Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/K5luXnuUAnQkaoDvMXlwey8YX64.roa
File: K5luXnuUAnQkaoDvMXlwey8YX64.roa (raw, json)
Hash identifier: Ed4IFwDrkGar/JUAPd7qxsHWvLhFP2xUDPjuii2cbTU=
Subject key identifier: 2B:99:6E:5E:7B:94:02:74:24:6A:80:EF:31:79:70:7B:2F:18:5F:AE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018FBF21A0500F047EBE94C61688C3E56632
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/K5luXnuUAnQkaoDvMXlwey8YX64.roa
Signing time: Tue 28 May 2024 12:16:43 +0000
ROA not before: Tue 28 May 2024 12:16:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34652
IP address blocks: 193.183.70.0/24 maxlen: 24
193.183.75.0/24 maxlen: 24
2a01:280:328::/48 maxlen: 48
2a01:280:329::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:21:a0:50:0f:04:7e:be:94:c6:16:88:c3:e5:66:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 28 12:16:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b996e5e7b940274246a80ef3179707b2f185fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:33:c7:63:9b:b8:d5:f6:45:27:33:eb:69:
2f:ae:98:9e:ce:0c:cf:89:00:af:4f:81:92:01:cd:
5b:d3:d2:34:bd:97:a8:f7:b6:14:a3:3c:2c:17:85:
16:fe:c9:df:a8:45:25:66:70:1f:c9:2a:64:8c:3c:
fd:2b:55:7e:46:77:cc:7e:2b:e5:9e:c0:de:c4:b3:
19:7a:51:07:ce:a0:96:f7:87:da:ad:04:72:93:eb:
0d:f8:f5:43:fa:72:c8:21:d7:c2:09:9f:65:44:b1:
96:86:fb:af:6e:b7:14:87:ba:c1:b1:aa:0d:c6:d6:
4a:84:10:c3:55:42:c0:fc:ac:7d:a6:86:29:6f:1e:
07:75:17:f2:23:23:8f:30:bb:ec:e7:7e:1f:53:8b:
1b:0e:12:9d:ab:ba:09:b4:97:47:ca:3e:32:3c:29:
a3:f9:72:0f:fe:99:af:f8:2c:9e:f9:b9:d7:5a:80:
b5:ec:55:e9:6e:39:f4:af:81:94:e2:06:2e:e5:17:
ef:9d:91:83:a3:32:54:ee:2f:e9:4f:df:aa:78:bb:
72:e1:fa:ec:a8:ff:20:b0:d1:c2:c2:04:71:93:31:
7a:8d:6d:d1:2b:63:03:7e:56:df:d6:ad:ce:0d:34:
09:ae:2e:1f:d6:fa:ea:8a:ee:f7:0b:9b:f2:4c:f0:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:99:6E:5E:7B:94:02:74:24:6A:80:EF:31:79:70:7B:2F:18:5F:AE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/K5luXnuUAnQkaoDvMXlwey8YX64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.70.0/24
193.183.75.0/24
IPv6:
2a01:280:328::/47
Signature Algorithm: sha256WithRSAEncryption
5e:4b:2e:e4:da:2e:3d:1f:3e:0a:a7:de:3a:60:bf:9a:95:4d:
42:e2:03:6f:8d:39:1b:bd:37:01:6d:5a:7c:e0:59:4a:ab:d7:
19:9d:77:06:34:1a:85:8b:8a:2d:18:6c:1a:ef:10:14:ad:07:
36:dc:e0:1f:0a:4b:84:5b:41:1c:bf:14:e1:87:a5:88:d4:6f:
25:78:42:a5:a7:88:0f:1f:af:42:3c:47:55:0d:ac:20:85:6a:
3b:99:70:f1:a3:56:06:1d:97:01:21:17:44:b8:c7:b6:72:10:
8b:d0:f0:9a:4f:54:14:99:7a:b9:b5:51:19:95:20:e2:30:03:
8f:db:26:07:fd:12:2e:8f:10:45:86:03:d6:f1:cd:e1:ee:c5:
ac:0b:1e:20:3b:bb:fe:30:55:38:b5:eb:25:4a:e9:06:31:03:
14:0c:9b:96:bd:2a:b5:14:2c:ac:0d:96:fc:b2:07:f5:fc:ad:
69:43:99:30:a0:88:86:72:82:9d:9f:46:55:ba:48:26:d5:34:
17:ef:ae:b0:41:83:87:a5:d0:a8:62:17:7e:34:fe:98:b2:08:
da:b7:81:71:0a:13:2f:e4:d7:96:4d:b1:35:c1:58:7f:6f:52:
c6:df:9b:47:f6:f8:f7:3e:3c:4e:4a:07:45:6a:2b:62:a8:f2:
89:31:5d:a7
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY+/IaBQDwR+vpTGFojD5WYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwNTI4MTIxNjQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjk5NmU1ZTdiOTQwMjc0MjQ2YTgwZWYzMTc5NzA3YjJmMTg1ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrkzx2ObuNX2RScz62kvrpiezgzP
iQCvT4GSAc1b09I0vZeo97YUozwsF4UW/snfqEUlZnAfySpkjDz9K1V+RnfMfivl
nsDexLMZelEHzqCW94farQRyk+sN+PVD+nLIIdfCCZ9lRLGWhvuvbrcUh7rBsaoN
xtZKhBDDVULA/Kx9poYpbx4HdRfyIyOPMLvs534fU4sbDhKdq7oJtJdHyj4yPCmj
+XIP/pmv+Cye+bnXWoC17FXpbjn0r4GU4gYu5RfvnZGDozJU7i/pT9+qeLty4frs
qP8gsNHCwgRxkzF6jW3RK2MDflbf1q3ODTQJri4f1vrqiu73C5vyTPAoEwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCuZbl57lAJ0JGqA7zF5cHsvGF+uMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvSzVsdVhudVVBblFrYW9Edk1YbHdleThZWDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwbdGAwQA
wbdLMA8EAgACMAkDBwEqAQKAAygwDQYJKoZIhvcNAQELBQADggEBAF5LLuTaLj0f
Pgqn3jpgv5qVTULiA2+NORu9NwFtWnzgWUqr1xmddwY0GoWLii0YbBrvEBStBzbc
4B8KS4RbQRy/FOGHpYjUbyV4QqWniA8fr0I8R1UNrCCFajuZcPGjVgYdlwEhF0S4
x7ZyEIvQ8JpPVBSZerm1URmVIOIwA4/bJgf9Ei6PEEWGA9bxzeHuxawLHiA7u/4w
VTi16yVK6QYxAxQMm5a9KrUULKwNlvyyB/X8rWlDmTCgiIZygp2fRlW6SCbVNBfv
rrBBg4el0KhiF340/piyCNq3gXEKEy/k15ZNsTXBWH9vUsbfm0f2+Pc+PE5KB0Vq
K2Ko8okxXac=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:00 2024 by rpki-client on console-ams.rpki-client.org