Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/384QXO_T7Z4dy9HL__LJZd71BKs.roa
File: 384QXO_T7Z4dy9HL__LJZd71BKs.roa (raw, json)
Hash identifier: qUAPox822/BebXrtjxbEAREbsvL2zl9IeFX++8A2AxE=
Subject key identifier: DF:CE:10:5C:EF:D3:ED:9E:1D:CB:D1:CB:FF:F2:C9:65:DE:F5:04:AB
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E788E45106F17DF91FE6EE5F935A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/384QXO_T7Z4dy9HL__LJZd71BKs.roa
Signing time: Mon 01 Jan 2024 10:30:10 +0000
ROA not before: Mon 01 Jan 2024 10:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207381
IP address blocks: 5.160.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e7:88:e4:51:06:f1:7d:f9:1f:e6:ee:5f:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfce105cefd3ed9e1dcbd1cbfff2c965def504ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:76:c6:43:8f:95:ed:37:6d:96:f6:ce:c9:
7a:e4:34:3f:ad:a4:35:78:69:92:16:d1:57:11:35:
5f:01:85:15:65:0d:65:31:2a:fa:ad:c8:ef:13:17:
82:8e:87:4f:be:27:7c:72:3c:84:de:a9:0b:a0:1e:
b3:bb:15:c2:c8:39:be:74:ad:46:d2:f3:3d:de:34:
bb:11:a2:f9:3b:ff:a1:7d:04:3e:3d:45:34:43:73:
15:df:c2:8a:33:39:ac:a6:d9:10:13:99:19:b7:02:
64:8d:d9:37:69:b0:e7:f0:78:df:20:d7:5b:99:8f:
fa:3f:79:d9:4d:dd:5b:61:35:fe:e9:29:3b:cf:ae:
7e:f2:11:fd:c6:25:65:79:cd:0c:e7:f7:a3:67:29:
f8:70:a3:37:5f:ed:68:b9:db:17:a5:94:ae:69:b2:
f2:1d:8b:16:43:f6:b7:8b:5a:84:64:6d:54:e5:90:
b4:36:67:7a:17:aa:34:23:c8:7d:d6:f5:dc:e9:86:
47:9c:61:1d:d5:bd:5a:29:45:eb:e3:cb:29:da:02:
42:c8:f8:7c:12:5e:9e:d4:8b:5d:c4:b7:29:69:71:
e8:6c:c5:3e:bd:51:38:9b:c1:bb:75:11:89:be:9f:
bc:79:3f:5d:76:63:de:7b:b9:56:87:38:94:e2:90:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:10:5C:EF:D3:ED:9E:1D:CB:D1:CB:FF:F2:C9:65:DE:F5:04:AB
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/384QXO_T7Z4dy9HL__LJZd71BKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:24:69:75:26:b4:01:39:73:e9:7c:d0:dc:ba:36:0c:fb:f5:
12:53:b7:ed:8a:80:29:9a:a2:9f:a9:a9:78:29:59:76:f4:89:
20:5e:02:ff:1b:7e:88:c7:35:a0:59:6b:15:e0:c6:8e:a1:92:
68:ca:2a:e8:b5:8c:d9:c6:63:94:c3:6e:58:b4:23:43:c1:4a:
ac:ff:7e:ac:5d:bb:8c:d3:ba:5d:9b:b3:e3:de:cc:da:a9:c8:
4d:7c:87:23:fb:f2:6c:ed:b7:b1:01:ee:95:bb:d5:c9:0a:e6:
4a:c8:c2:58:9f:44:65:f1:a1:d8:28:2f:85:ca:97:9d:ad:43:
ad:c9:83:f7:33:c9:19:5c:b2:94:b7:2d:29:46:47:77:1d:ce:
30:f0:b1:8c:55:55:95:52:17:d5:9e:81:18:6d:59:58:69:8b:
cf:a6:77:84:30:0c:d9:50:e0:2d:9c:78:ed:bf:48:b1:c4:9f:
1b:e3:6e:d9:78:2c:52:e3:a9:28:5b:e0:15:d5:bf:02:69:dc:
23:75:87:e9:f2:fd:41:42:de:10:47:b2:15:3c:fc:4a:dc:b8:
3f:a9:b4:af:c7:27:a4:b2:3d:9b:8b:db:c8:e9:23:63:f7:58:
08:fe:cf:ec:6d:64:b6:c3:29:f0:d6:3f:77:1d:40:ba:07:d9:
c7:90:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:29 2024 by rpki-client on console-ams.rpki-client.org