Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/47ijAbX9BdfoIfPXD5-2hpB8SJ0.roa
File: 47ijAbX9BdfoIfPXD5-2hpB8SJ0.roa (raw, json)
Hash identifier: M/VtC5A//tmI3a1pFQtBHpGFeZXlbsbrlwOyP4IIahA=
Subject key identifier: E3:B8:A3:01:B5:FD:05:D7:E8:21:F3:D7:0F:9F:B6:86:90:7C:48:9D
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 018CC7943C06EA4AAFF85475608FE60F38A3
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/47ijAbX9BdfoIfPXD5-2hpB8SJ0.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206334
IP address blocks: 5.62.53.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3c:06:ea:4a:af:f8:54:75:60:8f:e6:0f:38:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3b8a301b5fd05d7e821f3d70f9fb686907c489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:39:27:59:e1:b2:ae:b2:43:04:ed:bb:ef:92:
0a:6f:aa:7f:08:28:fb:10:26:51:ba:d9:c4:77:d1:
02:c6:51:6a:f2:73:22:5f:a5:b7:1e:b7:0e:c0:2b:
8c:96:b4:e8:0e:2a:08:9a:dc:05:07:2d:6d:62:b9:
c3:b2:33:75:83:d8:ef:0b:0e:dd:d8:65:4b:f0:a3:
ed:eb:7a:90:78:1a:65:80:01:dd:4f:53:8f:2c:a8:
39:d7:2a:75:a2:b2:a8:5d:28:bd:47:3d:df:fd:de:
66:7d:f7:58:c0:ce:7c:51:67:fc:7f:c4:e5:9d:a1:
4a:31:21:91:54:1c:88:0b:4e:92:5f:ee:90:be:79:
3b:21:5d:93:7f:03:d1:db:95:54:35:52:0c:05:c7:
79:1b:35:0a:09:83:25:6e:e7:5a:89:3d:07:1f:72:
57:00:e5:1c:30:3d:c2:f4:7c:d6:ef:1a:3a:fb:b1:
07:6b:84:32:cf:e8:ca:eb:e4:ec:94:08:ff:a6:c4:
42:1b:4c:6d:8b:dd:26:f6:cb:e1:ed:a6:4f:33:54:
15:60:49:2e:ea:c1:19:39:8f:78:b3:2e:f3:bf:04:
4b:4d:0e:63:cf:dc:bd:ba:ed:db:7f:ea:0a:3b:82:
c0:bf:35:eb:73:82:dc:7c:05:4c:ef:5a:a4:33:32:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:A3:01:B5:FD:05:D7:E8:21:F3:D7:0F:9F:B6:86:90:7C:48:9D
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/47ijAbX9BdfoIfPXD5-2hpB8SJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.52.0-5.62.54.255
Signature Algorithm: sha256WithRSAEncryption
23:17:42:e9:e1:58:91:07:49:27:71:8c:a9:41:7b:c0:1b:ad:
4f:d2:ae:84:cb:86:40:a2:d0:37:25:96:5c:65:e8:bf:34:f2:
2b:c7:b6:bb:11:4f:4d:4f:10:64:ab:52:c5:eb:8e:4b:5f:76:
8c:f3:12:0b:1d:d0:0c:64:cb:fa:14:ad:41:3f:1a:20:55:86:
43:e8:91:f4:c2:e9:59:3d:83:5e:51:b8:a6:b6:ca:b5:4e:f2:
56:a7:c7:9a:a4:84:c6:80:88:ca:b1:00:7d:7e:5d:93:a6:52:
94:f3:ef:19:89:d7:bb:d4:ac:18:4c:1f:3f:90:a2:32:a2:db:
58:1d:20:69:ae:71:2d:0b:bc:c6:26:1d:f0:45:d1:88:af:3f:
dc:8a:39:3a:14:93:73:74:a8:20:a3:d5:58:42:5e:7f:ae:57:
e7:26:0f:cd:5e:60:49:af:09:a6:90:c9:42:2f:c7:6e:8f:f3:
e6:54:e7:0d:4b:5e:8b:51:b1:75:95:43:54:53:90:0e:39:5c:
c2:49:bb:b1:67:d0:46:7e:13:de:08:63:78:b8:b6:40:7c:a4:
5f:2a:01:41:30:32:96:e1:87:2b:7c:d0:ed:01:6d:41:a3:3e:
11:48:a5:b2:e1:d1:58:ae:0d:ee:ab:74:56:1a:b4:d4:57:87:
32:c0:b0:77
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHlDwG6kqv+FR1YI/mDzijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWI4ODVjM2IzMDJmZDUwZTZjMjI2NDdhMzNkYzQ3NzI3
ZmVhOTUwHhcNMjQwMTAyMDAzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2I4YTMwMWI1ZmQwNWQ3ZTgyMWYzZDcwZjlmYjY4NjkwN2M0ODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDknWeGyrrJDBO2775IKb6p/CCj7
ECZRutnEd9ECxlFq8nMiX6W3HrcOwCuMlrToDioImtwFBy1tYrnDsjN1g9jvCw7d
2GVL8KPt63qQeBplgAHdT1OPLKg51yp1orKoXSi9Rz3f/d5mffdYwM58UWf8f8Tl
naFKMSGRVByIC06SX+6Qvnk7IV2TfwPR25VUNVIMBcd5GzUKCYMlbudaiT0HH3JX
AOUcMD3C9HzW7xo6+7EHa4Qyz+jK6+TslAj/psRCG0xti90m9svh7aZPM1QVYEku
6sEZOY94sy7zvwRLTQ5jz9y9uu3bf+oKO4LAvzXrc4LcfAVM71qkMzLPHwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOO4owG1/QXX6CHz1w+ftoaQfEidMB8GA1UdIwQY
MBaAFHFbiFw7MC/VDmwiZHoz3Edyf+qVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYt
MmE5MjMzM2Y5ZGY2LzEvNDdpakFiWDlCZGZvSWZQWEQ1LTJocEI4U0owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYtMmE5MjMzM2Y5ZGY2
LzEvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFPjQD
BAAFPjYwDQYJKoZIhvcNAQELBQADggEBACMXQunhWJEHSSdxjKlBe8AbrU/SroTL
hkCi0Dclllxl6L808ivHtrsRT01PEGSrUsXrjktfdozzEgsd0Axky/oUrUE/GiBV
hkPokfTC6Vk9g15RuKa2yrVO8lanx5qkhMaAiMqxAH1+XZOmUpTz7xmJ17vUrBhM
Hz+QojKi21gdIGmucS0LvMYmHfBF0YivP9yKOToUk3N0qCCj1VhCXn+uV+cmD81e
YEmvCaaQyUIvx26P8+ZU5w1LXotRsXWVQ1RTkA45XMJJu7Fn0EZ+E94IY3i4tkB8
pF8qAUEwMpbhhyt80O0BbUGjPhFIpbLh0ViuDe6rdFYatNRXhzLAsHc=
-----END CERTIFICATE-----
Generated at Sat May 25 02:37:36 2024 by rpki-client on console-ams.rpki-client.org