Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Ai5dkUXCzgcPoO95JogZnbilz_I.roa
File: Ai5dkUXCzgcPoO95JogZnbilz_I.roa (raw, json)
Hash identifier: WtthV4dxJTvmg4/4IyCeneRzhnq3X0FKu8AwWAiuN7E=
Subject key identifier: 02:2E:5D:91:45:C2:CE:07:0F:A0:EF:79:26:88:19:9D:B8:A5:CF:F2
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC493373A3CC58F658487D1647474490B
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Ai5dkUXCzgcPoO95JogZnbilz_I.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47721
IP address blocks: 167.160.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:37:3a:3c:c5:8f:65:84:87:d1:64:74:74:49:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=022e5d9145c2ce070fa0ef792688199db8a5cff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:0e:2c:2a:50:9c:82:ec:27:a7:4b:c9:ee:
86:4c:c8:43:3e:f8:16:a8:04:37:ef:a2:b7:63:2b:
6f:d3:2b:cf:c8:10:ab:40:b7:cb:df:e5:54:d4:fb:
c8:c7:78:ee:9f:42:36:2c:82:5f:38:8b:84:03:02:
71:75:e7:55:5c:34:24:5a:c9:71:77:7c:a0:5e:78:
82:fb:48:d2:b8:1d:22:e8:a5:d0:24:d6:c9:98:0b:
cc:cc:b5:1c:56:b6:72:cf:8a:0a:73:78:87:74:e2:
84:06:2c:25:48:4a:5e:c8:84:7e:07:84:a6:9f:52:
74:97:66:50:ad:14:20:f1:3d:66:68:9b:53:8c:1f:
c9:36:1e:c7:4b:c5:cc:50:a3:55:86:18:5c:b7:83:
52:28:44:b4:85:07:17:a8:75:32:b4:4d:50:21:e9:
62:b7:33:fd:cd:69:dc:2a:50:08:a3:51:0e:e0:35:
3e:1c:03:c2:29:a5:de:6c:31:8c:7f:f7:22:ee:e1:
93:b7:90:ea:53:a4:70:2e:f3:cc:58:e7:fa:56:a5:
3b:5c:98:55:29:d2:82:8b:cb:e6:f1:e3:16:bc:34:
cf:af:74:f6:cf:b5:4a:41:36:34:10:d9:07:82:81:
12:02:6f:aa:5a:f6:97:ba:57:8b:da:bb:54:40:ce:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:5D:91:45:C2:CE:07:0F:A0:EF:79:26:88:19:9D:B8:A5:CF:F2
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/Ai5dkUXCzgcPoO95JogZnbilz_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:57:63:1f:69:35:cf:f8:7b:d1:0d:e9:89:7b:ab:a7:cc:
c7:89:5f:ae:b1:42:44:9f:9c:58:ad:07:7d:3a:d6:65:2a:7e:
c7:52:a6:2c:67:02:24:33:89:98:73:87:b7:99:35:09:ab:9f:
fe:f9:6d:a8:d8:3a:fb:0c:f4:52:09:ce:bf:66:0d:93:a0:60:
6a:06:30:04:b7:19:f3:b0:c7:bd:78:26:18:dd:55:f9:c6:b4:
dd:9f:d2:13:46:80:c1:3d:6d:58:67:02:25:56:10:40:54:8b:
80:2f:88:e1:f6:54:b6:69:75:2b:b4:0a:53:9f:c4:82:7d:a1:
18:08:e1:50:de:30:f8:cc:9e:e4:32:75:c2:23:84:d3:0b:69:
68:18:3e:b8:e2:21:62:d7:f3:4c:73:35:d4:80:15:10:d9:e5:
3b:5c:83:db:66:17:81:35:42:69:dd:ca:4c:bc:c5:de:23:85:
e1:7f:f0:2c:d8:85:81:78:e9:75:6a:60:be:8c:c6:89:3d:a9:
e8:96:90:4a:44:d1:e4:0e:6b:1c:3e:42:87:65:3c:0d:b8:b6:
65:8c:99:42:a5:dd:78:ff:3c:d6:7c:78:19:ae:dc:0b:ee:81:
80:b2:7d:88:58:25:5d:9a:0e:2c:fb:4a:b2:7f:5a:34:bc:72:
b2:81:c6:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkzc6PMWPZYSH0WR0dEkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMjRkZWZiYWFkZTkzZTk5OGUxM2E5NDIwMjlkZDU5M2I4
YjJlYTMwHhcNMjQwMTAxMTAzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjJlNWQ5MTQ1YzJjZTA3MGZhMGVmNzkyNjg4MTk5ZGI4YTVjZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQUOLCpQnILsJ6dLye6GTMhDPvgW
qAQ376K3Yytv0yvPyBCrQLfL3+VU1PvIx3jun0I2LIJfOIuEAwJxdedVXDQkWslx
d3ygXniC+0jSuB0i6KXQJNbJmAvMzLUcVrZyz4oKc3iHdOKEBiwlSEpeyIR+B4Sm
n1J0l2ZQrRQg8T1maJtTjB/JNh7HS8XMUKNVhhhct4NSKES0hQcXqHUytE1QIeli
tzP9zWncKlAIo1EO4DU+HAPCKaXebDGMf/ci7uGTt5DqU6RwLvPMWOf6VqU7XJhV
KdKCi8vm8eMWvDTPr3T2z7VKQTY0ENkHgoESAm+qWvaXuleL2rtUQM6w2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIuXZFFws4HD6DveSaIGZ24pc/yMB8GA1UdIwQY
MBaAFFMk3vuq3pPpmOE6lCAp3Vk7iy6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2Qt
MzNiNzQ1OTk3NWUwLzEvQWk1ZGtVWEN6Z2NQb085NUpvZ1puYmlsel9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTRlODQtY2ZjNS00NWE0LWE1Y2QtMzNiNzQ1OTk3NWUw
LzEvVXlUZS02cmVrLW1ZNFRxVUlDbmRXVHVMTHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp6AKMA0G
CSqGSIb3DQEBCwUAA4IBAQBPsVdjH2k1z/h70Q3piXurp8zHiV+usUJEn5xYrQd9
OtZlKn7HUqYsZwIkM4mYc4e3mTUJq5/++W2o2Dr7DPRSCc6/Zg2ToGBqBjAEtxnz
sMe9eCYY3VX5xrTdn9ITRoDBPW1YZwIlVhBAVIuAL4jh9lS2aXUrtApTn8SCfaEY
COFQ3jD4zJ7kMnXCI4TTC2loGD644iFi1/NMczXUgBUQ2eU7XIPbZheBNUJp3cpM
vMXeI4Xhf/As2IWBeOl1amC+jMaJPanolpBKRNHkDmscPkKHZTwNuLZljJlCpd14
/zzWfHgZrtwL7oGAsn2IWCVdmg4s+0qyf1o0vHKygcbZ
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:10 2024 by rpki-client on console-ams.rpki-client.org