Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/dSVTBdI48q7-Y6vAqRzrh4ttzVw.roa
File: dSVTBdI48q7-Y6vAqRzrh4ttzVw.roa (raw, json)
Hash identifier: dJsM9LK94Ig45imn0RS4Hubj9G88qXg4VPmSGz8ljr8=
Subject key identifier: 75:25:53:05:D2:38:F2:AE:FE:63:AB:C0:A9:1C:EB:87:8B:6D:CD:5C
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 018CC72659253398EDABE335561D931BF9AE
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/dSVTBdI48q7-Y6vAqRzrh4ttzVw.roa
Signing time: Mon 01 Jan 2024 22:30:28 +0000
ROA not before: Mon 01 Jan 2024 22:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206459
IP address blocks: 5.181.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:59:25:33:98:ed:ab:e3:35:56:1d:93:1b:f9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jan 1 22:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75255305d238f2aefe63abc0a91ceb878b6dcd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:36:06:86:ea:c2:37:37:46:42:b7:c9:94:
9b:88:79:3f:48:46:5a:63:5d:e0:76:b2:a3:e4:c4:
33:aa:75:62:71:25:e3:f6:64:26:e5:8e:42:7a:7c:
cf:be:ed:12:96:17:eb:eb:86:25:e1:3c:d8:1c:ed:
8d:91:37:e3:73:48:53:dd:a1:19:d8:bb:d5:1c:5e:
5e:62:ab:df:08:3d:b3:d4:3d:c0:e3:ff:0c:a6:21:
a8:23:1b:ae:ee:75:49:d2:4d:64:28:b6:7d:0f:9f:
3e:98:0b:85:aa:86:55:f3:ff:65:2b:77:85:e4:0a:
20:6c:b6:73:d3:e1:31:3a:ee:aa:5c:70:23:c4:16:
9a:b8:d0:93:79:35:61:da:4b:ca:51:3c:0f:2a:11:
37:bc:8a:ac:54:c8:00:f0:ff:39:19:2d:a5:f7:9a:
67:dd:da:78:e6:fb:cf:24:aa:1f:0f:2d:28:1a:c1:
1b:44:a7:6c:52:0a:14:a4:18:4b:91:f4:96:99:88:
58:84:9b:d5:ec:bd:c9:d4:70:c6:8e:be:2b:36:e6:
87:52:a8:d5:27:eb:77:89:be:ab:2d:1b:e4:d8:7d:
59:4c:cb:ef:97:0d:81:a3:c9:33:c6:4b:75:d5:48:
18:f6:ce:b0:5a:b8:9c:d5:bf:c1:53:bb:14:d2:cd:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:53:05:D2:38:F2:AE:FE:63:AB:C0:A9:1C:EB:87:8B:6D:CD:5C
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/dSVTBdI48q7-Y6vAqRzrh4ttzVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:15:f2:47:75:bf:36:04:d4:31:bf:0a:a7:9d:02:93:1d:89:
d3:63:76:dd:d3:c6:a7:20:fb:bc:96:26:d8:af:e3:34:55:b8:
09:b6:33:cc:8e:0b:1f:b6:9a:b3:bf:8a:da:7a:16:da:29:36:
21:ac:73:18:8e:38:09:aa:62:42:dd:f7:57:73:65:b8:77:11:
d0:41:45:5f:d5:26:67:fd:4f:d7:89:f3:f4:2a:bc:4b:a1:13:
44:c3:58:d1:11:ab:6e:d5:69:bd:b8:05:7f:fc:79:d1:17:9e:
b8:a6:8a:b5:43:11:8a:18:a4:88:31:32:98:12:c2:f5:22:18:
07:be:65:88:0d:18:14:ed:5d:87:1f:37:91:92:99:2d:c1:ec:
26:cd:c6:ed:b9:a1:aa:9b:63:1a:31:16:20:41:fb:11:9d:3a:
ac:10:9f:0d:4a:20:5c:7d:d7:13:fc:92:11:02:c0:aa:ee:f0:
69:1d:a9:d7:8f:2a:38:b5:84:47:76:ae:65:a3:1e:b4:c1:63:
32:6a:07:12:2b:ee:87:71:01:c8:e0:54:54:af:e6:0e:eb:87:
e6:06:06:8b:0e:21:86:ee:af:6a:87:7a:f0:c7:03:c8:7c:75:
41:80:dc:9e:4d:75:46:5a:13:39:cb:04:fc:5b:51:98:3b:11:
a5:57:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:05:54 2024 by rpki-client on console-fra.rpki-client.org