Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/pWNeHmvGU48uui_Hltf6K-WsnEE.roa
File: pWNeHmvGU48uui_Hltf6K-WsnEE.roa (raw, json)
Hash identifier: xJrBC1pO2sSm50NEcDB5hEGdguWsOi2mEWtoBK5zC7w=
Subject key identifier: A5:63:5E:1E:6B:C6:53:8F:2E:BA:2F:C7:96:D7:FA:2B:E5:AC:9C:41
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 018CC726F92921D20053BE451DF39381AE26
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/pWNeHmvGU48uui_Hltf6K-WsnEE.roa
Signing time: Mon 01 Jan 2024 22:31:09 +0000
ROA not before: Mon 01 Jan 2024 22:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5414
IP address blocks: 84.20.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f9:29:21:d2:00:53:be:45:1d:f3:93:81:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 22:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5635e1e6bc6538f2eba2fc796d7fa2be5ac9c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:1c:75:26:90:9e:54:89:a0:39:5a:02:84:
64:30:cc:e9:7c:88:9e:64:c1:22:42:f5:4d:74:15:
08:bd:05:86:76:f8:7b:c3:bf:66:37:5a:01:d9:fc:
08:1a:9a:89:59:71:e6:72:29:a8:c7:c8:1b:c4:80:
d8:f1:85:f5:63:f9:da:ae:55:7c:ee:38:05:2f:74:
f8:39:04:e4:d0:22:53:ad:52:f7:c0:df:91:4b:5f:
a8:58:56:b9:27:24:a6:ba:31:3b:a3:d7:55:af:46:
54:b6:d0:46:87:2c:e8:a9:70:2a:88:91:dc:c2:99:
c5:1b:56:1c:71:59:83:a7:85:b6:82:69:2a:4c:29:
3b:67:22:fa:95:68:98:c0:72:d2:60:77:8f:8e:c3:
ae:f5:1f:0b:c5:d8:10:eb:ff:08:4f:e6:5c:63:c5:
fb:03:a3:54:7f:0d:9c:da:ff:28:37:12:f9:9d:1a:
90:51:b6:6c:13:10:63:a3:43:8b:41:83:2d:69:79:
84:9d:36:29:02:ab:03:28:b9:05:9a:ad:7b:bd:88:
0b:71:b5:20:ba:58:b7:77:03:42:21:0c:55:fa:f7:
90:d9:81:94:a2:87:39:ae:81:14:91:c6:75:f7:21:
83:2a:5b:48:70:80:d4:d4:7c:d5:4a:08:26:9d:55:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:63:5E:1E:6B:C6:53:8F:2E:BA:2F:C7:96:D7:FA:2B:E5:AC:9C:41
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/pWNeHmvGU48uui_Hltf6K-WsnEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.93.0/24
Signature Algorithm: sha256WithRSAEncryption
82:92:cb:f5:cd:78:70:24:5c:57:6d:6e:6a:0d:50:83:db:5f:
9c:af:14:15:9c:f9:31:ea:a2:9a:70:1e:73:95:d5:24:aa:59:
40:88:e7:dc:06:f0:21:a6:5d:2d:8a:cc:8a:71:42:e6:e1:c9:
46:56:72:52:e4:78:db:e5:a4:e5:c4:12:5f:b9:83:6d:86:76:
39:61:ca:fa:5a:de:45:c8:3c:41:b1:cd:14:4c:6f:a1:c6:82:
1d:0a:a0:ab:77:2e:02:2a:8a:81:8c:39:4b:38:21:d2:9e:1c:
a0:77:d2:2a:bd:cc:b3:53:24:89:a6:08:5f:bd:15:60:63:f8:
fe:7f:ea:6c:2c:2f:cf:d9:27:b1:b6:69:79:2b:e0:96:8d:49:
24:37:36:e9:db:50:10:ef:67:cd:4e:ed:11:82:56:8f:8b:5a:
52:3b:61:40:94:bc:27:2f:57:4b:5e:2e:b8:f2:a6:e3:63:7b:
4c:5a:3f:84:a3:90:63:16:f5:26:0d:ae:f7:9d:be:b9:44:6d:
ec:22:35:62:db:a7:92:d8:1c:d0:f7:6d:98:b3:8f:49:af:a4:
1f:cd:3e:4f:89:ce:8c:8d:68:0b:83:8a:e0:6d:53:53:e6:2e:
b8:da:a5:de:26:3f:06:b5:5d:c5:74:b0:b2:5f:a6:0a:07:aa:
b2:8b:60:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJvkpIdIAU75FHfOTga4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTA5ZGVlNmZiZGMyNTZkZjkxMTQ2MGNjYzkxNWQwNjZh
OGZmOGIwHhcNMjQwMTAxMjIzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTYzNWUxZTZiYzY1MzhmMmViYTJmYzc5NmQ3ZmEyYmU1YWM5YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1EcdSaQnlSJoDlaAoRkMMzpfIie
ZMEiQvVNdBUIvQWGdvh7w79mN1oB2fwIGpqJWXHmcimox8gbxIDY8YX1Y/narlV8
7jgFL3T4OQTk0CJTrVL3wN+RS1+oWFa5JySmujE7o9dVr0ZUttBGhyzoqXAqiJHc
wpnFG1YccVmDp4W2gmkqTCk7ZyL6lWiYwHLSYHePjsOu9R8LxdgQ6/8IT+ZcY8X7
A6NUfw2c2v8oNxL5nRqQUbZsExBjo0OLQYMtaXmEnTYpAqsDKLkFmq17vYgLcbUg
uli3dwNCIQxV+veQ2YGUooc5roEUkcZ19yGDKltIcIDU1HzVSggmnVU3LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKVjXh5rxlOPLrovx5bX+ivlrJxBMB8GA1UdIwQY
MBaAFK0Qne5vvcJW35EUYMzJFdBmqP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYt
ZjY2MjZiNjMzODNlLzEvcFdOZUhtdkdVNDh1dWlfSGx0ZjZLLVdzbkVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80NjE1YmUtZTU2Ni00MjUzLTgzZWYtZjY2MjZiNjMzODNl
LzEvclJDZDdtLTl3bGJma1JSZ3pNa1YwR2FvXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBRdMA0G
CSqGSIb3DQEBCwUAA4IBAQCCksv1zXhwJFxXbW5qDVCD21+crxQVnPkx6qKacB5z
ldUkqllAiOfcBvAhpl0tisyKcULm4clGVnJS5Hjb5aTlxBJfuYNthnY5Ycr6Wt5F
yDxBsc0UTG+hxoIdCqCrdy4CKoqBjDlLOCHSnhygd9IqvcyzUySJpghfvRVgY/j+
f+psLC/P2Sextml5K+CWjUkkNzbp21AQ72fNTu0RglaPi1pSO2FAlLwnL1dLXi64
8qbjY3tMWj+Eo5BjFvUmDa73nb65RG3sIjVi26eS2BzQ922Ys49Jr6QfzT5Pic6M
jWgLg4rgbVNT5i642qXeJj8GtV3FdLCyX6YKB6qyi2Br
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:43:45 2024 by rpki-client on console-ams.rpki-client.org