Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/4riMgpMhOKG6iawRe8kx1uZaZKg.roa
File: 4riMgpMhOKG6iawRe8kx1uZaZKg.roa (raw, json)
Hash identifier: LO4eoKksBQQ/PfZ6/ICRgrMj+iGb9wILdMfFOXea5do=
Subject key identifier: E2:B8:8C:82:93:21:38:A1:BA:89:AC:11:7B:C9:31:D6:E6:5A:64:A8
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CC348C6EAB6E83E69725ACF81518B864F
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/4riMgpMhOKG6iawRe8kx1uZaZKg.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200370
IP address blocks: 5.202.224.0/24 maxlen: 24
5.202.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c6:ea:b6:e8:3e:69:72:5a:cf:81:51:8b:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2b88c82932138a1ba89ac117bc931d6e65a64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:5f:67:e7:f0:41:cc:5c:ee:51:33:a0:46:
34:80:a8:b5:d0:4b:3e:00:4f:fa:65:af:c4:96:c8:
ff:1c:fd:fd:24:de:cb:bf:42:67:74:8b:37:65:6c:
51:1e:22:8c:6b:9b:92:10:f5:a1:a8:cd:16:df:f3:
15:a0:f3:1c:1e:9d:0f:70:33:6c:14:dc:1f:f1:f4:
f7:0e:76:7f:46:0f:02:01:4f:f0:14:76:38:a4:a1:
b7:1c:0f:4a:cf:c3:fe:da:57:7a:04:f7:e2:ef:f9:
4a:11:d1:98:b9:94:0c:02:0d:10:cc:e2:60:77:9c:
25:1b:60:ea:03:3c:59:b5:e2:91:46:b6:f2:37:39:
7b:65:95:c8:b5:b9:67:e3:60:2b:b5:9d:a3:10:1d:
a9:2a:31:44:fc:ee:11:e9:79:47:d1:6e:41:17:98:
7e:0a:ed:80:78:d4:b8:54:26:5e:2e:8b:6d:88:8a:
73:b6:31:f7:f4:6b:59:ff:d6:b2:a2:1d:b7:61:45:
b9:b2:8f:79:c1:ef:e9:1c:96:dc:d8:17:3d:4a:fb:
d7:52:a3:02:78:6c:78:a7:76:b0:13:42:ec:ca:e8:
79:8f:1c:23:5a:3d:af:1b:fa:86:6a:a9:0d:42:1d:
33:a0:ed:c4:07:fb:d3:a3:a6:44:af:e4:53:ca:5c:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:8C:82:93:21:38:A1:BA:89:AC:11:7B:C9:31:D6:E6:5A:64:A8
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/4riMgpMhOKG6iawRe8kx1uZaZKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.224.0/23
Signature Algorithm: sha256WithRSAEncryption
97:c8:98:fb:8b:73:04:cf:ee:f5:03:bc:53:72:d4:a7:61:0d:
31:db:05:bd:32:bc:89:39:b2:5d:fd:ba:31:f3:30:f4:f0:9b:
a0:aa:96:e9:b3:7e:49:ce:8a:de:c1:c3:aa:e0:1c:ce:6d:df:
da:c6:9f:da:b7:d3:7b:ea:2c:65:c0:0b:93:fb:bf:5e:37:46:
59:5d:b6:69:70:dd:a0:1c:a9:77:f8:b9:b0:ed:0d:3f:26:de:
58:e3:08:c6:dc:c7:ea:fd:99:e0:89:16:fa:76:b6:2d:67:ac:
52:d6:fd:3e:a4:aa:fe:cf:30:9c:d6:b0:8c:4e:5f:a9:12:35:
28:5b:a5:0d:0f:74:59:17:e7:4c:28:42:d2:38:39:66:ed:50:
d3:b5:6e:9f:86:e8:7c:a4:41:2c:aa:51:41:4e:c3:68:7b:44:
b7:83:a0:5e:16:a4:47:a8:8c:b7:d0:ce:ef:08:0a:4f:0b:2c:
32:6b:4f:f0:68:09:97:70:67:fd:07:31:ce:75:a7:4f:d4:25:
6e:39:67:e5:a5:71:b9:c7:33:25:84:e3:eb:c1:22:65:fb:5e:
31:1c:78:db:d8:fb:34:94:c3:1f:76:a3:86:27:39:16:28:28:
02:ba:ee:cf:40:35:a9:fb:78:a7:3b:7f:4e:68:b2:4d:0a:fd:
4c:3f:0a:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSMbqtug+aXJaz4FRi4ZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjQwMTAxMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmI4OGM4MjkzMjEzOGExYmE4OWFjMTE3YmM5MzFkNmU2NWE2NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jxfZ+fwQcxc7lEzoEY0gKi10Es+
AE/6Za/Elsj/HP39JN7Lv0JndIs3ZWxRHiKMa5uSEPWhqM0W3/MVoPMcHp0PcDNs
FNwf8fT3DnZ/Rg8CAU/wFHY4pKG3HA9Kz8P+2ld6BPfi7/lKEdGYuZQMAg0QzOJg
d5wlG2DqAzxZteKRRrbyNzl7ZZXItbln42ArtZ2jEB2pKjFE/O4R6XlH0W5BF5h+
Cu2AeNS4VCZeLottiIpztjH39GtZ/9ayoh23YUW5so95we/pHJbc2Bc9SvvXUqMC
eGx4p3awE0Lsyuh5jxwjWj2vG/qGaqkNQh0zoO3EB/vTo6ZEr+RTylyEGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOK4jIKTITihuomsEXvJMdbmWmSoMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvNHJpTWdwTWhPS0c2aWF3UmU4a3gxdVphWktnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBcrgMA0G
CSqGSIb3DQEBCwUAA4IBAQCXyJj7i3MEz+71A7xTctSnYQ0x2wW9MryJObJd/box
8zD08Jugqpbps35JzorewcOq4BzObd/axp/at9N76ixlwAuT+79eN0ZZXbZpcN2g
HKl3+Lmw7Q0/Jt5Y4wjG3Mfq/ZngiRb6drYtZ6xS1v0+pKr+zzCc1rCMTl+pEjUo
W6UND3RZF+dMKELSODlm7VDTtW6fhuh8pEEsqlFBTsNoe0S3g6BeFqRHqIy30M7v
CApPCywya0/waAmXcGf9BzHOdadP1CVuOWflpXG5xzMlhOPrwSJl+14xHHjb2Ps0
lMMfdqOGJzkWKCgCuu7PQDWp+3inO39OaLJNCv1MPwrf
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:58:14 2024 by rpki-client on console-ams.rpki-client.org