Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa
File: 5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa (raw, json)
Hash identifier: 2NGAlI2hdHDlD8sS8ypuBUMUFfaks46LhBx0UYSSPaA=
Subject key identifier: E7:37:3E:0A:B6:F9:6A:80:A7:64:98:16:F0:52:D2:29:97:72:BE:64
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019424448E6E61B34932FAB49E710B5F9CC7
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 45.157.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8e:6e:61:b3:49:32:fa:b4:9e:71:0b:5f:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7373e0ab6f96a80a7649816f052d2299772be64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:34:dc:91:b9:91:aa:ce:98:a6:b1:02:f1:
5c:fe:21:4b:f6:63:54:82:61:82:2c:32:6d:13:e5:
80:db:5f:53:79:5c:49:de:2b:0c:22:bc:23:5d:63:
1d:4c:f2:ac:51:0c:f5:5c:fb:39:25:ee:57:20:33:
86:00:f0:c5:bd:51:59:65:f5:c9:d5:c6:6c:62:46:
64:66:17:89:a2:25:b2:27:37:74:de:e0:83:de:76:
7b:d2:09:e5:79:f1:50:96:0b:a1:6d:e3:aa:8e:a4:
d2:16:b5:d0:15:88:e6:a9:42:93:6d:62:79:c0:5b:
af:78:0c:68:9f:b2:d0:9c:bb:76:7e:3e:e3:82:4f:
da:3d:45:8c:0f:ea:30:1d:2b:30:7f:8d:4c:bb:77:
b5:68:56:ff:7a:ee:a6:1a:34:89:9b:12:d1:c8:f0:
4e:95:38:77:49:08:42:3e:f4:3b:5f:52:8f:ef:ec:
c8:74:f8:d5:bc:2b:13:15:1d:21:1c:46:5e:94:7d:
16:df:e6:39:f1:e1:90:f5:90:b1:44:ba:90:96:49:
3c:b7:a3:71:1a:52:f9:f5:90:6c:e0:34:fe:5b:cf:
60:fb:68:d5:79:fc:e9:99:71:58:f1:ce:14:52:33:
e3:2b:59:87:b7:73:7e:a4:72:a3:21:6b:22:fd:00:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:3E:0A:B6:F9:6A:80:A7:64:98:16:F0:52:D2:29:97:72:BE:64
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:76:e5:dc:fe:a9:0d:9a:df:09:a2:e9:b3:9a:4d:40:98:0a:
b7:dc:3c:f7:81:74:0c:e0:c8:5a:91:98:9d:99:8d:44:2d:55:
50:78:c5:0e:9d:d1:10:7c:d4:86:0f:2c:68:87:12:f1:f8:8c:
c1:c8:17:1f:26:77:29:d7:1e:64:dc:7d:41:e3:1b:0d:9d:f7:
26:8d:74:18:ab:f9:a8:9c:20:f2:66:a5:39:74:54:5c:8f:0c:
4c:98:9c:21:6c:76:10:0b:ca:9c:3d:e0:7d:08:99:b8:c3:6d:
ca:a6:db:62:2c:ba:3d:8e:69:d7:56:09:80:53:f7:2b:fb:a5:
29:dc:2f:1b:99:ea:50:9a:d3:6d:11:92:40:bc:fb:54:36:24:
7a:01:48:c7:62:6a:47:ae:37:9b:98:b4:e8:77:5b:12:96:e1:
86:b9:08:fa:a8:a1:3e:04:ff:80:fc:ea:7e:e3:5c:4e:ec:1a:
8c:8e:14:1b:89:e0:e8:30:38:6e:05:16:0b:ca:5d:cf:bd:6f:
e0:55:39:03:6c:2a:2b:d7:1a:37:50:61:23:a7:31:5f:fe:e5:
02:21:76:f9:79:6b:3f:bb:17:af:80:d2:22:f3:4e:26:23:46:
50:6e:71:40:77:15:ab:0e:a6:1e:2f:8b:22:5a:6f:b3:a2:2c:
ae:e7:63:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRI5uYbNJMvq0nnELX5zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUwMTAxMjM0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzM3M2UwYWI2Zjk2YTgwYTc2NDk4MTZmMDUyZDIyOTk3NzJiZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6U03JG5karOmKaxAvFc/iFL9mNU
gmGCLDJtE+WA219TeVxJ3isMIrwjXWMdTPKsUQz1XPs5Je5XIDOGAPDFvVFZZfXJ
1cZsYkZkZheJoiWyJzd03uCD3nZ70gnlefFQlguhbeOqjqTSFrXQFYjmqUKTbWJ5
wFuveAxon7LQnLt2fj7jgk/aPUWMD+owHSswf41Mu3e1aFb/eu6mGjSJmxLRyPBO
lTh3SQhCPvQ7X1KP7+zIdPjVvCsTFR0hHEZelH0W3+Y58eGQ9ZCxRLqQlkk8t6Nx
GlL59ZBs4DT+W89g+2jVefzpmXFY8c4UUjPjK1mHt3N+pHKjIWsi/QD27QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOc3Pgq2+WqAp2SYFvBS0imXcr5kMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvNXpjLUNyYjVhb0NuWkpnVzhGTFNLWmR5dm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ2eMA0G
CSqGSIb3DQEBCwUAA4IBAQBOduXc/qkNmt8Joumzmk1AmAq33Dz3gXQM4MhakZid
mY1ELVVQeMUOndEQfNSGDyxohxLx+IzByBcfJncp1x5k3H1B4xsNnfcmjXQYq/mo
nCDyZqU5dFRcjwxMmJwhbHYQC8qcPeB9CJm4w23KpttiLLo9jmnXVgmAU/cr+6Up
3C8bmepQmtNtEZJAvPtUNiR6AUjHYmpHrjebmLTod1sSluGGuQj6qKE+BP+A/Op+
41xO7BqMjhQbieDoMDhuBRYLyl3PvW/gVTkDbCor1xo3UGEjpzFf/uUCIXb5eWs/
uxevgNIi804mI0ZQbnFAdxWrDqYeL4siWm+zoiyu52Mx
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:06 2025 by rpki-client