Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QJ5-rlUm-dfIv1CWAX0eACMIFEU.roa
File: QJ5-rlUm-dfIv1CWAX0eACMIFEU.roa (raw, json)
Hash identifier: 7xJGP1p85gu1XylaGWSK8+ekqH1jfeNzwLgpE7f3SNo=
Subject key identifier: 40:9E:7E:AE:55:26:F9:D7:C8:BF:50:96:01:7D:1E:00:23:08:14:45
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01914A8CFDDB9EC586C83612362FFCFF89FF
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QJ5-rlUm-dfIv1CWAX0eACMIFEU.roa
Signing time: Tue 13 Aug 2024 07:03:59 +0000
ROA not before: Tue 13 Aug 2024 07:03:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200252
IP address blocks: 5.160.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:8c:fd:db:9e:c5:86:c8:36:12:36:2f:fc:ff:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Aug 13 07:03:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=409e7eae5526f9d7c8bf5096017d1e0023081445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:41:37:6d:e6:6a:79:9b:1c:f8:ba:ad:36:
7a:23:6f:32:5e:ba:91:25:23:1b:c8:a5:06:2b:e3:
12:dd:d5:f5:1d:e2:24:dc:84:0c:86:81:b0:e2:47:
5b:d4:13:db:f4:46:a8:48:d3:9b:6d:4c:86:3e:4b:
72:9c:68:49:9c:b5:4c:37:e4:72:27:5b:4c:10:94:
c0:fc:19:44:f6:14:fb:59:ca:a8:03:97:c3:8e:84:
11:28:25:18:53:f9:d7:7a:94:34:b7:d7:f2:ea:c6:
8a:ae:5a:4c:4a:7a:ed:bd:35:39:01:18:35:af:78:
d0:a9:57:36:34:b6:fd:96:a5:44:fd:e1:f5:c0:70:
a7:49:ed:d1:7f:07:c6:70:d1:73:f0:b1:32:44:46:
4c:6c:d0:c2:ba:59:65:64:0f:ea:9b:66:fd:19:d1:
e7:04:b3:69:6a:de:b7:b5:ad:1b:10:7a:f1:6a:a2:
fb:fd:7c:0f:62:bf:b2:2e:6e:c3:3e:74:b4:62:76:
55:30:3b:76:76:a6:73:2b:b8:35:53:40:93:48:68:
86:64:b9:ad:3b:04:37:b0:d3:2c:1e:68:5b:67:b9:
02:af:7b:6d:14:cb:6e:e2:27:eb:cd:75:fb:ed:43:
eb:11:1c:fc:54:81:8c:6b:de:05:cc:3d:c9:dc:fa:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:7E:AE:55:26:F9:D7:C8:BF:50:96:01:7D:1E:00:23:08:14:45
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/QJ5-rlUm-dfIv1CWAX0eACMIFEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:99:22:4e:40:ab:66:bd:f4:ff:17:ca:f0:72:63:bb:4b:c3:
91:b2:e9:4b:e0:d1:35:87:55:62:49:12:0c:a0:39:a1:2d:36:
8d:5e:1b:ac:a0:65:77:b3:17:44:e0:dc:ab:b9:c3:6e:05:79:
86:8c:8c:f0:85:74:ba:9c:ff:5f:b8:5a:ed:72:93:2e:bb:5c:
7c:04:b1:ea:72:6a:f4:e2:12:86:66:2f:74:75:c3:b3:4d:d2:
c5:7b:c7:c9:18:d0:88:e5:8f:27:f0:10:e5:6b:e4:0c:c8:ff:
1f:16:c2:12:8b:0b:e5:c0:b5:f2:aa:69:97:ca:ef:88:5d:f4:
39:cc:93:f5:fd:ae:51:4f:ea:1f:3f:f9:2c:97:15:1a:8e:6f:
ad:50:1d:d0:54:05:08:eb:29:e0:8c:6a:89:8e:69:43:b4:ca:
86:92:8a:df:c9:4a:6c:87:31:bb:28:5d:e2:9e:3b:14:90:3b:
38:2f:4c:65:b7:3a:8f:23:f6:b2:53:5b:cd:57:51:d7:1c:80:
b3:8e:18:d6:b5:4c:95:d7:3a:13:1b:0e:be:2c:1d:d8:31:6a:
a4:38:e8:3b:92:aa:ab:f5:70:b9:cd:b3:d5:02:5d:bf:9d:4b:
2e:e4:4d:bf:cd:e7:4d:f0:b7:2f:0d:de:15:62:cd:76:53:e1:
94:be:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org