Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hVpexnWYq9ViDtalZ-5TOlN5C8s.roa
File: hVpexnWYq9ViDtalZ-5TOlN5C8s.roa (raw, json)
Hash identifier: pmTPTEJGzeVqkdHmhGRd+Arlph9gvcatW7skH2c7uAw=
Subject key identifier: 85:5A:5E:C6:75:98:AB:D5:62:0E:D6:A5:67:EE:53:3A:53:79:0B:CB
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DD31BCCA51113D0C9F361EA08F23
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hVpexnWYq9ViDtalZ-5TOlN5C8s.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59757
IP address blocks: 5.160.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:dd:31:bc:ca:51:11:3d:0c:9f:36:1e:a0:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=855a5ec67598abd5620ed6a567ee533a53790bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:e6:ab:24:e1:ba:d2:ed:f3:66:cf:d0:28:
74:e7:40:70:70:10:7f:ab:29:98:72:c7:09:5e:95:
91:65:6c:5e:47:41:7c:66:40:38:5b:49:3a:9b:cf:
20:34:72:34:38:e3:b8:5b:54:6e:22:13:16:a5:20:
80:af:c1:e5:49:22:0f:1d:c2:fc:ce:d2:8d:ab:ef:
3d:ef:18:98:70:6d:71:7a:8c:b1:00:4e:6d:34:7a:
6f:72:1c:67:05:6c:c6:0c:52:4d:cc:b8:16:9c:a1:
68:0b:01:9a:53:96:15:43:61:31:a7:2f:38:04:3a:
1b:4d:23:1c:2a:64:d0:36:9a:76:c8:f4:c1:7e:a7:
28:eb:0a:c2:46:04:02:b4:8f:0b:31:c4:3a:d4:99:
59:59:ab:9d:e4:d3:52:72:62:62:7b:73:d6:fb:f0:
d7:27:58:34:6c:e3:3f:74:d4:f0:81:48:f7:60:a7:
98:3e:47:15:3a:c2:6e:54:e6:5d:c7:99:a6:b4:08:
b6:46:5a:5c:34:fc:a4:4d:fa:c9:e1:57:1e:09:1f:
d8:05:81:67:52:18:80:dc:15:e0:1d:aa:47:12:a2:
52:42:7c:79:fa:70:50:17:6c:f3:1c:c8:93:64:aa:
cb:fb:5c:f4:59:24:6b:91:66:62:05:0d:60:b7:ee:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5A:5E:C6:75:98:AB:D5:62:0E:D6:A5:67:EE:53:3A:53:79:0B:CB
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/hVpexnWYq9ViDtalZ-5TOlN5C8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.216.0/24
Signature Algorithm: sha256WithRSAEncryption
83:91:55:ac:f4:d8:30:0c:10:22:f6:82:cc:29:af:8c:3d:8c:
3d:eb:c4:6a:c2:4c:bf:d2:33:9f:0d:73:01:f6:16:2a:2b:df:
ab:3a:74:34:7a:0e:d5:e7:94:e3:08:88:7c:24:cf:d4:67:96:
3b:59:35:f3:fe:53:e4:13:5d:bd:fc:0d:70:12:cf:5f:d8:af:
d0:bb:7d:58:59:7d:4a:0c:ce:88:6c:9e:3d:10:14:df:5c:cd:
10:61:28:09:83:4f:08:d3:6c:f3:fe:2f:8e:d7:d3:97:e4:57:
61:93:96:42:a8:30:5b:94:2f:28:d3:73:9a:13:d0:d7:ce:06:
ef:a4:fe:39:83:34:bc:0a:a2:e5:4c:ad:ec:1e:08:f7:05:87:
21:0e:ee:e4:60:e8:d3:f6:66:fb:09:d2:d1:40:fc:30:09:d3:
11:c9:c9:71:39:a6:c1:5a:c7:67:e9:7c:6c:ea:c4:ea:b6:61:
1f:fe:35:7f:66:6c:10:de:99:53:23:96:55:31:cf:50:95:76:
0d:c5:17:91:10:f5:d4:8e:a7:88:5e:d1:49:3d:19:f6:17:e1:
b6:d1:9a:d9:54:59:6a:62:3e:78:48:86:c2:ad:e3:4f:6c:60:
f4:55:50:51:c3:f1:34:1e:0f:70:02:79:d3:db:fe:ef:c2:15:
ec:67:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org