Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Kn0eCmbisvQqbDQduMwjENEu6sg.roa
File: Kn0eCmbisvQqbDQduMwjENEu6sg.roa (raw, json)
Hash identifier: K6elA5ENq31sbbrAsJ1sdp2aMa9lt+ha/ccXpsyJ2wU=
Subject key identifier: 2A:7D:1E:0A:66:E2:B2:F4:2A:6C:34:1D:B8:CC:23:10:D1:2E:EA:C8
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018E383BC5DF3516232F5F506E02229C33AA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Kn0eCmbisvQqbDQduMwjENEu6sg.roa
Signing time: Wed 13 Mar 2024 14:33:45 +0000
ROA not before: Wed 13 Mar 2024 14:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 5.182.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:3b:c5:df:35:16:23:2f:5f:50:6e:02:22:9c:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Mar 13 14:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a7d1e0a66e2b2f42a6c341db8cc2310d12eeac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:40:02:cb:03:ed:9f:8a:e7:d0:fc:79:51:
db:00:31:5d:ee:8d:78:db:a1:bd:61:e0:8e:c2:48:
bd:3a:56:7f:22:07:0a:83:3b:06:bf:69:32:a3:9f:
5c:c0:c7:9b:f3:24:32:c9:64:5f:3a:0d:6f:07:02:
06:a6:95:03:c7:ac:d8:b2:57:15:5e:fd:04:c8:ec:
14:7b:be:94:45:a6:cc:ab:6c:22:ed:01:0b:a0:76:
57:81:64:68:05:e6:5a:49:6f:52:49:2b:ba:8d:71:
6e:82:e8:dd:1f:6b:68:ed:3a:eb:11:e0:a7:09:3b:
20:57:b5:db:77:07:0d:21:26:1c:a1:a9:7a:0b:dd:
b9:b6:04:44:32:d4:ed:0e:14:10:65:b2:dc:37:c6:
6f:21:fe:34:54:bc:61:a1:e6:66:f9:14:88:2d:b5:
cc:a8:8b:76:b1:2d:7c:1e:66:72:17:bf:ca:2f:e3:
66:09:5f:db:11:0c:a7:c1:36:6d:69:f9:45:02:71:
77:18:08:dc:9f:16:4e:38:58:cf:13:42:50:d4:a7:
62:3c:e7:c7:f0:e9:9f:85:d3:6a:ad:9e:0a:47:f5:
c8:e5:f3:78:db:7c:a7:52:19:9c:f3:68:9c:fa:76:
bc:98:46:a7:28:fc:77:30:9c:1d:fc:84:95:44:5c:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7D:1E:0A:66:E2:B2:F4:2A:6C:34:1D:B8:CC:23:10:D1:2E:EA:C8
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Kn0eCmbisvQqbDQduMwjENEu6sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8e:82:b3:b7:22:f4:a1:5d:ba:bc:09:82:45:a2:e0:9f:94:
92:80:08:d9:b8:66:26:fa:ea:39:7b:47:f5:50:b5:25:21:2f:
05:30:c8:e1:3a:ff:60:0a:f9:d2:df:d4:ac:6f:6c:55:58:0d:
99:c7:2a:e9:06:61:b4:c6:13:18:e9:2c:c1:a6:d5:4a:28:23:
cb:64:30:8e:af:f6:cb:72:8d:5f:0c:ca:af:ab:81:3a:cb:6d:
66:d5:eb:0f:c1:4f:de:28:b8:b5:39:de:3b:c4:12:28:24:ab:
de:4c:17:29:8c:be:30:2f:46:7d:d4:53:06:50:f7:0a:fe:71:
fd:88:bd:9e:9d:3b:c4:ec:a7:9d:eb:3b:08:cc:8e:b5:ec:16:
2c:24:48:89:3c:a3:1c:1f:c9:a1:d9:b6:8a:8c:8c:93:d1:3d:
98:8f:d5:2e:ff:75:d1:b3:60:cb:08:c3:38:48:f2:f7:17:d7:
cc:27:02:c3:e2:54:59:ec:65:e7:fd:c6:12:4b:3f:00:14:1a:
27:5f:44:0c:b5:17:75:d7:39:fe:41:38:66:90:db:2d:c6:5a:
ac:6c:b8:fc:09:17:c7:8d:a1:bd:d8:de:65:07:ce:00:d4:62:
35:ed:b8:21:51:c8:ae:47:cd:88:27:9c:90:00:37:60:86:42:
1c:ad:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 05:12:28 2024 by rpki-client on console-fra.rpki-client.org