Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a9llKA0bj3xbgYAMRBbroen8DCM.roa
File: a9llKA0bj3xbgYAMRBbroen8DCM.roa (raw, json)
Hash identifier: Q4TBZmhkXAPYQWuwpW/t3bNTogNhLnd/Cl32Dp4Y9IY=
Subject key identifier: 6B:D9:65:28:0D:1B:8F:7C:5B:81:80:0C:44:16:EB:A1:E9:FC:0C:23
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D3EE9B1223F336EC8561023DBA37
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a9llKA0bj3xbgYAMRBbroen8DCM.roa
Signing time: Mon 01 Jan 2024 10:30:06 +0000
ROA not before: Mon 01 Jan 2024 10:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44208
IP address blocks: 5.160.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d3:ee:9b:12:23:f3:36:ec:85:61:02:3d:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bd965280d1b8f7c5b81800c4416eba1e9fc0c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:cb:b9:44:86:4b:27:43:67:a6:4a:b6:e2:
04:8e:13:d0:22:f1:62:6a:8e:be:c5:c7:a7:98:26:
61:c8:6c:9f:9b:7f:86:3d:ce:34:92:fa:e3:bd:ab:
b3:42:b0:50:32:0c:12:0d:c7:33:68:2a:40:79:18:
09:0b:a1:a1:fb:3a:3f:8e:d2:05:c1:88:70:9a:bf:
6f:35:b7:d2:7c:a7:e5:4c:88:ff:1e:f2:5b:35:6e:
8f:8c:52:51:30:8e:cd:52:78:40:27:46:97:fa:ba:
b8:88:e4:69:3c:17:c6:83:3a:c3:1c:4b:b6:76:95:
ab:28:d4:ed:80:c3:3a:eb:63:c0:b2:9a:46:fc:d7:
1b:f1:fe:9e:c9:87:71:c7:cf:85:c5:f8:f5:37:cc:
94:95:4c:55:7e:9f:7a:c4:9d:dd:7a:a4:a4:72:d0:
8e:fc:35:dc:18:bb:d6:3c:19:e3:22:9b:25:3d:0a:
42:f7:e9:e9:cc:dc:8b:e4:1b:b3:f3:f6:c4:18:74:
ad:a9:f9:9b:52:ac:92:59:b0:e9:1e:98:bc:ec:ac:
95:96:8a:bf:ce:45:d8:44:76:2e:39:c7:a9:ea:16:
c1:88:96:44:e7:b9:6e:40:20:af:58:91:48:c1:68:
95:62:85:ca:69:a4:e1:19:29:ef:04:ff:5e:a6:f8:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:65:28:0D:1B:8F:7C:5B:81:80:0C:44:16:EB:A1:E9:FC:0C:23
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/a9llKA0bj3xbgYAMRBbroen8DCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.150.0/23
Signature Algorithm: sha256WithRSAEncryption
85:ac:ec:0e:b0:9f:1e:a4:22:70:fe:60:37:30:5e:61:75:e0:
c2:0e:7d:49:9e:6c:8d:eb:3c:16:9c:be:7d:bc:5a:b2:01:e9:
e5:29:d4:a6:a0:9f:28:2b:c2:4f:41:25:5b:1b:c6:e9:e0:9c:
df:dd:e7:46:af:0f:0a:d4:e4:e0:57:24:f2:fd:82:c6:d8:91:
1e:1b:91:7d:9f:eb:57:6b:55:11:af:15:c7:9d:bc:03:c2:b1:
90:ed:03:20:02:9a:c7:77:c6:15:9b:c6:92:96:ca:93:38:77:
a4:5b:d3:d5:22:53:bc:be:f4:25:c7:c7:9f:dd:1b:b3:f1:42:
9a:91:75:2b:4e:b7:23:a3:68:1a:a4:08:86:1f:43:61:86:a5:
f8:29:23:86:37:2d:e6:6d:a4:67:7d:e0:b1:db:6f:de:20:8e:
a0:8c:ef:4c:ac:ff:78:38:7a:0f:7b:e4:6b:25:05:38:d6:d1:
a4:d2:ce:db:94:c8:91:c3:51:a1:7e:ad:f9:d3:29:b7:40:e4:
cb:41:c6:c4:c0:c3:98:8b:a0:1c:7b:a8:4b:24:40:e7:d0:bc:
0d:af:0d:97:d2:7e:75:8f:35:46:b5:e5:54:88:e2:3c:88:c6:
d9:7e:f9:d5:b7:0c:84:de:8a:07:7d:ed:a9:87:f0:08:42:0b:
7f:94:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:46:15 2024 by rpki-client on console-ams.rpki-client.org