Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa
File: 1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa (raw, json)
Hash identifier: Doqm/GzZcC8e464VUOHTG92LAb80U7tiAlp8evsRpYE=
Subject key identifier: FB:93:AB:D6:C9:10:68:E3:19:88:A1:2A:E5:22:52:2C:63:A9:56:A4
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB226CB2B5FDEF6D930AC1DA438AA
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56924
IP address blocks: 62.174.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b2:26:cb:2b:5f:de:f6:d9:30:ac:1d:a4:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb93abd6c91068e31988a12ae522522c63a956a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:95:72:8c:eb:e4:6c:28:83:69:7a:b9:50:
62:fc:72:65:cf:07:cb:50:db:da:47:bf:b8:0d:dd:
b7:2f:5f:fc:7c:03:af:52:a6:15:78:83:eb:c0:db:
5a:e2:7f:41:00:40:a5:d9:f2:e5:10:86:55:f3:a8:
a1:da:83:1b:c0:89:8c:ad:07:df:3c:bd:09:57:5f:
b1:e8:b3:f8:cb:5c:e1:64:f0:c3:fe:b3:45:ef:94:
4e:31:e8:53:58:95:79:a2:27:f6:8e:03:ae:ba:67:
49:92:d8:23:ea:43:56:51:a5:3c:42:2f:76:9c:66:
2f:b8:27:0d:54:c9:88:b4:0b:5c:48:fc:8c:93:6d:
3b:27:dc:73:8a:0f:47:63:1d:94:48:16:0e:11:3a:
3b:14:34:39:65:1b:14:de:e9:9d:6c:4a:f4:90:1c:
20:a3:6f:ba:39:d4:63:43:b6:d5:ab:64:07:bf:50:
e9:8f:79:79:f1:17:ae:69:99:bd:57:ef:96:1a:a9:
fb:b9:43:5d:43:99:da:46:f5:0a:2e:78:44:a8:e1:
bd:0f:99:19:0b:e9:4a:53:51:df:47:7e:c6:ac:d5:
be:e8:73:66:7a:2a:ca:8a:55:9a:3a:dc:86:97:be:
2d:a9:9a:76:6c:cd:8b:93:71:60:fa:12:91:3d:9e:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:93:AB:D6:C9:10:68:E3:19:88:A1:2A:E5:22:52:2C:63:A9:56:A4
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-5Or1skQaOMZiKEq5SJSLGOpVqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.174.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:61:68:36:a0:27:f8:8e:e1:b8:5a:77:e0:8f:e2:6a:d8:5a:
82:3a:27:18:40:be:f6:07:c3:dc:c3:29:45:02:8b:ae:50:37:
a2:42:e6:93:a8:33:0a:1b:41:f1:a0:e8:b9:32:a8:5d:91:20:
27:90:1b:1a:27:17:c1:f8:32:ff:de:10:a0:a9:95:b1:bc:fe:
4b:83:29:37:3b:6c:12:f5:ba:33:d0:8a:38:59:bd:5e:e1:47:
90:d2:67:55:dc:ce:83:7f:15:34:66:fd:6e:75:e4:aa:d7:54:
40:7d:2c:31:30:92:20:96:5a:e7:51:d7:3f:b1:c0:d2:8e:08:
18:b9:ff:a9:dd:9b:ae:cc:68:89:40:8f:da:6d:8c:2d:70:62:
3f:5c:4d:4c:ae:bb:2b:e4:47:cc:28:6f:32:df:35:43:89:d3:
56:23:31:0d:0f:d3:09:89:a0:8d:3c:22:12:e4:7d:da:a8:e2:
a5:37:d5:1b:69:39:2c:31:7a:84:c4:08:05:fb:bd:53:14:3c:
94:d5:0d:60:cb:41:5f:65:d4:33:1c:1b:fb:d0:8c:68:42:2b:
b4:76:9b:33:35:f8:0e:85:98:89:db:52:9b:a7:85:dd:8e:ba:
c7:65:1b:cd:b7:67:1b:fd:d7:3e:34:14:f2:ea:ec:d6:5b:e9:
6c:fa:19:f2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzF3LImyytf3vbZMKwdpDiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjQwMTAxMTYzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjkzYWJkNmM5MTA2OGUzMTk4OGExMmFlNTIyNTIyYzYzYTk1NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq56Vcozr5Gwog2l6uVBi/HJlzwfL
UNvaR7+4Dd23L1/8fAOvUqYVeIPrwNta4n9BAECl2fLlEIZV86ih2oMbwImMrQff
PL0JV1+x6LP4y1zhZPDD/rNF75ROMehTWJV5oif2jgOuumdJktgj6kNWUaU8Qi92
nGYvuCcNVMmItAtcSPyMk207J9xzig9HYx2USBYOETo7FDQ5ZRsU3umdbEr0kBwg
o2+6OdRjQ7bVq2QHv1Dpj3l58ReuaZm9V++WGqn7uUNdQ5naRvUKLnhEqOG9D5kZ
C+lKU1HfR37GrNW+6HNmeirKilWaOtyGl74tqZp2bM2Lk3Fg+hKRPZ7CFwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPuTq9bJEGjjGYihKuUiUixjqVakMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvMS01T3Ixc2tRYU9NWmlLRXE1U0pTTEdPcFZxUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZmQvNzI2YmI0LTVkODctNDAyZC05MWNlLTU3MTJkOTVhZTYz
OC8xLzFEVHhhR0VDaDJ4aUZyenFLS1hsQXV3TmUycy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD6uVzAN
BgkqhkiG9w0BAQsFAAOCAQEAjmFoNqAn+I7huFp34I/iathagjonGEC+9gfD3MMp
RQKLrlA3okLmk6gzChtB8aDouTKoXZEgJ5AbGicXwfgy/94QoKmVsbz+S4MpNzts
EvW6M9CKOFm9XuFHkNJnVdzOg38VNGb9bnXkqtdUQH0sMTCSIJZa51HXP7HA0o4I
GLn/qd2brsxoiUCP2m2MLXBiP1xNTK67K+RHzChvMt81Q4nTViMxDQ/TCYmgjTwi
EuR92qjipTfVG2k5LDF6hMQIBfu9UxQ8lNUNYMtBX2XUMxwb+9CMaEIrtHabMzX4
DoWYidtSm6eF3Y66x2UbzbdnG/3XPjQU8urs1lvpbPoZ8g==
-----END CERTIFICATE-----
Generated at Mon May 27 21:29:42 2024 by rpki-client on console-ams.rpki-client.org