Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/s4qpIu-FpruhYXRT5aYqLn8DSNA.roa
File: s4qpIu-FpruhYXRT5aYqLn8DSNA.roa (raw, json)
Hash identifier: DNzYY1zBDE0gaOXLnS5wYGZpfArK3R6mQlCvJnHcb8k=
Subject key identifier: B3:8A:A9:22:EF:85:A6:BB:A1:61:74:53:E5:A6:2A:2E:7F:03:48:D0
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 018CC5DC901F8F76201F15D03AF7A1BFB147
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/s4qpIu-FpruhYXRT5aYqLn8DSNA.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 83.98.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:90:1f:8f:76:20:1f:15:d0:3a:f7:a1:bf:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b38aa922ef85a6bba1617453e5a62a2e7f0348d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:46:e0:d6:60:ba:86:e3:c5:fa:ca:db:11:
b7:64:bd:9d:3f:3e:ce:47:6c:96:51:bf:92:6b:e7:
e1:e3:74:13:6d:02:32:28:a8:b6:0e:b5:59:f5:d6:
f8:5c:d1:3c:e3:20:fa:66:55:3c:51:f7:0c:7d:5f:
dd:d2:ea:16:bc:ad:aa:23:5c:4d:68:15:21:84:b3:
27:bb:77:b6:61:da:51:8d:20:54:81:19:54:51:30:
4f:75:15:bf:a6:c0:19:d4:8b:42:ef:40:a6:e9:59:
2b:55:9b:7f:16:81:13:3c:03:d0:2e:7f:b3:42:5b:
83:60:47:80:ae:05:6b:77:7c:f5:84:6d:2d:5c:fc:
bb:64:b1:66:b5:03:0f:88:39:82:cd:92:67:e1:f5:
0f:54:3a:6a:b2:a2:b8:f9:1e:11:34:97:d5:7d:fa:
d8:95:4a:a4:3c:dc:4d:c1:80:44:03:fd:a3:99:45:
c4:b0:5f:75:5c:f4:29:24:58:30:ac:19:3a:c1:2e:
9f:c3:3c:22:46:f5:6c:84:d6:51:9d:66:36:91:bc:
11:3f:51:78:be:ec:51:a0:80:49:29:f5:5a:25:ff:
64:25:e3:6f:0a:e9:42:d8:12:e6:24:6b:0d:09:32:
99:ab:ee:e6:57:48:b1:4f:71:6f:41:a1:ea:ad:75:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8A:A9:22:EF:85:A6:BB:A1:61:74:53:E5:A6:2A:2E:7F:03:48:D0
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/s4qpIu-FpruhYXRT5aYqLn8DSNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:52:08:13:fa:ae:69:34:61:6d:12:57:7b:4d:ab:a8:cd:8e:
9d:70:19:d0:ab:5c:97:02:1c:18:33:4f:d7:b1:97:c0:7d:81:
33:18:6c:7c:5f:5c:00:2d:6a:94:ab:1d:30:39:1d:21:0d:1e:
44:da:4c:0e:a2:d3:f5:4b:97:01:b0:4a:49:de:3c:fd:59:35:
7e:7d:60:6c:a8:eb:74:52:57:f0:9b:43:0d:65:bc:6e:d4:05:
27:76:7b:0e:62:40:ae:b7:ed:43:b0:eb:b9:93:d5:cc:38:d0:
81:bd:53:58:23:3f:c5:18:c4:3d:cc:05:0f:76:cb:43:a3:49:
f0:87:3a:f6:f5:71:a4:88:f0:f9:54:93:ab:84:64:1e:4b:3d:
f9:41:58:3c:21:66:e3:72:e9:39:ac:64:1b:dd:a4:c8:6b:2b:
8f:10:80:7c:12:90:d1:2e:57:0b:2d:61:e9:c5:48:f5:5f:24:
e8:90:10:ba:8d:0d:f9:33:4a:35:d3:5b:2e:59:7b:59:8e:2a:
cc:ba:f7:f1:04:50:1e:39:c3:3d:05:b9:a7:a4:6c:81:4b:91:
93:7f:e7:cf:43:62:0a:e9:99:1c:5c:05:26:73:8c:63:ec:1f:
c5:ed:c7:49:88:b1:9e:8b:84:4a:3b:9a:81:ae:29:d9:00:64:
1d:8f:38:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3JAfj3YgHxXQOvehv7FHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjQwMTAxMTYzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzhhYTkyMmVmODVhNmJiYTE2MTc0NTNlNWE2MmEyZTdmMDM0OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaNG4NZguobjxfrK2xG3ZL2dPz7O
R2yWUb+Sa+fh43QTbQIyKKi2DrVZ9db4XNE84yD6ZlU8UfcMfV/d0uoWvK2qI1xN
aBUhhLMnu3e2YdpRjSBUgRlUUTBPdRW/psAZ1ItC70Cm6VkrVZt/FoETPAPQLn+z
QluDYEeArgVrd3z1hG0tXPy7ZLFmtQMPiDmCzZJn4fUPVDpqsqK4+R4RNJfVffrY
lUqkPNxNwYBEA/2jmUXEsF91XPQpJFgwrBk6wS6fwzwiRvVshNZRnWY2kbwRP1F4
vuxRoIBJKfVaJf9kJeNvCulC2BLmJGsNCTKZq+7mV0ixT3FvQaHqrXUsfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOKqSLvhaa7oWF0U+WmKi5/A0jQMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvczRxcEl1LUZwcnVoWVhSVDVhWXFMbjhEU05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2KdMA0G
CSqGSIb3DQEBCwUAA4IBAQCOUggT+q5pNGFtEld7TauozY6dcBnQq1yXAhwYM0/X
sZfAfYEzGGx8X1wALWqUqx0wOR0hDR5E2kwOotP1S5cBsEpJ3jz9WTV+fWBsqOt0
Ulfwm0MNZbxu1AUndnsOYkCut+1DsOu5k9XMONCBvVNYIz/FGMQ9zAUPdstDo0nw
hzr29XGkiPD5VJOrhGQeSz35QVg8IWbjcuk5rGQb3aTIayuPEIB8EpDRLlcLLWHp
xUj1XyTokBC6jQ35M0o101suWXtZjirMuvfxBFAeOcM9BbmnpGyBS5GTf+fPQ2IK
6ZkcXAUmc4xj7B/F7cdJiLGei4RKO5qBrinZAGQdjziz
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:46:47 2024 by rpki-client on console-fra.rpki-client.org