Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6cGmiq-XU3r52EzWgqGGQM1-Q7E.roa
File: 6cGmiq-XU3r52EzWgqGGQM1-Q7E.roa (raw, json)
Hash identifier: YqSi32Gt297FKb3sTKO5XNb/phCCVse64N8/BuoxjUg=
Subject key identifier: E9:C1:A6:8A:AF:97:53:7A:F9:D8:4C:D6:82:A1:86:40:CD:7E:43:B1
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018F905BC6A731F1D8A2AAA36C1917825A2A
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6cGmiq-XU3r52EzWgqGGQM1-Q7E.roa
Signing time: Sun 19 May 2024 10:18:04 +0000
ROA not before: Sun 19 May 2024 10:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 5.160.62.0/23 maxlen: 23
5.160.63.0/24 maxlen: 24
5.160.149.0/24 maxlen: 24
5.160.158.0/23 maxlen: 23
5.160.196.0/23 maxlen: 23
5.160.240.0/23 maxlen: 23
5.160.240.0/24 maxlen: 24
46.209.248.0/23 maxlen: 23
92.242.198.0/23 maxlen: 23
92.242.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:5b:c6:a7:31:f1:d8:a2:aa:a3:6c:19:17:82:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: May 19 10:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9c1a68aaf97537af9d84cd682a18640cd7e43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:52:de:e3:d7:7e:95:2d:80:be:da:40:83:
c5:4b:22:07:42:67:55:87:0d:bc:f2:51:e3:f9:e0:
5a:e9:61:6b:75:24:0c:da:6c:a7:9c:95:8d:1e:3a:
32:ad:5b:55:86:cb:31:62:fd:10:4f:41:ff:c8:ea:
c5:34:19:3f:8c:21:41:55:d3:26:78:de:ac:02:a6:
11:37:3c:7b:f5:b4:dd:11:e6:ad:72:0b:38:3e:14:
5a:2d:b6:32:ee:49:71:fb:81:f3:4a:0b:a1:2b:52:
d4:67:a2:3c:68:44:38:5e:51:b3:22:86:0f:68:ff:
d9:ff:4d:ff:28:91:c6:cb:2e:53:12:75:c6:79:c7:
96:6b:58:39:18:75:5a:3b:4d:9f:bf:23:a5:50:44:
06:bb:98:d9:e3:98:a0:a9:e5:07:3a:61:b2:33:d6:
60:cc:5c:07:87:af:47:39:bd:99:09:f9:19:e2:99:
42:de:85:9b:68:41:07:ad:bf:c2:b4:ea:d2:b5:f4:
c0:be:52:8c:c4:99:3f:05:6f:0f:79:3a:79:db:14:
8a:ce:5e:b8:64:f1:ec:ac:31:e1:00:ba:62:d4:55:
f4:8d:f5:d9:37:17:fe:32:6b:b8:aa:a3:9c:71:d9:
45:63:85:57:df:6a:ba:f8:69:47:f0:b9:6c:74:df:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:A6:8A:AF:97:53:7A:F9:D8:4C:D6:82:A1:86:40:CD:7E:43:B1
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/6cGmiq-XU3r52EzWgqGGQM1-Q7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.62.0/23
5.160.149.0/24
5.160.158.0/23
5.160.196.0/23
5.160.240.0/23
46.209.248.0/23
92.242.198.0/23
92.242.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:4d:60:4b:c0:43:09:94:01:12:24:e6:09:9f:c5:99:56:08:
99:5a:c0:d7:1f:6a:32:1a:41:27:b5:a0:a5:82:81:d0:c3:7b:
45:79:ac:f4:85:88:69:34:62:a8:d4:04:8b:bb:09:c9:e5:ab:
f7:75:82:06:92:1c:c6:c5:5b:2b:68:18:54:87:5c:fb:c9:0d:
59:20:1f:9e:95:f8:28:02:3f:da:fc:fc:ea:57:24:f5:05:b4:
19:7a:fe:48:56:34:60:9a:dc:4a:f0:33:f2:8f:99:be:25:40:
13:98:50:c6:1c:47:0f:14:27:56:a0:d1:69:f5:68:11:61:ff:
e1:6b:6c:7b:20:f0:73:99:76:91:55:53:af:e4:06:43:5e:33:
d5:1b:1f:ab:a6:f8:ed:a9:2e:14:fa:f5:f6:da:38:9d:4b:d3:
c7:79:7d:c7:8a:ae:10:5c:de:37:87:58:bd:63:64:87:a8:c8:
6b:71:c4:71:3c:db:3e:32:ce:4b:eb:71:11:af:b1:94:0f:cf:
4e:50:10:ac:bf:8d:97:d0:b9:ef:29:bc:8c:79:64:63:5d:69:
a1:05:70:b8:a6:8b:32:42:74:3e:f3:a9:dc:b0:01:7f:05:01:
12:03:67:15:25:88:8b:dd:da:d7:cd:08:7c:ea:fb:69:dc:c9:
a0:da:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:19:42 2024 by rpki-client on console-ams.rpki-client.org