Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Xg4NAMQznwutde-OHvXagh6cm9M.roa
File: Xg4NAMQznwutde-OHvXagh6cm9M.roa (raw, json)
Hash identifier: jfUzizNvGK3CbYGVcB/VxgdDikSzACNe9QaFzpqWhog=
Subject key identifier: 5E:0E:0D:00:C4:33:9F:0B:AD:75:EF:8E:1E:F5:DA:82:1E:9C:9B:D3
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492CFF1E1BBC42A0A6F976941B0EBA5
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Xg4NAMQznwutde-OHvXagh6cm9M.roa
Signing time: Mon 01 Jan 2024 10:30:04 +0000
ROA not before: Mon 01 Jan 2024 10:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3177
IP address blocks: 5.160.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cf:f1:e1:bb:c4:2a:0a:6f:97:69:41:b0:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e0e0d00c4339f0bad75ef8e1ef5da821e9c9bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:0b:21:c5:65:d9:17:d0:b7:13:1b:3b:66:
76:fa:32:62:a1:c1:cd:34:59:45:14:e5:f7:bd:2b:
4e:b6:80:ec:5a:ca:53:4d:ed:14:51:a3:9e:7f:d2:
bd:3e:89:20:4b:f9:f4:8b:d4:00:6d:c9:ae:c0:76:
07:7d:f8:40:24:2d:d2:99:61:c5:42:64:d4:22:6c:
2e:83:7a:a5:c6:3e:56:51:fb:a2:15:e1:25:a0:31:
91:e8:91:fe:40:5e:ed:b0:29:d3:7b:e8:be:bb:40:
41:cc:b2:a6:c2:9d:62:29:f0:cb:ed:25:de:33:f2:
a0:06:8e:05:0a:de:9c:91:27:8a:cb:88:14:26:3d:
5e:76:d6:f0:a4:64:7f:37:19:39:9a:a8:8e:07:46:
32:48:f5:c2:e7:9d:1a:c8:3b:f2:86:1f:5d:7d:e8:
44:5f:22:46:41:6d:52:21:ba:9e:53:b5:5d:9c:bc:
b2:f5:e5:8c:7b:42:f4:1e:7e:5f:59:40:17:53:bb:
8b:00:d4:d7:78:c6:b8:b5:ad:f3:f2:d8:93:8d:2c:
af:10:06:0f:8e:bf:ae:35:da:7a:a4:3c:28:f0:47:
17:9f:e6:c2:99:9b:7c:86:9d:92:0b:e9:e7:80:e2:
8c:20:54:31:09:c8:dc:41:60:3d:15:83:a5:2e:44:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0E:0D:00:C4:33:9F:0B:AD:75:EF:8E:1E:F5:DA:82:1E:9C:9B:D3
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Xg4NAMQznwutde-OHvXagh6cm9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.129.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6e:5d:b7:29:39:75:69:92:90:71:be:7d:b9:d3:73:84:03:
59:a4:c4:d2:99:56:d1:77:4f:d4:e4:98:17:f4:90:f3:0d:49:
51:51:59:17:c0:25:c3:98:80:b4:6d:e1:8b:82:a7:18:0d:34:
71:cf:e1:2f:27:20:06:f0:5b:dc:73:2f:5c:0a:89:00:20:9f:
e2:a1:46:29:9b:61:80:29:4b:1d:d4:42:44:bc:08:e8:ca:89:
73:a9:c4:27:cc:54:92:04:2b:1e:44:3d:cc:80:7e:ff:eb:17:
da:79:0a:59:83:88:86:5c:cc:b0:05:9e:b7:85:3f:eb:1a:3b:
b4:8c:e8:2b:39:51:f2:ba:18:4b:ab:49:1a:cb:04:6b:ce:f1:
e9:14:04:b2:40:1f:d4:ca:cc:44:af:7c:3e:e0:c9:e0:cc:fa:
25:0f:99:44:a4:01:cc:2e:9b:61:4d:1b:2b:2d:b2:19:aa:bd:
d2:a5:05:92:ff:ed:e7:af:d8:5c:ee:ab:6d:5c:fb:51:01:d9:
ec:c4:b2:3e:b2:03:69:be:e5:cd:e4:f0:53:f5:73:32:d4:fb:
ab:68:96:2e:9e:9e:0d:fc:c9:5c:a5:1f:93:12:67:89:7f:44:
33:75:5c:3b:4f:bb:0a:25:33:96:22:1d:d5:93:32:31:3a:cc:
de:49:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:46:15 2024 by rpki-client on console-ams.rpki-client.org