Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H3nFbLVYl_D3-htDPJd34mMb6x8.roa
File: H3nFbLVYl_D3-htDPJd34mMb6x8.roa (raw, json)
Hash identifier: HqBYQ84dvZi5SvQ4Ug7hl1SsOzb7ecuibxpJ0ARekz4=
Subject key identifier: 1F:79:C5:6C:B5:58:97:F0:F7:FA:1B:43:3C:97:77:E2:63:1B:EB:1F
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E36436D186131341994102BE63E7
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H3nFbLVYl_D3-htDPJd34mMb6x8.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64413
IP address blocks: 5.160.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e3:64:36:d1:86:13:13:41:99:41:02:be:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f79c56cb55897f0f7fa1b433c9777e2631beb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:0e:a3:27:ca:9a:b4:be:8b:5f:2b:ba:b2:
ca:64:ea:67:c0:03:59:67:30:7b:d3:96:c6:35:9b:
55:33:18:be:59:80:9d:7e:71:6e:c7:ab:c9:62:54:
ff:d6:ec:e3:51:91:83:56:dd:e3:c6:0a:c6:00:4a:
e0:a6:c1:f7:47:01:fb:03:85:27:6d:47:db:43:b1:
3c:b9:38:dc:dc:b5:20:29:32:97:45:a5:4f:d2:80:
9a:48:20:44:a9:d4:95:53:c6:11:8d:b2:7d:6c:93:
95:63:3b:14:67:16:02:38:e6:3b:3d:62:5d:4d:5f:
a8:fe:80:61:9c:fd:f5:1e:2d:34:34:f8:3c:fa:2f:
10:f6:72:28:08:ce:d4:51:96:44:8c:6f:69:36:28:
cb:f7:c3:86:02:ab:a6:a4:b5:3e:26:5e:17:fb:a7:
45:65:d6:6c:f4:19:7f:30:d2:2c:20:a1:2e:84:d9:
28:d7:ad:3f:d1:21:eb:c1:bd:e0:a2:f9:24:7b:13:
b7:91:55:a6:62:1f:af:ec:8f:df:2c:54:a8:d9:c9:
0a:56:56:f3:84:3b:b5:07:24:8e:1f:15:62:70:12:
52:8f:64:11:54:d5:b3:a2:3a:49:28:f4:71:2d:b6:
40:cc:7c:8f:93:d7:22:1d:cc:3f:99:4f:77:8c:be:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:C5:6C:B5:58:97:F0:F7:FA:1B:43:3C:97:77:E2:63:1B:EB:1F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/H3nFbLVYl_D3-htDPJd34mMb6x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.224.0/20
Signature Algorithm: sha256WithRSAEncryption
77:b8:1b:ed:d7:06:31:b5:ba:dc:20:a6:45:6c:08:1c:e3:d1:
5b:7b:14:a4:fe:ca:d3:2b:ef:76:70:a5:a6:ba:40:e0:9a:12:
7e:47:f2:8b:d0:2f:76:14:3f:52:ec:60:d3:3d:06:9d:a6:e0:
e8:cc:a7:d4:51:a7:10:58:ec:51:69:06:3d:6e:c5:19:22:6c:
d5:48:25:7e:ab:9c:74:c9:ee:c3:28:6a:5a:ca:7e:c7:d4:d0:
7e:67:94:07:6d:1a:ff:56:e9:70:26:0a:c0:ff:2a:2e:7c:fa:
37:8b:1f:ac:2d:1c:d3:b4:02:22:de:9d:72:7a:42:d9:27:0f:
ac:cb:b6:e4:70:65:40:c8:0e:89:03:fe:c9:fc:6f:fb:6b:bd:
45:e8:a7:da:fd:8f:2b:c2:46:86:dc:d6:ab:b4:f7:9e:f6:89:
c0:bd:9c:15:b4:3c:b1:0a:59:0e:40:0d:c4:16:3d:ed:e5:1d:
fd:a3:a9:95:94:40:2b:b4:2e:f0:b7:d1:24:a8:3d:35:f1:f5:
65:43:a7:c3:dc:6a:bb:35:84:fd:a7:d9:08:c1:69:82:50:e9:
82:1d:b1:4b:5b:aa:b0:4c:18:24:da:06:03:22:ca:36:2d:8d:
15:42:64:29:4a:12:49:20:67:7f:e7:09:52:1e:3e:05:5c:58:
e2:e0:70:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:16 2024 by rpki-client on console-fra.rpki-client.org