Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/c04B41ZGdGEMm7lfJmPfllrazGs.roa
File: c04B41ZGdGEMm7lfJmPfllrazGs.roa (raw, json)
Hash identifier: z+Wf9FnLtasav9XQqtKf7M3euJyJcwLW/yyNohYRUt0=
Subject key identifier: 73:4E:01:E3:56:46:74:61:0C:9B:B9:5F:26:63:DF:96:5A:DA:CC:6B
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492D8A4965553FCD8E09E5ED96C1AFC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/c04B41ZGdGEMm7lfJmPfllrazGs.roa
Signing time: Mon 01 Jan 2024 10:30:07 +0000
ROA not before: Mon 01 Jan 2024 10:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50530
IP address blocks: 5.160.201.0/24 maxlen: 24
5.160.200.0/23 maxlen: 23
5.160.200.0/24 maxlen: 24
5.160.209.0/24 maxlen: 24
5.160.208.0/23 maxlen: 23
5.160.208.0/24 maxlen: 24
5.160.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:d8:a4:96:55:53:fc:d8:e0:9e:5e:d9:6c:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=734e01e3564674610c9bb95f2663df965adacc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:be:12:65:03:c1:c8:48:80:8f:c1:72:56:
69:60:4f:60:6c:9a:37:5a:9f:f8:62:d0:4b:8c:d9:
b1:75:53:64:d4:05:1a:cf:6e:dc:cc:c2:88:ae:78:
cc:2b:5c:a0:8f:d8:9c:ae:41:77:31:46:b8:09:d0:
65:f8:de:e2:a3:65:bb:fa:c2:6b:37:ef:4c:09:b0:
54:00:9f:71:0f:39:8d:82:8c:87:bd:f4:29:e0:28:
36:1f:05:50:e1:19:03:f5:ef:22:da:cf:50:14:3d:
1e:91:13:14:49:8d:7c:10:59:18:b7:0c:b1:37:c7:
46:fc:77:25:e4:18:44:c2:ff:6b:55:ff:3e:b9:1f:
a9:a5:58:3b:40:be:fc:1e:fd:e5:7b:fc:12:40:e6:
af:a9:55:f1:af:70:95:aa:f7:2a:05:e9:6d:b5:66:
a8:a8:fe:b5:8e:2a:ad:65:4b:4b:17:81:bd:1d:63:
27:e6:24:d5:a5:fe:dd:e7:be:b4:24:a7:73:ea:d1:
7d:ee:78:2b:67:de:53:b2:71:8c:d5:36:47:64:fe:
04:04:fb:31:62:96:c7:b3:5a:dd:23:49:0c:fa:56:
70:50:3d:98:13:02:92:05:bf:59:61:dc:a1:ca:e4:
a7:aa:54:6a:d1:8d:43:a5:ee:6a:2a:92:bb:50:32:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:01:E3:56:46:74:61:0C:9B:B9:5F:26:63:DF:96:5A:DA:CC:6B
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/c04B41ZGdGEMm7lfJmPfllrazGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.157.0/24
5.160.200.0/23
5.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
57:ea:d3:51:69:f3:ad:1e:39:5c:2b:11:f3:42:ef:5f:40:b4:
9f:6e:a9:45:d5:08:45:9e:12:c2:a3:d3:5c:93:0e:9a:78:2e:
ad:f7:34:7b:3f:17:88:45:26:b9:95:f1:e8:10:59:53:d6:a8:
d0:b8:2b:62:62:c9:e0:b7:0d:16:60:f6:6d:74:0d:7a:50:f5:
aa:f3:ab:82:c2:30:d0:d4:24:75:2b:67:2a:a4:a8:1e:3d:b3:
81:5d:19:7b:0a:b3:84:69:0d:d0:ea:ee:b1:9b:16:33:e7:d6:
09:b5:3c:fe:50:cd:75:20:61:eb:b5:fa:d4:fe:c7:d2:4c:0d:
91:c9:a6:48:e5:3e:65:5d:38:da:d7:0b:43:6f:49:b6:1d:3b:
bc:ce:0b:66:a4:ab:bb:67:4a:a1:cf:c7:7f:5e:04:74:b0:f9:
76:69:05:46:2e:c5:77:99:93:38:91:42:26:57:cd:1c:bb:e3:
a1:29:0c:e5:be:14:89:7a:9e:66:5f:6c:aa:8c:45:4d:4a:9d:
83:17:81:28:92:5c:97:c0:52:e7:7f:d8:c7:6c:38:fb:d7:e7:
51:23:a9:e2:39:7f:2d:ba:36:ca:6f:a1:35:22:a7:d0:b2:04:
a9:5d:bc:21:34:62:7c:1a:7b:58:e6:7c:9d:7c:37:0a:4f:77:
b2:81:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:54 2024 by rpki-client on console-fra.rpki-client.org