Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8D-tmpunnR0Eq477yGsNmLuhvWw.roa
File: 8D-tmpunnR0Eq477yGsNmLuhvWw.roa (raw, json)
Hash identifier: bD9vLbk+sRITAbX0UmQdfjXI1/FQHCGyMCiIWhH/Pns=
Subject key identifier: F0:3F:AD:9A:9B:A7:9D:1D:04:AB:8E:FB:C8:6B:0D:98:BB:A1:BD:6C
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DD950A5F687C771F63538E639111
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8D-tmpunnR0Eq477yGsNmLuhvWw.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59838
IP address blocks: 5.160.203.0/24 maxlen: 24
5.160.202.0/24 maxlen: 24
5.160.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:dd:95:0a:5f:68:7c:77:1f:63:53:8e:63:91:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f03fad9a9ba79d1d04ab8efbc86b0d98bba1bd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:f7:ce:c5:5c:0a:1e:42:ad:56:f0:ea:fa:
7a:a1:74:ef:5b:96:97:2b:f1:c5:8e:e5:07:9b:4c:
3d:67:70:9b:2e:eb:fb:10:bb:3d:23:9b:9d:6f:2e:
bf:b0:28:d4:39:56:45:0f:2e:d7:1d:b1:da:4a:cc:
44:db:8f:aa:76:ca:d2:3a:c8:94:ee:c5:ea:01:aa:
bf:e5:c7:57:d6:fa:2b:b8:16:02:cb:78:82:85:96:
4c:1c:d9:ec:fb:0f:bb:d7:34:df:4d:22:49:ea:44:
b4:6e:63:80:b2:78:22:aa:2b:77:a6:7b:01:96:a6:
ae:23:b8:03:e4:93:e0:96:c4:09:9c:8e:18:e7:b1:
ef:78:9a:95:d2:a1:96:b5:4b:12:c7:d7:02:65:e1:
78:0e:28:c1:54:52:20:d9:e9:b8:d7:2f:21:92:fc:
f7:c3:df:ec:6b:98:22:a7:b2:52:19:2f:3a:cc:83:
be:0f:dd:ec:2e:91:36:77:36:79:0f:21:42:a4:13:
d6:b3:fe:54:a2:c9:85:35:46:3f:57:0f:ea:48:c1:
93:c3:46:70:6a:0a:65:ae:71:f0:02:25:72:12:94:
03:81:6a:e3:5a:cb:f1:c4:a5:c9:4b:98:2e:85:c1:
c4:94:fd:ba:88:76:78:e1:b2:86:a3:d6:e4:ed:e4:
58:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:AD:9A:9B:A7:9D:1D:04:AB:8E:FB:C8:6B:0D:98:BB:A1:BD:6C
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8D-tmpunnR0Eq477yGsNmLuhvWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.202.0/23
Signature Algorithm: sha256WithRSAEncryption
67:5f:f1:5c:4e:9c:01:d7:0d:86:7d:a8:fa:c1:3c:33:9e:9f:
ee:9e:3e:07:9f:f0:6f:cf:6b:12:c5:56:29:bb:74:9f:be:43:
54:bb:97:55:cb:c1:51:9a:3b:52:67:e3:e6:ca:48:6d:f0:34:
fe:f1:69:6f:66:f8:8c:a0:53:cf:9b:97:fd:15:53:1e:13:62:
15:a6:70:e9:b1:02:6e:9b:c2:55:0d:c0:8f:db:07:37:d6:e7:
ef:04:34:b0:5b:e7:50:2b:f5:ea:d9:a8:28:61:1c:76:25:6b:
ff:5d:4b:a5:ea:76:68:21:d5:41:1e:c8:b2:d9:9a:46:61:bb:
a3:89:a1:85:c6:d9:d2:b5:6b:f9:eb:01:74:9b:fa:8a:e5:78:
fa:8c:de:ff:19:50:db:10:90:b6:0e:af:ad:3a:f7:f8:33:c2:
fa:b3:9f:ed:99:14:8f:c0:0a:2a:43:82:db:84:97:68:b8:c9:
d4:31:51:5f:1c:81:db:8b:90:9f:29:a8:f1:30:ee:9a:69:5c:
4d:26:ef:e0:b4:aa:9f:f8:74:ca:c0:be:44:b7:a5:fa:c1:9a:
a7:f2:be:f6:ba:52:ce:9c:c5:c1:14:5d:f2:d3:bb:1d:28:1e:
3f:45:1d:88:a6:fd:73:ea:94:1e:a5:df:05:91:56:76:a7:b7:
29:fb:a6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org