Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/babGJDG4qUINMna6Y0Kh2SLCRmo.roa
File: babGJDG4qUINMna6Y0Kh2SLCRmo.roa (raw, json)
Hash identifier: gA/z1vPQg0IGLVrraGlbMFYqmNzQXQb6PbmPBM9mp4Q=
Subject key identifier: 6D:A6:C6:24:31:B8:A9:42:0D:32:76:BA:63:42:A1:D9:22:C2:46:6A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DE3C64E697F5416A330136745BB7
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/babGJDG4qUINMna6Y0Kh2SLCRmo.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59961
IP address blocks: 5.160.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:de:3c:64:e6:97:f5:41:6a:33:01:36:74:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6da6c62431b8a9420d3276ba6342a1d922c2466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:7d:f4:55:c8:d6:c7:b8:88:4c:ef:7e:a6:
a3:e3:81:3f:f6:63:3f:93:f8:2a:6a:8a:e8:86:90:
3a:ff:b1:1b:b4:b3:85:75:51:73:ee:b3:2c:41:0d:
26:c7:7d:54:da:cf:7c:50:65:fa:a8:db:ed:1c:11:
ab:f7:33:de:44:3c:2b:a2:d0:97:55:44:29:fa:af:
03:43:85:9f:f4:d0:a3:5f:35:30:9f:d9:9b:e4:ca:
32:f6:58:26:ad:d8:ac:ed:3f:d1:10:ff:90:f2:74:
1d:76:c3:74:61:9e:55:ab:af:80:53:f3:69:6c:54:
1c:09:a6:2c:1d:bf:db:04:37:c0:36:36:e3:0c:8f:
27:da:52:68:04:da:6d:94:ca:1e:e6:59:57:5c:d9:
51:bf:5b:d0:c3:e6:95:66:23:d3:bb:7b:bc:06:4f:
c2:c8:4b:1a:85:ec:96:ac:cd:b7:52:49:2d:66:66:
fb:bf:2f:52:66:ca:a4:79:1c:9c:dc:c4:49:32:2d:
7e:c4:c2:fe:48:ec:e0:31:78:5d:71:83:7c:0a:db:
87:1c:02:29:8a:39:ab:0a:f6:5c:95:35:8b:7a:0a:
38:4c:02:1d:6f:d5:92:c4:9c:d8:c6:f8:73:fa:6c:
d3:91:c5:b2:07:93:c5:74:9e:7c:ca:83:92:ae:93:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:C6:24:31:B8:A9:42:0D:32:76:BA:63:42:A1:D9:22:C2:46:6A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/babGJDG4qUINMna6Y0Kh2SLCRmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.195.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e6:01:54:c7:37:6c:d5:1b:72:0b:3d:7b:b4:c9:89:91:46:
aa:5b:7c:a7:d0:d5:1e:c5:70:9b:3b:be:4f:5d:10:80:4e:31:
17:e3:21:95:c0:b7:07:33:54:3a:e5:de:59:13:e6:84:c2:a8:
d4:e0:0a:7b:b6:3b:8e:57:ff:3e:41:0f:f9:c4:cb:c6:91:4d:
a8:52:f4:07:c2:28:0c:35:1a:f2:ab:8c:7d:f4:45:07:d7:62:
b4:d8:2e:96:68:fd:60:7b:c8:42:10:2b:c1:8c:fe:86:1b:45:
26:d6:0b:27:72:16:e5:0e:a3:85:07:59:e2:cb:b1:eb:43:31:
a7:d6:7d:e6:94:9b:35:59:bc:b1:60:75:ed:4c:14:e2:28:2d:
5d:db:fc:8e:16:4a:ad:04:c7:b2:24:ca:8c:ca:f4:cc:cd:35:
30:c9:6c:9e:70:11:45:ef:b4:1e:b7:3f:92:68:cf:5d:78:8a:
8d:66:02:13:d4:23:e7:ca:55:29:57:80:3e:14:c8:a4:69:c2:
cf:cc:f0:34:87:b9:b6:e2:51:61:ed:eb:90:68:02:a3:ab:a4:
0b:3d:1b:b9:09:52:77:ca:a6:db:d9:70:e3:56:17:b2:9f:a5:
27:bd:a1:af:09:03:fa:28:73:d1:91:44:f6:83:cf:52:14:a1:
b7:f4:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:54 2024 by rpki-client on console-fra.rpki-client.org