Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VwtMRI9b_XCbHZ-LvSDxcz5oXzw.roa
File: VwtMRI9b_XCbHZ-LvSDxcz5oXzw.roa (raw, json)
Hash identifier: oPU3hDjlWWS66UPSZzodZSHXcshDbnwcLXipO39L2M0=
Subject key identifier: 57:0B:4C:44:8F:5B:FD:70:9B:1D:9F:8B:BD:20:F1:73:3E:68:5F:3C
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D118DA2DCEBBC9D8049F1F4F9BC5
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VwtMRI9b_XCbHZ-LvSDxcz5oXzw.roa
Signing time: Mon 01 Jan 2024 10:30:05 +0000
ROA not before: Mon 01 Jan 2024 10:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29577
IP address blocks: 5.160.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d1:18:da:2d:ce:bb:c9:d8:04:9f:1f:4f:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=570b4c448f5bfd709b1d9f8bbd20f1733e685f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:6f:e2:87:1a:75:38:d5:d6:75:db:ff:ee:
85:47:aa:2d:89:4e:2e:da:79:c1:42:b5:30:e0:f8:
6d:21:b1:76:d6:bc:7f:c7:b5:cf:f9:07:76:aa:d1:
9f:73:a0:49:66:5d:c2:88:57:4e:e9:c7:97:45:f8:
2d:c5:c0:96:ef:00:10:a1:7c:1f:40:09:d2:bb:70:
b0:33:f0:e6:49:ac:d6:46:5f:79:70:92:38:a8:45:
72:95:05:3f:00:fb:ab:9b:f0:78:dc:aa:7a:b1:68:
91:84:73:f1:5b:e8:f7:4e:8f:30:11:1f:5f:88:34:
e8:6b:f4:cc:41:82:9a:a1:7b:e6:32:b4:26:81:98:
40:1a:e3:eb:64:41:56:b1:76:db:c3:0d:29:71:c0:
be:f3:76:1c:b3:57:f7:25:ea:dd:e7:26:ed:78:1f:
44:9e:d3:b1:4b:7e:10:b6:3f:54:4d:25:5c:52:c6:
5b:e5:ac:a1:f7:3e:4d:af:35:33:04:23:30:73:6d:
8c:b0:1e:88:71:48:05:5f:6d:bc:2c:6f:6c:b1:6a:
60:73:01:7b:38:aa:fe:0c:28:79:90:ac:51:61:ab:
cb:a8:96:7a:26:11:12:ad:bd:05:db:dc:70:31:5e:
07:d2:78:0b:27:22:4c:fb:b3:3b:72:cb:99:a7:53:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:4C:44:8F:5B:FD:70:9B:1D:9F:8B:BD:20:F1:73:3E:68:5F:3C
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/VwtMRI9b_XCbHZ-LvSDxcz5oXzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.16.0/22
Signature Algorithm: sha256WithRSAEncryption
76:d2:f5:09:68:99:89:ae:05:62:d1:1c:7e:8d:81:57:66:c7:
a0:06:e8:9e:04:65:b4:29:66:6e:18:3f:d4:22:16:bb:62:7a:
0c:27:85:c4:db:7b:76:07:78:1f:d4:4e:d4:16:22:25:93:21:
b0:d3:6b:ed:bd:2c:76:40:8a:fb:3d:28:5f:2c:73:90:d3:a7:
42:ca:a6:d6:78:ec:7e:ea:a7:f1:f3:7a:85:b5:e0:56:73:b0:
66:98:77:6e:fb:a9:7a:1d:2f:64:92:93:fd:0e:cb:66:fb:61:
0d:b9:35:85:51:1c:87:d5:5d:93:fe:47:ce:46:f0:cc:6d:09:
d0:b8:03:00:20:b6:af:8d:66:52:d4:6b:eb:04:e1:3e:97:f7:
8f:56:cf:6b:e8:11:23:1d:9d:20:36:0a:8b:55:3c:76:0d:85:
63:d3:c1:ce:8b:ba:81:59:f7:bf:ad:73:0b:c0:80:13:17:e9:
58:52:08:46:0e:8e:7c:14:55:bc:ae:6e:01:35:46:60:b9:d6:
91:0a:f6:8a:97:45:8b:ae:9b:39:ba:2b:ef:bd:b4:c1:58:1c:
d0:bf:64:0a:01:3b:da:7d:1b:82:42:cb:9f:65:92:1e:9a:22:
c6:66:88:a9:ea:b4:86:82:c6:9c:53:75:d1:14:9f:a0:0a:a8:
a8:77:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:29 2024 by rpki-client on console-ams.rpki-client.org