Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/SHWU1ffteYiKNdV8nV8KpMMnwzI.roa
File: SHWU1ffteYiKNdV8nV8KpMMnwzI.roa (raw, json)
Hash identifier: RT+meFDyI2srD7huerKpkocWII21V+n6+ftFY0PChPU=
Subject key identifier: 48:75:94:D5:F7:ED:79:88:8A:35:D5:7C:9D:5F:0A:A4:C3:27:C3:32
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 018CC7958D382E4E0BF1089484418EC048F1
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/SHWU1ffteYiKNdV8nV8KpMMnwzI.roa
Signing time: Tue 02 Jan 2024 00:31:56 +0000
ROA not before: Tue 02 Jan 2024 00:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396501
IP address blocks: 185.159.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8d:38:2e:4e:0b:f1:08:94:84:41:8e:c0:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 2 00:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=487594d5f7ed79888a35d57c9d5f0aa4c327c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:29:87:9a:4c:4b:c4:d0:c6:fd:24:14:eb:
d2:04:ab:d3:59:9d:00:f5:3c:3f:f8:d7:e2:1a:6f:
03:2c:ca:fa:2f:5c:d5:35:a9:7f:29:94:ca:60:c2:
1f:6e:6a:99:de:13:b7:75:b3:58:fe:b3:a5:f5:d6:
61:87:11:c5:ca:5b:0f:5e:e7:c6:88:05:31:c2:ad:
77:0a:95:7f:2d:6d:46:a5:12:4c:52:c1:6b:d7:8a:
df:87:fd:c5:3c:f8:40:9b:09:a1:60:79:85:69:27:
81:b8:8b:44:2a:9c:a3:c6:47:df:2f:36:90:a3:a0:
00:a7:ff:3c:85:82:4b:b9:bc:9a:58:f3:c6:0e:04:
8d:4b:4f:2f:19:ee:ed:a3:44:f6:9f:ab:56:6a:56:
f6:f9:cb:69:77:a2:7f:fb:5a:2c:09:6b:dc:df:bc:
69:5d:f1:5e:24:d5:f2:03:c2:ce:c6:ed:96:49:32:
8e:fd:77:41:77:b6:29:cf:db:96:f5:e2:29:48:c7:
ec:d2:2b:be:68:cd:06:77:a8:8e:5d:a8:62:aa:73:
2c:7f:c9:03:87:14:2d:2b:c1:ab:f1:c6:9d:1b:70:
e9:2a:06:f9:08:cb:a2:f9:ec:84:52:d9:ec:b0:cc:
f4:4e:8a:50:1e:0f:3f:c1:58:3c:c5:5b:4b:f9:83:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:94:D5:F7:ED:79:88:8A:35:D5:7C:9D:5F:0A:A4:C3:27:C3:32
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/SHWU1ffteYiKNdV8nV8KpMMnwzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.199.0/24
Signature Algorithm: sha256WithRSAEncryption
be:11:81:be:b9:ba:59:e2:dc:6e:af:7e:fc:6e:9c:42:bf:55:
42:ae:f7:b1:57:cd:4d:e8:dc:22:dd:3e:c2:e6:c2:9c:e0:78:
66:6f:61:26:66:30:3a:95:11:b6:5d:f7:b6:8f:a5:4d:0f:5f:
54:93:9a:20:9b:20:51:10:9b:1f:b9:36:78:5f:dc:6c:59:dd:
62:05:0d:c1:b7:bb:c5:54:0c:f9:6f:0f:53:62:5f:dd:a3:a2:
af:7b:a4:3b:de:af:fc:03:24:68:77:a5:b6:1c:72:9c:50:76:
83:cd:e3:68:13:5e:38:f2:e7:a0:03:25:29:a1:07:5b:64:ad:
82:37:1b:16:31:05:4e:fa:17:92:7f:37:73:7f:d9:b5:6c:6d:
53:8b:d8:a0:a0:e0:34:58:c1:b8:6c:18:72:ff:d3:b5:d6:de:
78:ed:a0:77:0a:89:c9:89:0e:22:8a:6a:cb:a3:0f:29:36:af:
57:a4:d1:09:cb:1a:e8:da:d8:1e:64:53:02:af:d9:2c:26:fa:
24:10:81:29:d2:2a:54:24:dd:0b:66:40:6e:8c:83:5b:c5:14:
12:c7:77:e4:18:b0:8f:2c:a1:f1:8b:28:b1:87:b0:28:55:21:
9d:b0:a7:0d:33:bc:1c:59:b3:d6:01:59:d6:84:d8:5f:fa:da:
f6:16:e9:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlY04Lk4L8QiUhEGOwEjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Y2JkZTc1ZDUzNmU5MWIyOGEyMzQ2OTM0OWQxY2YyOGI4
ODRhM2IwHhcNMjQwMTAyMDAzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODc1OTRkNWY3ZWQ3OTg4OGEzNWQ1N2M5ZDVmMGFhNGMzMjdjMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm60ph5pMS8TQxv0kFOvSBKvTWZ0A
9Tw/+NfiGm8DLMr6L1zVNal/KZTKYMIfbmqZ3hO3dbNY/rOl9dZhhxHFylsPXufG
iAUxwq13CpV/LW1GpRJMUsFr14rfh/3FPPhAmwmhYHmFaSeBuItEKpyjxkffLzaQ
o6AAp/88hYJLubyaWPPGDgSNS08vGe7to0T2n6tWalb2+ctpd6J/+1osCWvc37xp
XfFeJNXyA8LOxu2WSTKO/XdBd7Ypz9uW9eIpSMfs0iu+aM0Gd6iOXahiqnMsf8kD
hxQtK8Gr8cadG3DpKgb5CMui+eyEUtnssMz0TopQHg8/wVg8xVtL+YMS+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEh1lNX37XmIijXVfJ1fCqTDJ8MyMB8GA1UdIwQY
MBaAFOXL3nXVNukbKKI0aTSdHPKLiEo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYt
ZmNlYWNiZDczODQ1LzEvU0hXVTFmZnRlWWlLTmRWOG5WOEtwTU1ud3pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYtZmNlYWNiZDczODQ1
LzEvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ/HMA0G
CSqGSIb3DQEBCwUAA4IBAQC+EYG+ubpZ4txur378bpxCv1VCrvexV81N6Nwi3T7C
5sKc4Hhmb2EmZjA6lRG2Xfe2j6VND19Uk5ogmyBREJsfuTZ4X9xsWd1iBQ3Bt7vF
VAz5bw9TYl/do6Kve6Q73q/8AyRod6W2HHKcUHaDzeNoE1448uegAyUpoQdbZK2C
NxsWMQVO+heSfzdzf9m1bG1Ti9igoOA0WMG4bBhy/9O11t547aB3ConJiQ4iimrL
ow8pNq9XpNEJyxro2tgeZFMCr9ksJvokEIEp0ipUJN0LZkBujINbxRQSx3fkGLCP
LKHxiyixh7AoVSGdsKcNM7wcWbPWAVnWhNhf+tr2FulL
-----END CERTIFICATE-----
Generated at Sun May 5 14:36:46 2024 by rpki-client on console-ams.rpki-client.org