Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/IbI07LQ22nbhua3zdt6Hs0h6JHw.roa
File: IbI07LQ22nbhua3zdt6Hs0h6JHw.roa (raw, json)
Hash identifier: YftXpyfcnPKIfW1q7D3R5EZVbXQ65XG0/ZlZCZDnYP4=
Subject key identifier: 21:B2:34:EC:B4:36:DA:76:E1:B9:AD:F3:76:DE:87:B3:48:7A:24:7C
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 018CC6B79FAE156DDCF49769BCAF72E5A7B7
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/IbI07LQ22nbhua3zdt6Hs0h6JHw.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50923
IP address blocks: 5.129.232.0/21 maxlen: 21
5.129.240.0/20 maxlen: 20
5.129.240.0/21 maxlen: 21
5.129.248.0/21 maxlen: 21
5.129.192.0/19 maxlen: 19
5.129.192.0/21 maxlen: 21
5.129.192.0/20 maxlen: 20
5.129.200.0/21 maxlen: 21
5.129.208.0/21 maxlen: 21
5.129.208.0/20 maxlen: 20
5.129.216.0/21 maxlen: 21
5.129.0.0/16 maxlen: 16
5.129.224.0/21 maxlen: 21
5.129.224.0/20 maxlen: 20
5.129.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9f:ae:15:6d:dc:f4:97:69:bc:af:72:e5:a7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b234ecb436da76e1b9adf376de87b3487a247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:08:f8:b2:5b:4e:b3:33:7b:fa:1f:37:8a:
45:48:27:72:59:26:e2:9c:da:5a:c5:47:5f:35:23:
e4:aa:ef:d1:2e:72:df:93:bb:cc:ae:f3:9e:37:e8:
2a:e1:0f:50:12:03:9a:c7:a5:70:99:12:4d:08:17:
1e:cc:77:62:ef:94:4a:ba:e9:4c:53:6f:3c:6d:ba:
34:cd:c0:b3:f6:b0:5e:b0:3c:b5:cd:45:e1:c7:f7:
4c:0a:c3:b7:a5:ea:5d:43:c7:b6:e4:18:f3:f4:d4:
b0:ef:5c:ea:14:42:53:77:76:5e:b7:69:8c:1b:0c:
e9:43:db:ac:11:f0:34:3b:fe:a2:6e:a1:e3:39:a8:
2d:37:9c:a2:f1:2f:62:00:67:19:bc:7a:ec:b4:de:
08:e3:f6:52:fa:74:0a:51:ae:5f:c7:d5:31:73:24:
8e:54:06:93:8f:83:e6:05:54:9d:6b:93:95:27:c9:
e0:e7:19:8a:e0:72:28:c1:88:06:6b:cf:8e:b6:5b:
1a:72:8d:8f:d4:eb:ca:3b:d8:98:d1:0a:86:cf:d6:
8c:3f:50:e3:83:d1:dd:cc:a1:06:ae:66:e7:ae:e7:
71:ed:95:cb:fe:b8:ed:73:f9:98:86:c7:1d:77:03:
19:4d:69:b3:96:20:b4:a8:71:99:77:e8:02:ec:3c:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:34:EC:B4:36:DA:76:E1:B9:AD:F3:76:DE:87:B3:48:7A:24:7C
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/IbI07LQ22nbhua3zdt6Hs0h6JHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:f1:65:40:05:a6:8b:57:d3:19:3f:16:7a:95:09:6c:4a:e3:
6c:16:d0:d6:d2:6a:b0:38:06:4a:1c:c3:6b:e2:62:09:67:ce:
ab:85:6d:25:0d:f4:92:c7:3b:66:73:a2:22:86:ae:39:08:83:
71:e8:f2:5a:ea:17:e6:4f:09:67:2a:ce:4d:e1:cb:23:93:cb:
c8:6b:c3:c0:99:65:31:b4:6e:66:42:5e:e5:fc:3a:c0:66:d8:
9b:b8:73:b0:e1:f7:ca:2e:3b:f1:48:89:e8:d9:e8:e1:57:e6:
0c:ec:93:af:56:d2:b9:a4:c8:d5:ef:13:e7:10:b8:56:6b:87:
c3:02:94:8a:4d:1f:69:1d:3e:55:33:62:34:08:bd:73:50:05:
43:f1:38:a4:61:17:6c:9c:f2:04:8f:22:5d:b6:d0:c7:8f:28:
e2:c2:c5:ae:61:5a:a1:08:8a:b5:55:ab:a5:a2:b6:52:e2:fe:
d6:23:c3:22:a4:6a:33:25:31:a2:ee:19:cf:3e:d9:d3:50:94:
74:8e:46:12:2c:2d:f7:b3:73:84:71:4f:7e:e3:a0:44:22:96:
37:de:a6:f4:bf:8f:2b:7b:a7:bd:f8:f2:2a:eb:c1:2b:30:1e:
61:1c:f1:f3:87:42:73:6a:8f:77:ca:af:e7:19:f3:c0:45:f0:
6d:5b:4f:af
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYzGt5+uFW3c9JdpvK9y5ae3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGIzZGNkZjVlNmJlZTA5ODI1YzM3YmYzYjhiZGYyOGI2
ZmI1OTMwHhcNMjQwMTAxMjAyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWIyMzRlY2I0MzZkYTc2ZTFiOWFkZjM3NmRlODdiMzQ4N2EyNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/EI+LJbTrMze/ofN4pFSCdyWSbi
nNpaxUdfNSPkqu/RLnLfk7vMrvOeN+gq4Q9QEgOax6VwmRJNCBcezHdi75RKuulM
U288bbo0zcCz9rBesDy1zUXhx/dMCsO3pepdQ8e25Bjz9NSw71zqFEJTd3Zet2mM
GwzpQ9usEfA0O/6ibqHjOagtN5yi8S9iAGcZvHrstN4I4/ZS+nQKUa5fx9UxcySO
VAaTj4PmBVSda5OVJ8ng5xmK4HIowYgGa8+Otlsaco2P1OvKO9iY0QqGz9aMP1Dj
g9HdzKEGrmbnrudx7ZXL/rjtc/mYhscddwMZTWmzliC0qHGZd+gC7DzJzQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCGyNOy0Ntp24bmt83beh7NIeiR8MB8GA1UdIwQY
MBaAFE3bPc315r7gmCXDe/O4vfKLb7WTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEt
MjE3MGM1YzFkM2VkLzEvSWJJMDdMUTIybmJodWEzemR0NkhzMGg2Skh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83OTBjZWUtZDU0ZS00NTk4LThiYzEtMjE3MGM1YzFkM2Vk
LzEvVGRzOXpmWG12dUNZSmNONzg3aTk4b3R2dFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMABYEwDQYJ
KoZIhvcNAQELBQADggEBAJfxZUAFpotX0xk/FnqVCWxK42wW0NbSarA4Bkocw2vi
YglnzquFbSUN9JLHO2ZzoiKGrjkIg3Ho8lrqF+ZPCWcqzk3hyyOTy8hrw8CZZTG0
bmZCXuX8OsBm2Ju4c7Dh98ouO/FIiejZ6OFX5gzsk69W0rmkyNXvE+cQuFZrh8MC
lIpNH2kdPlUzYjQIvXNQBUPxOKRhF2yc8gSPIl220MePKOLCxa5hWqEIirVVq6Wi
tlLi/tYjwyKkajMlMaLuGc8+2dNQlHSORhIsLfezc4RxT37joEQiljfepvS/jyt7
p7348irrwSswHmEc8fOHQnNqj3fKr+cZ88BF8G1bT68=
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:25:59 2024 by rpki-client on console-fra.rpki-client.org