a5:e2:89:43:
4b:44:af:62:15:06:ec:54:4e:87:d0:6d:18:27:4d:
53:13:7f:9b:22:4e:b0:38:1e:92:06:88:1e:3f:1b:
91:bb:59:b9:fb:b7:ef:bb:73:be:36:9c:d7:a6:63:
4d:7b:bf:2b:28:6d:b7:0c:b3:9b:4e:44:f4:9a:9f:
da:2a:c7:8c:66:42:83:5b:a7:89:5d:55:40:16:c1:
3a:1a:6f:fd:17:29:33:77:3a:2b:a3:58:ee:85:45:
62:ac:f1:16:56:e8:d5:06:74:92:c0:99:11:26:c8:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:88:EF:BB:62:F3:72:2A:6E:93:83:91:18:B3:9A:C3:91:9B:49
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/D-yI77ti83IqbpODkRizmsORm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.67.0/24
5.1.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e8:85:43:24:dd:46:5c:74:3c:cd:25:bf:2a:1f:71:fa:07:
85:a6:cd:cd:02:e3:1b:12:df:65:7a:32:80:6f:05:94:af:05:
fb:22:02:ae:24:a9:54:d1:28:7e:bf:22:b7:e0:b2:7c:fc:c8:
21:e9:58:97:58:e4:10:79:d4:43:f6:d4:0a:69:94:00:58:65:
22:6f:b7:2e:a7:0d:82:ad:fb:70:b4:ff:f0:69:6b:34:1d:30:
a0:96:4c:ab:ca:e2:90:ef:4e:87:08:e7:2d:b6:e2:42:fc:0c:
ea:eb:64:77:8f:e1:1e:3f:82:2a:d2:ee:b4:69:4e:13:a2:ba:
44:03:4c:c9:0d:a8:bd:18:8b:f2:b9:5b:da:23:26:9c:e6:30:
b2:f6:fc:27:4c:c3:bb:58:28:e1:54:02:80:9c:5b:c2:7c:fc:
d8:2c:eb:c1:da:08:0a:10:b7:86:1a:8f:0b:07:26:14:d9:5f:
94:dc:52:81:44:62:88:bc:0e:9e:25:68:0f:75:94:46:d2:24:
ac:43:fe:cf:de:31:c2:27:cd:b6:d1:c8:d3:66:25:95:38:f0:
b6:cd:1f:be:ff:cc:e7:15:df:93:90:c6:cd:29:64:50:19:8e:
3e:79:13:05:d8:0e:3f:a2:45:46:76:bd:0b:72:15:76:c9:4b:
cf:19:ee:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSumfEqZg0XKT8M3NEbY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMTAxMTgzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVjODhlZmJiNjJmMzcyMmE2ZTkzODM5MTE4YjM5YWMzOTE5YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcUE5Ze48F4mTlEHFlbi26hev8E2
ixeev+R0mqm3tqqqmJkKPDeGund2b+nk9O10jz+0IFnl+TMyrcNJweOwnRm05VxD
tnY29iDrVqtf1EntFHjws4JXx9izbCgbBzvQnMp0QtP1rSem87oEFuvbP0ze+tiN
h07ILOZ5vZV2tmkbeYw3GWg/6hDJa4+juwc//6XiiUNLRK9iFQbsVE6H0G0YJ01T
E3+bIk6wOB6SBogePxuRu1m5+7fvu3O+NpzXpmNNe78rKG23DLObTkT0mp/aKseM
ZkKDW6eJXVVAFsE6Gm/9Fykzdzoro1juhUVirPEWVujVBnSSwJkRJsgD9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA/siO+7YvNyKm6Tg5EYs5rDkZtJMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvRC15STc3dGk4M0lxYnBPRGtSaXptc09SbTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQFDAwQA
BQFVMA0GCSqGSIb3DQEBCwUAA4IBAQA66IVDJN1GXHQ8zSW/Kh9x+geFps3NAuMb
Et9lejKAbwWUrwX7IgKuJKlU0Sh+vyK34LJ8/Mgh6ViXWOQQedRD9tQKaZQAWGUi
b7cupw2CrftwtP/waWs0HTCglkyryuKQ706HCOcttuJC/Azq62R3j+EeP4Iq0u60
aU4TorpEA0zJDai9GIvyuVvaIyac5jCy9vwnTMO7WCjhVAKAnFvCfPzYLOvB2ggK
ELeGGo8LByYU2V+U3FKBRGKIvA6eJWgPdZRG0iSsQ/7P3jHCJ8220cjTZiWVOPC2
zR++/8znFd+TkMbNKWRQGY4+eRMF2A4/okVGdr0LchV2yUvPGe7h
-----END CERTIFICATE-----
Generated at Tue May 7 11:10:58 2024 by rpki-client on console-fra.rpki-client.org