Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/5VhHjSGf_w4GAg7NEInAk7hLXIE.roa
File: 5VhHjSGf_w4GAg7NEInAk7hLXIE.roa (raw, json)
Hash identifier: Mgjf1Wh9VsWaHsILbuia7bGTUGag7ayMhJXwiyS29Tk=
Subject key identifier: E5:58:47:8D:21:9F:FF:0E:06:02:0E:CD:10:89:C0:93:B8:4B:5C:81
Certificate issuer: /CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Certificate serial: 018CC3B71C49AB907465B1964D6E2F89DDE3
Authority key identifier: D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/5VhHjSGf_w4GAg7NEInAk7hLXIE.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47896
IP address blocks: 185.143.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1c:49:ab:90:74:65:b1:96:4d:6e:2f:89:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02013f3548be3dcb3dca18d4fc93789f44f03bf
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e558478d219fff0e06020ecd1089c093b84b5c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:de:ff:58:9f:c8:35:23:6d:7a:5b:2b:3a:
d3:0c:f2:90:79:29:bf:3c:d0:36:6b:7f:81:50:fc:
04:b0:8c:3f:af:52:66:ef:33:4d:33:3d:74:b2:b4:
de:9a:5c:4a:03:eb:5d:1e:dd:fa:71:25:47:5c:0a:
2d:f5:80:2c:1f:36:80:c5:1a:38:c2:19:67:ff:69:
b4:34:da:88:2b:15:82:23:00:b9:ba:84:95:4e:8d:
d9:d3:2e:2f:b5:1c:cf:a0:ed:39:b6:e5:3a:ef:22:
7d:27:7d:23:70:29:52:bb:a3:cc:76:7f:0e:da:1f:
17:a2:66:31:5b:46:38:61:6a:ab:f7:51:88:13:5e:
b4:4e:a3:e0:01:56:8f:e8:c7:e4:a7:dc:ce:97:2f:
5e:83:36:dd:06:ae:7e:73:5e:80:12:83:b8:b0:d8:
b4:fe:15:ce:ad:37:0d:d9:78:7f:7a:c3:dc:7f:89:
1d:61:3e:0e:46:1a:9b:b9:10:c9:f7:5d:89:dd:49:
80:0b:13:b7:0f:97:c8:34:c7:03:02:17:04:14:9b:
2f:db:47:c8:2e:d0:ad:7f:ae:50:c0:5e:c6:8e:34:
33:50:ed:9d:26:eb:d8:62:a3:bf:40:f5:c9:e4:3c:
5c:67:55:80:b1:9e:eb:7c:19:ab:49:56:63:d7:12:
d1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:58:47:8D:21:9F:FF:0E:06:02:0E:CD:10:89:C0:93:B8:4B:5C:81
X509v3 Authority Key Identifier:
keyid:D0:20:13:F3:54:8B:E3:DC:B3:DC:A1:8D:4F:C9:37:89:F4:4F:03:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CAT81SL49yz3KGNT8k3ifRPA78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/5VhHjSGf_w4GAg7NEInAk7hLXIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd431a-9706-4f38-800b-2a685f78b29d/1/0CAT81SL49yz3KGNT8k3ifRPA78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:82:cc:75:16:d0:c9:b3:ca:70:5b:a4:18:8a:d9:dc:87:f1:
0e:1a:6b:0f:9c:3f:5a:6a:5e:51:ce:b1:3f:02:d8:fb:3b:93:
88:1a:71:f3:82:3a:ce:3a:07:4f:12:a7:7c:86:6d:51:f1:13:
e3:27:74:43:e7:cf:1d:8b:68:9e:18:2f:96:03:67:89:cb:9e:
64:45:ed:2c:b1:85:fb:d1:71:49:06:3d:bf:d1:f0:62:58:15:
f7:bf:90:1d:b4:1c:01:02:b6:4c:16:7b:ff:7b:a6:eb:9e:d5:
db:fb:9e:29:0f:00:4e:73:70:42:65:b2:76:dc:75:9b:18:ae:
0e:85:03:b4:65:22:48:5b:59:2e:21:ed:65:5a:68:42:cf:47:
26:8f:68:05:63:a3:53:79:d8:c5:26:91:f2:ee:1e:aa:d7:83:
99:db:33:14:7d:f0:55:1e:a4:5d:f9:97:8b:f1:c5:9f:b9:62:
26:83:68:83:18:75:10:da:c5:6b:04:e0:40:98:ad:cf:a6:b3:
f4:e3:85:82:10:b2:d6:46:46:60:6a:a1:1a:8a:e7:79:c0:f4:
c1:94:64:32:dd:01:1d:dd:e0:af:c0:1f:cf:05:ab:29:42:de:
d4:30:0f:f1:69:ce:b7:b3:30:ad:68:16:60:b5:52:d7:c7:a4:
dc:d0:03:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtxxJq5B0ZbGWTW4vid3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjAxM2YzNTQ4YmUzZGNiM2RjYTE4ZDRmYzkzNzg5ZjQ0
ZjAzYmYwHhcNMjQwMTAxMDYzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTU4NDc4ZDIxOWZmZjBlMDYwMjBlY2QxMDg5YzA5M2I4NGI1YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqDe/1ifyDUjbXpbKzrTDPKQeSm/
PNA2a3+BUPwEsIw/r1Jm7zNNMz10srTemlxKA+tdHt36cSVHXAot9YAsHzaAxRo4
whln/2m0NNqIKxWCIwC5uoSVTo3Z0y4vtRzPoO05tuU67yJ9J30jcClSu6PMdn8O
2h8XomYxW0Y4YWqr91GIE160TqPgAVaP6Mfkp9zOly9egzbdBq5+c16AEoO4sNi0
/hXOrTcN2Xh/esPcf4kdYT4ORhqbuRDJ912J3UmACxO3D5fINMcDAhcEFJsv20fI
LtCtf65QwF7GjjQzUO2dJuvYYqO/QPXJ5DxcZ1WAsZ7rfBmrSVZj1xLR5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVYR40hn/8OBgIOzRCJwJO4S1yBMB8GA1UdIwQY
MBaAFNAgE/NUi+Pcs9yhjU/JN4n0TwO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGIt
MmE2ODVmNzhiMjlkLzEvNVZoSGpTR2ZfdzRHQWc3TkVJbkFrN2hMWElFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZDQzMWEtOTcwNi00ZjM4LTgwMGItMmE2ODVmNzhiMjlk
LzEvMENBVDgxU0w0OXl6M0tHTlQ4azNpZlJQQTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY90MA0G
CSqGSIb3DQEBCwUAA4IBAQDEgsx1FtDJs8pwW6QYitnch/EOGmsPnD9aal5RzrE/
Atj7O5OIGnHzgjrOOgdPEqd8hm1R8RPjJ3RD588di2ieGC+WA2eJy55kRe0ssYX7
0XFJBj2/0fBiWBX3v5AdtBwBArZMFnv/e6brntXb+54pDwBOc3BCZbJ23HWbGK4O
hQO0ZSJIW1kuIe1lWmhCz0cmj2gFY6NTedjFJpHy7h6q14OZ2zMUffBVHqRd+ZeL
8cWfuWImg2iDGHUQ2sVrBOBAmK3PprP044WCELLWRkZgaqEaiud5wPTBlGQy3QEd
3eCvwB/PBaspQt7UMA/xac63szCtaBZgtVLXx6Tc0ANX
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:32 2024 by rpki-client on console-fra.rpki-client.org