Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5FaxRjRPqwe9MXkof7B735kXCVA.roa
File: 5FaxRjRPqwe9MXkof7B735kXCVA.roa (raw, json)
Hash identifier: FoiUvnAijkw4HSlu80+ihp4+tXnD4CIT0kxZ2sX0iqE=
Subject key identifier: E4:56:B1:46:34:4F:AB:07:BD:31:79:28:7F:B0:7B:DF:99:17:09:50
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D9FE369FC5A06657897D4268CDEB
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5FaxRjRPqwe9MXkof7B735kXCVA.roa
Signing time: Mon 01 Jan 2024 10:30:07 +0000
ROA not before: Mon 01 Jan 2024 10:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50855
IP address blocks: 5.160.198.0/24 maxlen: 24
5.160.154.0/24 maxlen: 24
5.160.154.0/23 maxlen: 23
5.160.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d9:fe:36:9f:c5:a0:66:57:89:7d:42:68:cd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e456b146344fab07bd3179287fb07bdf99170950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:16:04:77:1e:fb:27:c9:e3:56:db:5f:de:
48:fb:6c:bd:93:d2:99:85:a4:8f:7a:44:df:97:a4:
59:51:1e:ff:58:e4:8c:90:fa:16:12:2e:b6:d6:55:
66:8e:fa:8e:97:20:50:4d:09:2a:60:2a:45:51:32:
8d:25:a1:13:58:bd:7f:25:c3:ac:cb:f1:dd:06:26:
18:86:4c:90:d3:66:24:51:ac:5e:6a:5a:5c:a9:86:
2b:bd:cc:76:e8:d1:c1:94:ed:c2:5f:fa:6b:55:cb:
d5:85:30:e1:c0:e4:74:ae:90:ad:5d:59:76:2f:e9:
59:cd:0b:30:15:99:32:a4:af:e8:fe:19:4d:73:80:
bf:56:68:14:b8:cd:08:e7:0a:62:59:2b:65:3b:14:
3d:54:f8:6d:3f:c8:6c:0f:d2:a3:be:05:85:ae:57:
0b:32:64:82:5a:57:18:93:18:6c:af:5f:16:b5:c3:
70:78:e0:3a:8a:c5:2f:82:1a:06:80:20:c1:83:8e:
53:08:00:76:e2:4a:e8:3b:d7:e1:4f:37:7a:6e:f2:
91:a8:fc:f1:17:3c:5e:8d:82:cc:26:10:a3:c2:87:
75:be:bd:1c:97:0f:12:9c:da:4e:be:20:f2:e2:f0:
3c:85:b3:6c:2f:44:71:05:ba:0c:4e:00:48:e4:91:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:B1:46:34:4F:AB:07:BD:31:79:28:7F:B0:7B:DF:99:17:09:50
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/5FaxRjRPqwe9MXkof7B735kXCVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.154.0/23
5.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bd:ff:66:a4:87:0f:ca:d9:6e:f9:0a:d3:64:a0:21:bb:35:
68:d0:45:7b:1e:c9:9f:8c:23:01:7d:b2:8e:73:ea:57:5f:3a:
ce:e5:9e:c9:a3:85:69:f9:d4:72:20:7d:9e:86:76:e6:76:80:
0a:26:cc:29:d6:e0:c2:75:60:e9:26:73:32:a9:88:a8:d8:b3:
eb:5d:f4:16:50:22:06:b4:bb:dd:ec:3d:15:79:e1:ca:d8:9c:
c0:71:2e:7e:16:75:bc:63:3d:18:72:53:1d:4a:c0:20:2c:38:
fb:3d:dc:62:9c:0c:38:43:ca:d1:6f:05:3d:0c:bb:5c:06:6d:
63:f1:fa:5d:de:a1:9f:66:77:c9:f4:33:65:b2:e6:2b:8a:e1:
4b:8c:e5:1c:1f:43:c6:86:6e:58:36:b6:d0:e5:75:48:c0:4a:
79:a4:f2:09:43:77:56:4a:2a:58:f6:ac:ac:a3:b1:c2:15:cd:
a5:4a:86:8c:dd:83:dc:b7:c7:b3:f7:d1:af:95:c3:85:4b:12:
9a:07:fb:e5:3d:f8:dc:47:5b:34:f1:90:8e:2a:08:3c:88:03:
03:fe:ea:b8:81:e2:92:d1:1f:13:ad:ee:ce:d4:57:65:8e:b9:
f5:d2:f9:dc:61:6e:69:7e:9d:b4:53:92:d1:20:f6:d1:84:c5:
6d:c2:64:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEktn+Np/FoGZXiX1CaM3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQwMTAxMTAzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDU2YjE0NjM0NGZhYjA3YmQzMTc5Mjg3ZmIwN2JkZjk5MTcwOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl4WBHce+yfJ41bbX95I+2y9k9KZ
haSPekTfl6RZUR7/WOSMkPoWEi621lVmjvqOlyBQTQkqYCpFUTKNJaETWL1/JcOs
y/HdBiYYhkyQ02YkUaxealpcqYYrvcx26NHBlO3CX/prVcvVhTDhwOR0rpCtXVl2
L+lZzQswFZkypK/o/hlNc4C/VmgUuM0I5wpiWStlOxQ9VPhtP8hsD9KjvgWFrlcL
MmSCWlcYkxhsr18WtcNweOA6isUvghoGgCDBg45TCAB24kroO9fhTzd6bvKRqPzx
FzxejYLMJhCjwod1vr0clw8SnNpOviDy4vA8hbNsL0RxBboMTgBI5JHHSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFORWsUY0T6sHvTF5KH+we9+ZFwlQMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvNUZheFJqUlBxd2U5TVhrb2Y3QjczNWtYQ1ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBaCaAwQA
BaDGMA0GCSqGSIb3DQEBCwUAA4IBAQATvf9mpIcPytlu+QrTZKAhuzVo0EV7Hsmf
jCMBfbKOc+pXXzrO5Z7Jo4Vp+dRyIH2ehnbmdoAKJswp1uDCdWDpJnMyqYio2LPr
XfQWUCIGtLvd7D0VeeHK2JzAcS5+FnW8Yz0YclMdSsAgLDj7PdxinAw4Q8rRbwU9
DLtcBm1j8fpd3qGfZnfJ9DNlsuYriuFLjOUcH0PGhm5YNrbQ5XVIwEp5pPIJQ3dW
SipY9qyso7HCFc2lSoaM3YPct8ez99GvlcOFSxKaB/vlPfjcR1s08ZCOKgg8iAMD
/uq4geKS0R8Tre7O1Fdljrn10vncYW5pfp20U5LRIPbRhMVtwmTR
-----END CERTIFICATE-----
Generated at Sat Jun 1 22:13:08 2024 by rpki-client on console-fra.rpki-client.org