Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/aJgJCPHUoKR3eiIZmKxJ_5IbI-U.roa
File: aJgJCPHUoKR3eiIZmKxJ_5IbI-U.roa (raw, json)
Hash identifier: OnvJMYyvDCGLqpPxJa1hQ8S57z9YRXH9d21w9Pn+7uQ=
Subject key identifier: 68:98:09:08:F1:D4:A0:A4:77:7A:22:19:98:AC:49:FF:92:1B:23:E5
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 018CC9BC42CA92A2C33BDD72A5425ED55452
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/aJgJCPHUoKR3eiIZmKxJ_5IbI-U.roa
Signing time: Tue 02 Jan 2024 10:33:27 +0000
ROA not before: Tue 02 Jan 2024 10:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210237
IP address blocks: 5.181.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:42:ca:92:a2:c3:3b:dd:72:a5:42:5e:d5:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Jan 2 10:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68980908f1d4a0a4777a221998ac49ff921b23e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:7e:38:c6:6d:f7:bf:96:16:59:7d:1a:c1:
e2:de:f9:ec:55:5e:74:58:05:44:76:b7:76:be:47:
f3:5e:4b:fa:86:f2:c3:b0:57:3d:d0:96:2e:27:6d:
f5:f3:0e:3c:cf:dd:91:7c:33:ff:7e:99:4c:a6:4a:
6b:a5:37:3f:68:d6:df:e6:02:d6:db:28:51:2a:20:
60:46:b8:0c:bd:25:61:b5:73:87:a7:3e:d0:d5:2d:
7e:2e:22:be:56:40:01:19:c6:0e:16:ff:17:98:a1:
1a:2f:d7:c3:e9:30:c9:f3:46:7f:df:c4:9b:3a:ac:
6d:38:c1:ed:8c:42:53:38:2a:f7:48:21:85:41:34:
12:e4:5b:00:63:7f:41:01:cd:81:a2:44:72:66:50:
c3:a6:66:e5:c5:51:9e:33:f8:49:46:c4:30:af:c4:
3f:c7:f8:1d:89:f1:4b:6a:7a:fb:21:61:54:e5:f0:
19:90:e3:25:8d:d5:55:fb:99:9b:24:27:7f:80:42:
ca:fb:8b:d2:34:47:1c:53:04:26:9f:f2:ca:67:75:
db:22:7b:d5:af:f6:80:84:1a:46:8b:23:80:dd:6c:
4c:0f:93:4c:94:09:29:28:53:7a:86:2a:51:5a:e3:
ff:a0:b2:74:28:bf:12:62:c1:e4:4f:ba:93:1c:7c:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:09:08:F1:D4:A0:A4:77:7A:22:19:98:AC:49:FF:92:1B:23:E5
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/aJgJCPHUoKR3eiIZmKxJ_5IbI-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.228.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b0:ed:a8:cf:1d:d4:b4:e3:87:6d:67:e3:3d:72:8a:38:b2:
26:7e:77:19:b7:6b:0c:84:ff:58:78:96:48:0d:36:ed:23:75:
e9:7d:3f:c8:1a:9e:e0:dc:c0:3a:d5:31:6a:0d:ca:79:ef:ae:
d9:2e:83:7e:ea:b2:b1:c2:59:8d:e8:31:5e:3a:92:25:fd:d5:
d8:cd:53:56:6b:c9:e3:9c:3e:18:60:73:ac:29:e6:93:22:d8:
b3:45:5c:dc:7d:0a:47:a6:12:50:6e:af:60:b1:83:78:10:98:
c8:90:6a:da:e1:76:44:44:65:6e:a2:64:8d:f8:46:c2:9b:c5:
5c:da:ea:56:30:a6:84:1c:87:4c:7e:93:a5:69:99:77:b1:3f:
31:4e:f2:ce:72:13:a9:0b:8a:e9:90:f8:3d:d5:ef:14:84:3b:
4f:04:95:25:ba:d3:77:a7:13:59:c8:3a:97:3f:bc:e1:ee:e1:
c2:00:48:3b:60:42:b5:8d:1c:cb:37:6d:ce:e3:08:66:3f:6d:
0e:1d:cd:f1:e3:62:b2:a7:a9:32:97:f1:56:dc:f5:a2:a3:ac:
90:16:28:2d:99:cf:ab:3f:f4:6a:4b:b1:35:e1:1a:73:67:08:
8e:79:e2:80:19:ff:24:db:a6:63:01:61:b5:3d:10:b0:6d:39:
72:e1:fc:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvELKkqLDO91ypUJe1VRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjQwMTAyMTAzMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODk4MDkwOGYxZDRhMGE0Nzc3YTIyMTk5OGFjNDlmZjkyMWIyM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhh+OMZt97+WFll9GsHi3vnsVV50
WAVEdrd2vkfzXkv6hvLDsFc90JYuJ2318w48z92RfDP/fplMpkprpTc/aNbf5gLW
2yhRKiBgRrgMvSVhtXOHpz7Q1S1+LiK+VkABGcYOFv8XmKEaL9fD6TDJ80Z/38Sb
OqxtOMHtjEJTOCr3SCGFQTQS5FsAY39BAc2BokRyZlDDpmblxVGeM/hJRsQwr8Q/
x/gdifFLanr7IWFU5fAZkOMljdVV+5mbJCd/gELK+4vSNEccUwQmn/LKZ3XbInvV
r/aAhBpGiyOA3WxMD5NMlAkpKFN6hipRWuP/oLJ0KL8SYsHkT7qTHHw/owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGiYCQjx1KCkd3oiGZisSf+SGyPlMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvYUpnSkNQSFVvS1IzZWlJWm1LeEpfNUliSS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbXkMA0G
CSqGSIb3DQEBCwUAA4IBAQBlsO2ozx3UtOOHbWfjPXKKOLImfncZt2sMhP9YeJZI
DTbtI3XpfT/IGp7g3MA61TFqDcp5767ZLoN+6rKxwlmN6DFeOpIl/dXYzVNWa8nj
nD4YYHOsKeaTItizRVzcfQpHphJQbq9gsYN4EJjIkGra4XZERGVuomSN+EbCm8Vc
2upWMKaEHIdMfpOlaZl3sT8xTvLOchOpC4rpkPg91e8UhDtPBJUlutN3pxNZyDqX
P7zh7uHCAEg7YEK1jRzLN23O4whmP20OHc3x42Kyp6kyl/FW3PWio6yQFigtmc+r
P/RqS7E14RpzZwiOeeKAGf8k26ZjAWG1PRCwbTly4fyD
-----END CERTIFICATE-----
Generated at Wed May 22 08:54:45 2024 by rpki-client on console-ams.rpki-client.org