Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/MItxDDCloSIjpFsLMYyOeWao65s.roa
File: MItxDDCloSIjpFsLMYyOeWao65s.roa (raw, json)
Hash identifier: QR1CHe1CHEizHO1/cwYIFM9HrAD4dpkA/8mbaju3iCo=
Subject key identifier: 30:8B:71:0C:30:A5:A1:22:23:A4:5B:0B:31:8C:8E:79:66:A8:EB:9B
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018F905BC703A7ED06A9EC4E6075EB31FECA
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/MItxDDCloSIjpFsLMYyOeWao65s.roa
Signing time: Sun 19 May 2024 10:18:04 +0000
ROA not before: Sun 19 May 2024 10:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51235
IP address blocks: 5.160.128.0/24 maxlen: 24
5.160.149.0/24 maxlen: 24
5.160.180.0/22 maxlen: 22
92.242.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:5b:c7:03:a7:ed:06:a9:ec:4e:60:75:eb:31:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: May 19 10:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=308b710c30a5a12223a45b0b318c8e7966a8eb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:93:0a:10:d3:ce:ef:aa:08:fe:54:57:e0:
9c:a2:93:69:36:c1:4b:dc:a3:33:07:8f:fc:f3:0b:
cf:f1:de:d4:55:d0:03:d3:0c:79:0d:97:25:25:37:
6f:f8:4e:64:4b:a0:f1:ff:47:9e:41:9d:00:4e:67:
f5:79:93:ce:b4:32:7d:a9:30:85:ce:04:76:ed:de:
f9:5e:d5:fc:24:f5:e4:9f:1c:42:28:c5:0d:a0:7f:
03:6a:d6:38:c0:43:6c:cb:a3:da:90:f0:8d:92:bf:
34:53:ae:0a:a0:00:b0:b7:69:29:3c:bf:00:d8:8c:
8c:5b:f9:1a:47:01:fa:b9:6a:ca:32:c2:82:9d:62:
0b:06:39:68:98:8b:cf:99:40:ff:fd:7d:bd:b9:db:
7f:a8:23:4a:ef:cb:90:6a:8e:03:5c:f0:ec:9a:e0:
a5:56:c5:d3:9a:90:7b:dd:4b:2b:24:aa:4c:b5:fb:
2d:4f:e3:e2:6c:2f:14:cc:fb:74:fe:8f:07:1c:77:
5b:04:bc:6c:ba:7d:5c:4e:b9:a4:52:db:41:86:7c:
b6:69:5b:af:37:36:35:e7:ab:e9:ca:ec:a5:16:61:
a6:22:9d:ad:36:c3:ae:04:57:61:af:2e:4e:ba:3b:
9e:f7:f8:a4:bf:81:21:95:a7:62:0c:31:1b:05:a5:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8B:71:0C:30:A5:A1:22:23:A4:5B:0B:31:8C:8E:79:66:A8:EB:9B
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/MItxDDCloSIjpFsLMYyOeWao65s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.128.0/24
5.160.149.0/24
5.160.180.0/22
92.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ad:8c:11:fc:a4:0e:41:86:d5:2a:75:36:a9:21:6d:4b:62:
21:7e:7d:cd:fc:7f:76:20:62:c9:f1:d7:1e:85:1c:7d:d8:62:
c3:55:37:ca:ba:fd:d4:a7:92:6d:5e:27:46:53:5e:0b:3e:3e:
53:4d:a9:2d:5e:90:92:3e:e4:cf:0e:e5:6d:1b:97:08:ee:b2:
07:38:2f:23:e5:80:a9:37:78:30:4e:39:4d:b9:f2:bb:a0:01:
34:f7:1f:9a:a5:b8:8e:93:58:f8:fc:ad:5f:05:b2:8c:ef:66:
6d:28:f1:c3:5d:11:bc:07:8d:8f:f1:09:b0:f3:89:41:5a:44:
4a:64:25:47:0e:67:bc:7c:32:18:fb:0e:67:59:70:20:7a:1c:
ef:f7:a2:ad:b3:b8:2e:96:56:d3:1c:97:03:17:e6:33:b4:00:
7f:5d:bb:1e:c5:38:82:4f:ca:6b:de:d5:84:65:5f:86:04:76:
cb:10:b7:c2:a3:7a:a8:b7:f6:05:e6:fb:f8:53:b5:8c:ad:02:
2d:5f:ee:a8:41:87:4c:b2:47:6c:9a:a1:c3:ee:a8:c8:58:1b:
69:91:f4:32:1d:14:11:40:dc:db:c4:f5:ce:2a:d0:3e:22:7f:
60:a0:61:5f:9c:b0:73:b6:2d:56:79:b9:59:6d:9e:fb:3e:8d:
06:a2:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:57:06 2024 by rpki-client on console-ams.rpki-client.org