Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kjWKVj4HJWkHdR-eIfWAHuW-fTM.roa
File: kjWKVj4HJWkHdR-eIfWAHuW-fTM.roa (raw, json)
Hash identifier: zEINJ7aQmApucu4Hbn8+qqNOY8QpctBzFuQsSud59d8=
Subject key identifier: 92:35:8A:56:3E:07:25:69:07:75:1F:9E:21:F5:80:1E:E5:BE:7D:33
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5EAB61CCEB43B6D48EF1CF8C01D5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kjWKVj4HJWkHdR-eIfWAHuW-fTM.roa
Signing time: Tue 02 Jan 2024 12:34:49 +0000
ROA not before: Tue 02 Jan 2024 12:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140096
IP address blocks: 185.188.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5e:ab:61:cc:eb:43:b6:d4:8e:f1:cf:8c:01:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92358a563e07256907751f9e21f5801ee5be7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e0:56:7d:8b:63:cf:fb:db:bd:db:6c:08:23:
23:b3:ac:5c:39:e5:27:32:73:16:e9:59:35:a3:c3:
79:9e:82:61:0d:cd:d9:f8:e2:33:e5:6c:a6:31:dd:
4a:9b:3b:0e:49:5e:c4:41:74:34:4c:8f:d0:32:a0:
bc:16:4f:6f:79:63:6a:3e:1a:37:97:4e:7f:87:1d:
b4:b4:5b:36:27:15:e6:69:ca:9a:39:bd:ba:38:28:
0f:56:1a:68:30:19:92:3e:1c:d8:73:66:02:88:a5:
49:0f:43:b8:f6:d7:c1:c7:87:2f:d9:2f:32:6f:dc:
d4:7a:4a:ff:36:11:4c:11:58:99:11:c2:62:f1:d7:
9f:5b:ae:a8:ff:32:0f:84:89:5c:88:1b:39:c3:f1:
94:76:5a:b7:f9:3e:f5:91:e5:43:92:01:b5:81:96:
d3:86:21:1c:62:42:e5:37:8e:07:0c:79:e9:b3:65:
c5:de:e0:62:87:0f:14:e8:03:6c:75:d8:34:d6:ec:
29:f0:35:3f:f2:ba:62:31:41:dc:48:6b:a6:e8:c7:
b6:a5:56:dd:91:6f:71:c2:39:a5:62:48:12:57:66:
29:78:9f:59:c9:57:ee:bf:30:f4:a1:ff:0e:65:6a:
b8:1c:aa:32:3f:38:9a:b6:43:50:57:9a:dc:8d:fe:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:35:8A:56:3E:07:25:69:07:75:1F:9E:21:F5:80:1E:E5:BE:7D:33
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/kjWKVj4HJWkHdR-eIfWAHuW-fTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d6:5e:c1:9c:68:48:6f:26:33:07:fe:90:59:d6:ea:6a:30:
60:6a:72:d4:50:30:a1:2c:78:6c:cd:24:68:88:8f:e1:36:63:
8e:1b:73:5e:8c:1f:37:7f:0a:a0:fe:98:01:d7:3a:1d:05:4a:
e0:79:ce:1e:9a:77:13:b1:36:4d:fd:06:70:52:15:51:d2:c6:
28:f0:f8:73:70:69:d9:4e:ea:b4:38:2a:e7:e4:0a:2b:3a:0b:
37:80:51:df:17:0f:e6:46:32:13:4e:4c:6c:98:2c:9e:89:6a:
6f:13:a0:69:ea:f0:ed:3e:10:25:2f:74:7a:d6:57:ff:5a:47:
34:ca:dd:f8:7d:ce:5d:cf:1a:b3:b9:c6:d5:c8:dd:50:46:e7:
ed:af:00:13:42:ec:c3:d1:48:47:ca:80:4d:a2:e1:ed:c3:c9:
5d:75:a4:f3:ad:60:ab:b1:09:8f:b6:d4:a9:12:1e:e7:70:67:
28:dc:ab:40:48:02:2e:a7:93:40:a5:3a:e5:19:a5:f1:97:67:
bb:7a:77:54:a6:3b:28:ac:03:95:e3:c9:95:45:af:8f:59:8c:
41:ab:48:60:ba:a3:0d:97:66:74:05:1b:3d:1b:4c:95:52:e5:
78:b1:2f:13:39:2e:ba:46:ae:93:80:7a:5a:6d:53:e8:b3:5b:
40:57:cd:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK16rYczrQ7bUjvHPjAHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQwMTAyMTIzNDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjM1OGE1NjNlMDcyNTY5MDc3NTFmOWUyMWY1ODAxZWU1YmU3ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheBWfYtjz/vbvdtsCCMjs6xcOeUn
MnMW6Vk1o8N5noJhDc3Z+OIz5WymMd1KmzsOSV7EQXQ0TI/QMqC8Fk9veWNqPho3
l05/hx20tFs2JxXmacqaOb26OCgPVhpoMBmSPhzYc2YCiKVJD0O49tfBx4cv2S8y
b9zUekr/NhFMEViZEcJi8defW66o/zIPhIlciBs5w/GUdlq3+T71keVDkgG1gZbT
hiEcYkLlN44HDHnps2XF3uBihw8U6ANsddg01uwp8DU/8rpiMUHcSGum6Me2pVbd
kW9xwjmlYkgSV2YpeJ9ZyVfuvzD0of8OZWq4HKoyPziatkNQV5rcjf49gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJI1ilY+ByVpB3UfniH1gB7lvn0zMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEva2pXS1ZqNEhKV2tIZFItZUlmV0FIdVctZlRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubwFMA0G
CSqGSIb3DQEBCwUAA4IBAQBs1l7BnGhIbyYzB/6QWdbqajBganLUUDChLHhszSRo
iI/hNmOOG3NejB83fwqg/pgB1zodBUrgec4emncTsTZN/QZwUhVR0sYo8PhzcGnZ
Tuq0OCrn5AorOgs3gFHfFw/mRjITTkxsmCyeiWpvE6Bp6vDtPhAlL3R61lf/Wkc0
yt34fc5dzxqzucbVyN1QRuftrwATQuzD0UhHyoBNouHtw8lddaTzrWCrsQmPttSp
Eh7ncGco3KtASAIup5NApTrlGaXxl2e7endUpjsorAOV48mVRa+PWYxBq0hguqMN
l2Z0BRs9G0yVUuV4sS8TOS66Rq6TgHpabVPos1tAV80u
-----END CERTIFICATE-----
Generated at Sun May 5 00:29:07 2024 by rpki-client on console-ams.rpki-client.org