Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/ERQDbuiIKCNiW6IYoFoi4glezEk.roa
File: ERQDbuiIKCNiW6IYoFoi4glezEk.roa (raw, json)
Hash identifier: 5LTowwVDEWvuy5L/QyvVFnjS0nY4VYH05V5sN33pOW4=
Subject key identifier: 11:14:03:6E:E8:88:28:23:62:5B:A2:18:A0:5A:22:E2:09:5E:CC:49
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 018CCA2B7F6BB0216897EC6E6C32D174D332
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/ERQDbuiIKCNiW6IYoFoi4glezEk.roa
Signing time: Tue 02 Jan 2024 12:34:57 +0000
ROA not before: Tue 02 Jan 2024 12:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 185.148.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7f:6b:b0:21:68:97:ec:6e:6c:32:d1:74:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jan 2 12:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1114036ee8882823625ba218a05a22e2095ecc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:b6:b4:66:04:d7:e8:2c:fe:54:d3:46:85:
03:22:0a:2a:91:3a:24:67:e5:89:9f:2d:71:9a:69:
76:bd:4e:2f:14:c7:e1:f2:b0:92:f3:c8:ba:d6:da:
f3:72:93:50:66:e2:a4:47:ba:4e:75:0a:0c:d9:63:
d5:ea:e2:d0:f4:4a:09:38:06:3d:58:89:3c:f0:6e:
73:19:5f:19:4f:e0:70:3a:09:5f:24:73:1b:02:48:
0c:ba:c6:69:c0:1b:41:d8:65:b9:ec:b7:90:5b:4b:
83:7c:d1:c7:ff:52:77:f8:24:51:05:2b:09:04:70:
e8:56:cd:0f:23:1c:0a:85:cc:e6:fb:e0:f9:46:71:
21:15:ce:0f:7f:22:7f:d0:b8:7b:3f:6c:8b:1a:4a:
64:49:5c:4a:1d:b7:79:a4:de:7e:cc:5a:5d:b1:59:
62:10:95:9f:ac:32:97:de:85:ca:6f:d8:90:2d:a9:
ad:8d:1a:cd:42:e3:8f:30:2d:f6:e2:a1:86:82:ab:
3e:b9:cd:a3:7d:a8:30:9d:2e:5f:e9:21:c7:23:ac:
9f:ff:d7:e3:21:fa:6e:b1:42:ee:a9:62:47:60:c5:
1c:72:89:b6:63:11:79:11:d3:7e:f7:99:1e:46:bb:
f0:e5:c7:22:64:a0:44:6d:4c:c7:c3:ba:c2:62:f9:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:14:03:6E:E8:88:28:23:62:5B:A2:18:A0:5A:22:E2:09:5E:CC:49
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/ERQDbuiIKCNiW6IYoFoi4glezEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:d4:e4:c4:53:ab:18:8d:51:f3:1b:dd:db:d1:ec:5c:eb:c6:
74:38:94:a6:77:50:14:5f:63:69:bf:33:c8:e1:ee:df:66:e3:
ba:3e:64:48:c7:b6:8d:03:e3:d8:b3:4c:8c:78:58:e3:f5:50:
83:93:e5:3a:29:6f:4d:9d:f7:86:bd:de:7d:c6:91:72:7c:13:
32:7d:9e:ae:62:ca:31:98:fd:09:70:3b:16:f1:88:ef:46:8b:
b0:1d:46:36:06:2e:79:36:44:41:c3:98:b1:07:89:01:bf:ec:
82:12:46:bd:cf:45:94:ca:84:47:56:fb:41:4d:71:14:88:9e:
82:05:a2:ba:e5:d6:14:38:a0:4e:1f:00:4c:57:fa:6d:ec:4f:
4a:8c:86:ca:bd:21:79:6e:71:0c:fa:a4:50:a2:71:28:2c:98:
ec:8f:70:a2:45:fe:8c:cf:45:a0:22:7b:4a:e6:dd:0c:4e:cf:
b5:de:49:c4:e4:9c:27:88:41:2a:4c:46:72:bb:90:d6:2e:69:
9b:4c:fa:88:1b:96:37:8b:11:2d:24:cd:3f:28:c1:86:58:0c:
c1:bf:1a:f3:af:a1:07:2c:c0:a5:e2:3c:01:e4:0e:45:23:f4:
e2:e8:6d:ef:e0:04:0b:e4:72:b0:17:d6:df:ca:22:be:23:7a:
bd:9c:b9:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK39rsCFol+xubDLRdNMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1
MGU1MDkwHhcNMjQwMTAyMTIzNDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTE0MDM2ZWU4ODgyODIzNjI1YmEyMThhMDVhMjJlMjA5NWVjYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT+2tGYE1+gs/lTTRoUDIgoqkTok
Z+WJny1xmml2vU4vFMfh8rCS88i61trzcpNQZuKkR7pOdQoM2WPV6uLQ9EoJOAY9
WIk88G5zGV8ZT+BwOglfJHMbAkgMusZpwBtB2GW57LeQW0uDfNHH/1J3+CRRBSsJ
BHDoVs0PIxwKhczm++D5RnEhFc4PfyJ/0Lh7P2yLGkpkSVxKHbd5pN5+zFpdsVli
EJWfrDKX3oXKb9iQLamtjRrNQuOPMC324qGGgqs+uc2jfagwnS5f6SHHI6yf/9fj
IfpusULuqWJHYMUccom2YxF5EdN+95keRrvw5cciZKBEbUzHw7rCYvnXbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEUA27oiCgjYluiGKBaIuIJXsxJMB8GA1UdIwQY
MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt
OWUwYjE5NmEwNDg3LzEvRVJRRGJ1aUlLQ05pVzZJWW9Gb2k0Z2xlekVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3
LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZR8MA0G
CSqGSIb3DQEBCwUAA4IBAQCc1OTEU6sYjVHzG93b0exc68Z0OJSmd1AUX2NpvzPI
4e7fZuO6PmRIx7aNA+PYs0yMeFjj9VCDk+U6KW9NnfeGvd59xpFyfBMyfZ6uYsox
mP0JcDsW8YjvRouwHUY2Bi55NkRBw5ixB4kBv+yCEka9z0WUyoRHVvtBTXEUiJ6C
BaK65dYUOKBOHwBMV/pt7E9KjIbKvSF5bnEM+qRQonEoLJjsj3CiRf6Mz0WgIntK
5t0MTs+13knE5JwniEEqTEZyu5DWLmmbTPqIG5Y3ixEtJM0/KMGGWAzBvxrzr6EH
LMCl4jwB5A5FI/Ti6G3v4AQL5HKwF9bfyiK+I3q9nLn6
-----END CERTIFICATE-----
Generated at Sat Jun 8 07:30:02 2024 by rpki-client on console-ams.rpki-client.org