Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/aiF5v3FbhmqIhVosGDWCO5vfhMU.roa
File: aiF5v3FbhmqIhVosGDWCO5vfhMU.roa (raw, json)
Hash identifier: 9EsD1TJx82veDOVViyPy7pYkmF9t1efG6ZBjqPIvujU=
Subject key identifier: 6A:21:79:BF:71:5B:86:6A:88:85:5A:2C:18:35:82:3B:9B:DF:84:C5
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 018CC7944A1210D3C5807EAFC8B384F4771F
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/aiF5v3FbhmqIhVosGDWCO5vfhMU.roa
Signing time: Tue 02 Jan 2024 00:30:33 +0000
ROA not before: Tue 02 Jan 2024 00:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209447
IP address blocks: 5.253.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4a:12:10:d3:c5:80:7e:af:c8:b3:84:f4:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Jan 2 00:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a2179bf715b866a88855a2c1835823b9bdf84c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:90:d7:b6:ff:00:d5:5f:5c:fc:c7:7d:45:ec:
5d:b6:ae:7e:57:57:d7:2e:da:d2:9e:d0:76:dd:41:
76:58:cc:9a:1c:6a:f8:a8:6a:e3:da:c1:5a:9c:07:
f8:e0:da:11:58:6d:d4:02:18:e6:0a:da:bd:0c:02:
70:61:fc:a6:28:24:07:3d:4d:91:61:31:64:25:95:
d2:a9:f4:ac:56:ff:3d:c1:de:9f:99:6f:2e:ac:e7:
b7:73:8a:0a:11:d5:54:b9:fd:7c:ee:7b:23:fa:3a:
5e:5e:76:17:ca:a3:62:94:a7:80:88:b5:37:af:d4:
3e:6a:c4:e7:e8:46:60:cd:25:0e:b6:ee:a0:ff:43:
f6:12:0c:4b:33:f6:5d:71:19:7b:fa:01:b8:a1:57:
10:75:25:49:74:e9:36:bb:94:a2:d9:95:ef:64:46:
0e:8b:ca:0c:84:3a:03:21:37:7d:6a:10:5f:d3:ad:
ff:34:b4:fc:1d:fa:82:b8:2c:36:ca:3e:97:89:eb:
78:22:20:e3:95:5f:f7:f9:8d:5f:6f:a0:cc:5b:2f:
66:22:ae:ba:81:ce:33:ba:ec:ae:38:b5:90:5e:75:
2f:ff:98:5a:78:4b:64:37:63:a8:75:ac:e7:63:45:
09:c4:9b:7d:d5:fa:f4:33:be:66:77:21:09:d0:ce:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:79:BF:71:5B:86:6A:88:85:5A:2C:18:35:82:3B:9B:DF:84:C5
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/aiF5v3FbhmqIhVosGDWCO5vfhMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.168.0/22
Signature Algorithm: sha256WithRSAEncryption
35:8f:b1:50:3e:5e:24:25:6d:34:df:56:ee:19:ee:71:b2:2e:
5a:0f:cf:cc:c7:09:b6:6e:f6:95:0a:fc:81:04:9b:d7:9b:e3:
17:c9:48:d0:d6:b0:6e:0a:59:44:f7:9e:82:a6:b4:58:ca:34:
e4:86:05:27:4a:74:f9:d8:dd:7b:bd:fa:b2:3c:6e:9b:94:81:
8a:6c:cf:a8:9b:12:a9:9c:e4:61:18:20:d3:fe:27:f3:85:aa:
c0:8e:fa:6f:30:77:9a:9d:f4:e1:41:f9:14:86:19:5d:91:9b:
87:cc:63:d1:96:13:fa:9a:10:31:60:1d:d1:f8:96:e2:e4:4a:
9e:2d:7a:81:6a:ed:5b:d7:b8:b4:57:89:a9:ea:a0:d0:4a:e4:
e8:10:c1:e4:92:33:04:bb:f4:00:11:be:14:90:d1:dc:2f:27:
26:83:09:f2:ba:5c:96:2d:7c:ab:66:45:21:53:db:23:a6:a9:
e2:cb:04:4f:a3:34:0b:13:dc:76:b9:21:63:2f:be:28:8f:b0:
7b:5d:2b:b0:ac:1a:c3:6a:86:45:44:da:8d:60:df:ac:d6:fd:
d5:d4:a2:9c:ad:e8:7f:60:48:db:2d:c7:8b:e4:90:0c:81:4e:
29:76:6b:f5:19:3c:00:42:0f:da:dc:97:63:5b:81:bc:d8:f7:
48:c1:89:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlEoSENPFgH6vyLOE9HcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3
Y2M2NzIwHhcNMjQwMTAyMDAzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTIxNzliZjcxNWI4NjZhODg4NTVhMmMxODM1ODIzYjliZGY4NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpDXtv8A1V9c/Md9Rexdtq5+V1fX
LtrSntB23UF2WMyaHGr4qGrj2sFanAf44NoRWG3UAhjmCtq9DAJwYfymKCQHPU2R
YTFkJZXSqfSsVv89wd6fmW8urOe3c4oKEdVUuf187nsj+jpeXnYXyqNilKeAiLU3
r9Q+asTn6EZgzSUOtu6g/0P2EgxLM/ZdcRl7+gG4oVcQdSVJdOk2u5Si2ZXvZEYO
i8oMhDoDITd9ahBf063/NLT8HfqCuCw2yj6Xiet4IiDjlV/3+Y1fb6DMWy9mIq66
gc4zuuyuOLWQXnUv/5haeEtkN2OodaznY0UJxJt91fr0M75mdyEJ0M7aJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGoheb9xW4ZqiIVaLBg1gjub34TFMB8GA1UdIwQY
MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt
MDAzYTE1NjhiZjNmLzEvYWlGNXYzRmJobXFJaFZvc0dEV0NPNXZmaE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm
LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf2oMA0G
CSqGSIb3DQEBCwUAA4IBAQA1j7FQPl4kJW0031buGe5xsi5aD8/Mxwm2bvaVCvyB
BJvXm+MXyUjQ1rBuCllE956CprRYyjTkhgUnSnT52N17vfqyPG6blIGKbM+omxKp
nORhGCDT/ifzharAjvpvMHeanfThQfkUhhldkZuHzGPRlhP6mhAxYB3R+Jbi5Eqe
LXqBau1b17i0V4mp6qDQSuToEMHkkjMEu/QAEb4UkNHcLycmgwnyulyWLXyrZkUh
U9sjpqniywRPozQLE9x2uSFjL74oj7B7XSuwrBrDaoZFRNqNYN+s1v3V1KKcreh/
YEjbLceL5JAMgU4pdmv1GTwAQg/a3JdjW4G82PdIwYkr
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:48:01 2024 by rpki-client on console-ams.rpki-client.org