Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a-AvbGRATlesl5ycUFzczu5Mfok.roa
File: a-AvbGRATlesl5ycUFzczu5Mfok.roa (raw, json)
Hash identifier: NvKJPZZWrMBY6FtOCvQFp8/31vC1kkDyYxqgxvIgkFg=
Subject key identifier: 6B:E0:2F:6C:64:40:4E:57:AC:97:9C:9C:50:5C:DC:CE:EE:4C:7E:89
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D0E13EBF88DFCA525EFE3EE877C8
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a-AvbGRATlesl5ycUFzczu5Mfok.roa
Signing time: Mon 01 Jan 2024 10:30:05 +0000
ROA not before: Mon 01 Jan 2024 10:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25158
IP address blocks: 5.160.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d0:e1:3e:bf:88:df:ca:52:5e:fe:3e:e8:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6be02f6c64404e57ac979c9c505cdcceee4c7e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:ac:a4:bc:fd:33:3a:7a:bc:bb:14:08:de:
23:c1:d6:e6:0b:6b:80:c6:3f:07:f1:0b:7c:df:29:
c7:93:fb:fc:c4:77:5f:1f:4a:37:82:24:5f:32:87:
92:6e:36:17:32:5d:2d:fa:cb:9c:cb:0b:fe:27:0f:
88:a5:53:f5:92:2f:a0:5c:03:a0:4d:82:8b:c8:23:
92:c1:b2:66:9e:04:72:fd:fd:67:66:cb:88:af:e3:
74:51:3b:63:45:f7:60:d7:2c:c4:7f:1a:8f:96:a5:
a5:02:75:f8:3a:06:b0:b2:54:e8:91:ff:19:11:89:
fd:d1:56:86:dd:b2:6f:f8:74:cf:69:ca:60:8c:bf:
9e:7a:89:b3:21:a5:41:6c:3a:e0:77:13:10:97:5d:
30:fb:36:97:7c:68:02:8e:98:17:9e:60:f0:08:39:
86:a1:dd:c7:5b:76:8e:be:03:4d:cf:b4:8d:71:fc:
96:4d:af:9d:06:f2:44:27:33:5d:8c:33:fc:e5:e6:
d2:48:45:2f:76:4f:7f:65:06:0f:c5:b2:92:56:c9:
3a:27:5c:cc:20:91:fa:af:af:8b:e1:05:9e:52:f6:
35:c3:2a:c4:1c:51:96:a1:97:08:62:9c:ac:f3:6c:
35:fe:b8:7d:c9:58:81:f9:61:46:45:b8:6f:cf:72:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E0:2F:6C:64:40:4E:57:AC:97:9C:9C:50:5C:DC:CE:EE:4C:7E:89
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a-AvbGRATlesl5ycUFzczu5Mfok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:93:42:db:26:6f:01:ad:e7:e8:10:cf:0f:2a:7d:f0:e0:7a:
62:3a:70:22:dd:60:e8:d6:99:c6:9e:da:ed:9c:2c:95:81:11:
7d:6a:4e:23:2a:18:e4:15:cf:d5:83:77:3d:78:74:b8:6e:72:
9e:29:76:a4:89:e1:de:b3:ec:35:54:f1:9e:65:dd:ce:20:2d:
f0:22:66:43:eb:ee:c7:b5:db:b4:79:8e:99:23:88:3f:65:c3:
fd:27:9d:00:b5:39:ed:5c:67:43:72:1c:2a:e2:f4:00:ac:28:
39:af:6c:86:e6:92:e6:10:36:e8:d9:cc:2d:1a:b7:90:52:98:
2b:7c:86:a6:ae:0e:9e:39:9e:b2:98:4f:77:0d:85:4e:08:7f:
60:d7:ed:4b:65:94:82:27:59:6f:97:5f:cf:16:da:51:33:c7:
00:54:c3:eb:60:8b:6c:a3:b9:19:0d:04:d1:a9:ef:1a:c2:32:
1a:51:60:e2:08:10:48:47:4b:c3:b8:e8:c1:9d:45:11:5b:e8:
42:e3:3d:df:75:39:01:06:6d:11:0d:0c:79:8a:48:be:52:b6:
09:84:fb:ed:25:51:7f:f1:40:1d:34:a0:4e:a3:bf:b9:96:6b:
bd:be:94:d1:78:a1:42:f8:36:ad:cf:ac:f1:30:8e:73:61:bb:
99:e6:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org