Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0x7mb69gwOhnTQ78tYhZeXevJLo.roa
File: 0x7mb69gwOhnTQ78tYhZeXevJLo.roa (raw, json)
Hash identifier: TanT5WYpp7gHq6LNaJh3++ui6pVWnv0k3O5cwYNAhpo=
Subject key identifier: D3:1E:E6:6F:AF:60:C0:E8:67:4D:0E:FC:B5:88:59:79:77:AF:24:BA
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 01900E33CEB0BFCE80B88DC8346751139660
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0x7mb69gwOhnTQ78tYhZeXevJLo.roa
Signing time: Wed 12 Jun 2024 20:46:34 +0000
ROA not before: Wed 12 Jun 2024 20:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 5.56.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0e:33:ce:b0:bf:ce:80:b8:8d:c8:34:67:51:13:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jun 12 20:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d31ee66faf60c0e8674d0efcb588597977af24ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:81:73:f1:bb:11:d9:71:09:59:56:9e:db:
35:fc:c5:55:10:3f:62:60:64:4e:cc:1e:a3:4d:1f:
1d:ad:f7:5c:9d:37:a8:06:bb:8e:7f:ca:19:93:b3:
a4:d9:8f:04:f3:18:9a:eb:30:72:14:97:e4:89:72:
c0:9c:7d:6d:3a:f2:0e:24:ad:a2:e2:56:14:3a:cc:
ea:a6:8e:0a:05:88:50:10:f9:0f:06:fc:1f:85:c4:
95:7d:1d:6a:66:90:e8:35:6c:01:42:9b:e7:c5:fd:
ca:a5:d1:5e:87:4d:26:d5:74:47:5f:27:5c:22:09:
31:ef:83:8f:79:73:7e:7d:95:e7:d5:f4:a5:d4:92:
65:2d:37:48:03:3f:d4:5a:9c:54:57:3d:a5:2c:40:
5f:e4:c6:d0:0e:2d:4f:5c:65:37:de:5e:b3:7e:fe:
f1:e5:86:a4:a2:46:fa:82:09:8c:b8:9d:9a:b4:fa:
35:7e:85:74:24:69:5d:11:12:9d:76:0a:5d:73:2b:
4f:28:2b:83:0f:1f:e6:7b:fc:da:6d:73:26:8c:f6:
19:78:f1:65:91:e6:11:8f:a2:91:8a:8b:5b:5f:50:
4f:f8:5f:91:3c:b3:0e:1a:dc:e9:40:2d:9f:ef:f2:
72:00:a6:61:65:69:71:75:80:ad:c2:b9:c4:1e:cf:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:E6:6F:AF:60:C0:E8:67:4D:0E:FC:B5:88:59:79:77:AF:24:BA
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/0x7mb69gwOhnTQ78tYhZeXevJLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:17:42:2a:6b:73:b0:b5:76:b5:67:94:f0:6f:37:ad:f8:82:
c6:e9:5d:6e:f4:44:61:f8:9e:2c:67:77:e4:fd:b9:57:1a:55:
61:74:69:ef:85:63:02:66:2d:e3:83:c6:90:e1:84:7d:3f:79:
c6:54:05:e7:02:cd:6d:ab:a3:60:cd:bc:5f:2c:e4:75:a8:2d:
a3:68:51:97:db:b9:12:b3:72:81:4f:82:0e:cc:8f:dc:e5:f4:
0c:eb:ac:61:b0:6a:a4:b4:de:9a:d8:c1:82:21:66:53:e6:7d:
19:04:0e:d3:23:e0:6f:d2:5e:ce:77:f2:94:2f:a7:54:16:27:
70:f6:6a:c4:ab:0c:36:a5:89:84:29:03:60:d9:11:89:94:a9:
b0:e6:70:42:09:ec:90:ac:61:2f:08:5a:cd:c6:6e:b8:49:6c:
7b:95:c3:be:11:cc:5c:9b:a2:80:d8:ac:fb:0f:de:5e:dc:c5:
de:50:51:72:af:9b:c5:5f:2b:0e:6c:1c:e2:6f:22:3c:80:14:
3e:c5:26:61:11:04:ee:d8:a1:d9:db:f0:80:da:e6:3b:f7:13:
03:75:dd:ad:3d:f6:71:c1:92:5d:65:2b:e3:b1:1a:d9:32:ce:
7b:e1:e3:92:65:2b:3e:99:d0:32:ab:a3:62:69:b0:6d:98:7f:
f0:e3:62:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAOM86wv86AuI3INGdRE5ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjQwNjEyMjA0NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzFlZTY2ZmFmNjBjMGU4Njc0ZDBlZmNiNTg4NTk3OTc3YWYyNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxKBc/G7EdlxCVlWnts1/MVVED9i
YGROzB6jTR8drfdcnTeoBruOf8oZk7Ok2Y8E8xia6zByFJfkiXLAnH1tOvIOJK2i
4lYUOszqpo4KBYhQEPkPBvwfhcSVfR1qZpDoNWwBQpvnxf3KpdFeh00m1XRHXydc
Igkx74OPeXN+fZXn1fSl1JJlLTdIAz/UWpxUVz2lLEBf5MbQDi1PXGU33l6zfv7x
5Yakokb6ggmMuJ2atPo1foV0JGldERKddgpdcytPKCuDDx/me/zabXMmjPYZePFl
keYRj6KRiotbX1BP+F+RPLMOGtzpQC2f7/JyAKZhZWlxdYCtwrnEHs+IxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNMe5m+vYMDoZ00O/LWIWXl3ryS6MB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvMHg3bWI2OWd3T2huVFE3OHRZaFplWGV2SkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTiFMA0G
CSqGSIb3DQEBCwUAA4IBAQCOF0Iqa3OwtXa1Z5Twbzet+ILG6V1u9ERh+J4sZ3fk
/blXGlVhdGnvhWMCZi3jg8aQ4YR9P3nGVAXnAs1tq6NgzbxfLOR1qC2jaFGX27kS
s3KBT4IOzI/c5fQM66xhsGqktN6a2MGCIWZT5n0ZBA7TI+Bv0l7Od/KUL6dUFidw
9mrEqww2pYmEKQNg2RGJlKmw5nBCCeyQrGEvCFrNxm64SWx7lcO+Ecxcm6KA2Kz7
D95e3MXeUFFyr5vFXysObBzibyI8gBQ+xSZhEQTu2KHZ2/CA2uY79xMDdd2tPfZx
wZJdZSvjsRrZMs574eOSZSs+mdAyq6NiabBtmH/w42Ie
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:04:09 2024 by rpki-client on console-fra.rpki-client.org