Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/iv46uoFKHxEMiBGQZ1ITX2tUDqQ.roa
File: iv46uoFKHxEMiBGQZ1ITX2tUDqQ.roa (raw, json)
Hash identifier: vtySyn+eHTiHbGvbrtdC0neaQ5OacT8sWUVJpMY/lzQ=
Subject key identifier: 8A:FE:3A:BA:81:4A:1F:11:0C:88:11:90:67:52:13:5F:6B:54:0E:A4
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E2D8DE54CE0C400EFA317753676F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/iv46uoFKHxEMiBGQZ1ITX2tUDqQ.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62265
IP address blocks: 5.160.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e2:d8:de:54:ce:0c:40:0e:fa:31:77:53:67:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8afe3aba814a1f110c8811906752135f6b540ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:04:3d:8f:22:97:5b:45:13:2e:e1:0c:82:
7b:7a:ec:40:c1:f2:9b:e9:d4:78:2d:d2:e3:e8:51:
41:01:a0:3a:96:e8:e4:68:dc:9a:3c:b4:02:54:b7:
40:8c:f8:63:47:53:66:f4:63:ac:e6:db:70:47:ce:
e8:32:61:cd:87:63:2d:a8:2d:e6:26:6f:71:30:f0:
74:5b:fc:9e:ac:e7:30:37:38:5e:de:27:d1:1e:87:
a8:f4:50:81:d6:43:ca:37:e8:7a:bb:b9:9f:f1:40:
9c:98:08:22:f8:ca:55:d6:d4:18:f2:05:80:46:77:
80:59:07:19:f1:30:7d:64:c1:37:61:59:d8:c0:a8:
1c:bf:ee:01:12:90:b1:14:ee:1f:49:13:b1:17:ae:
2b:c8:97:fa:52:70:d4:9b:cd:df:de:85:7c:1f:7f:
8b:e5:a6:c7:76:3b:27:2b:9f:ec:94:7d:1e:fe:35:
17:55:82:a8:ea:b0:bf:b7:50:9b:a9:23:d0:5a:17:
af:ee:c2:8e:86:0b:1e:16:32:72:d4:01:eb:94:34:
d9:fe:9b:b8:f5:6b:bd:a2:b7:15:04:1d:62:52:a2:
99:27:09:b4:75:9d:8c:6c:45:c9:03:3c:43:1d:76:
d9:94:68:85:62:84:9b:ff:3f:dd:1d:59:8c:51:30:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:3A:BA:81:4A:1F:11:0C:88:11:90:67:52:13:5F:6B:54:0E:A4
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/iv46uoFKHxEMiBGQZ1ITX2tUDqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.222.0/23
Signature Algorithm: sha256WithRSAEncryption
14:ae:53:d5:91:c4:6b:b8:b5:8b:0b:55:26:41:a2:cc:4c:de:
c0:6f:24:ee:44:55:97:fb:4b:10:11:f0:e7:90:ee:d6:52:3e:
a4:33:9c:62:77:bd:91:98:b5:93:ee:5d:a5:02:a5:07:fb:97:
1a:f9:ac:ae:c5:17:de:db:09:6c:76:13:67:5f:3e:2e:ee:98:
24:92:48:32:ec:17:d7:18:7f:58:4c:5b:33:90:ff:46:de:04:
a9:58:1d:07:ff:8a:4e:01:90:b5:24:e8:d1:43:8c:3d:50:ad:
c0:48:b4:22:94:98:87:b3:a7:d1:0e:fd:1f:81:7e:c2:a1:9b:
37:90:ad:32:c7:1b:b5:a2:7b:79:e4:8c:83:7f:30:ff:ab:56:
4a:05:5b:70:0f:ab:f8:c8:f6:c4:20:d1:e0:0a:ed:ab:9d:2c:
ef:a2:df:4b:5d:44:3c:a5:5c:a7:c7:68:44:3f:3e:6b:9c:9e:
b9:2d:43:57:05:d8:7c:57:54:83:a2:51:a5:54:1f:94:34:0e:
39:58:ae:d9:4f:23:b0:fd:9c:b1:1c:ce:33:c1:0a:4f:87:29:
f7:33:59:2e:83:f4:fb:20:2a:5f:28:d6:f4:2e:b8:ed:1b:06:
ae:07:a9:21:9e:aa:3f:e5:89:e2:a1:12:9a:f7:45:69:4b:cb:
20:7b:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:25 2024 by rpki-client on console-ams.rpki-client.org