Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hOyrgKtJf65D2pR64Bwy8GXeF_Y.roa
File: hOyrgKtJf65D2pR64Bwy8GXeF_Y.roa (raw, json)
Hash identifier: sffik5Lx1G0lBaRR8FMe/Gif39FclUaYqgL44RIlloQ=
Subject key identifier: 84:EC:AB:80:AB:49:7F:AE:43:DA:94:7A:E0:1C:32:F0:65:DE:17:F6
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DCBCA240E94DDD32A985245DC675
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hOyrgKtJf65D2pR64Bwy8GXeF_Y.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59501
IP address blocks: 5.160.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:dc:bc:a2:40:e9:4d:dd:32:a9:85:24:5d:c6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84ecab80ab497fae43da947ae01c32f065de17f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:64:f5:cb:24:15:34:2e:47:c2:10:84:7e:
d6:cc:45:00:44:7c:2a:e3:d9:7e:bf:04:11:7b:d7:
58:11:c7:cd:a2:9b:a4:43:14:a8:c5:d9:54:91:85:
f0:bd:00:3f:48:ac:51:54:19:a9:da:bd:f3:a0:4e:
30:61:9d:2c:75:41:a2:38:b9:4d:7c:53:e5:ed:f2:
b5:67:a1:e2:f7:99:e2:47:67:d5:47:ba:01:29:a1:
a0:1e:10:36:ad:05:f8:72:12:9f:b2:40:8b:c2:df:
ad:c4:64:e6:dd:01:0e:b7:6f:e5:bf:84:6d:75:8b:
26:e6:7a:b2:47:9c:e7:21:07:83:98:92:ff:3b:d5:
91:31:6c:06:7a:45:11:dd:da:90:a7:c6:cf:8f:ff:
f5:cd:2d:dc:8d:a7:68:26:05:76:cc:3c:b6:84:33:
1c:8c:2c:0e:72:5b:37:c2:ee:c6:77:ca:6b:b6:e5:
f2:56:a7:b8:ed:1d:01:17:7e:e8:67:46:fa:f2:36:
74:44:fd:ab:a6:3c:19:4e:ab:0e:fd:66:d0:5e:17:
7e:d9:05:e9:0d:94:da:00:06:48:ea:33:30:1d:dc:
ff:29:35:71:1d:ea:be:5e:46:0f:3d:e8:fb:54:f6:
f7:ae:da:bb:54:79:f5:fd:c4:80:fc:95:c1:70:92:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:AB:80:AB:49:7F:AE:43:DA:94:7A:E0:1C:32:F0:65:DE:17:F6
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hOyrgKtJf65D2pR64Bwy8GXeF_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ba:0d:dd:a9:0d:ec:01:b3:b2:cd:69:61:09:14:94:20:c1:
e6:25:04:7b:c7:52:f7:9d:e6:e3:a3:c2:05:52:0b:44:10:73:
fe:01:9d:dc:13:47:0f:27:8f:b9:ca:d2:4d:a8:42:ac:af:da:
18:b7:3b:9c:a9:80:7a:a3:78:bb:f4:fb:23:89:f5:16:06:fc:
a1:d4:e1:b9:65:01:36:26:cf:84:a1:f6:03:c8:bb:a7:ec:51:
f9:1a:e8:be:45:4c:91:f5:58:8c:d8:0a:e6:09:49:65:e0:b6:
63:d4:34:0f:76:91:6a:e4:75:b1:25:38:9d:d1:52:0e:a3:40:
ff:91:79:c6:7c:7a:d0:7f:e9:f3:b1:05:06:8a:65:ae:16:b9:
b7:b6:9c:33:d5:5f:cd:f6:2e:1e:5d:4f:fc:f4:3d:49:a4:ef:
b5:84:f8:fe:e8:89:9d:16:9e:17:f0:06:e7:28:5d:93:8c:cb:
4c:46:57:d6:21:a8:51:97:61:88:64:21:90:d0:89:01:31:dd:
ab:09:e6:8b:35:cd:71:cf:60:6b:b7:60:1f:cc:1c:3c:a2:fa:
25:82:ce:d0:c9:b8:b8:02:7a:c9:9d:75:6a:1a:84:d2:ed:0f:
b6:e2:5c:6e:e2:20:60:94:43:b0:8f:91:f3:f1:85:2d:ca:35:
10:69:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:54 2024 by rpki-client on console-fra.rpki-client.org