Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/tmbLmj6zRU9xi4fGaI376PYEuc8.roa
File: tmbLmj6zRU9xi4fGaI376PYEuc8.roa (raw, json)
Hash identifier: QIh/p5B/UjsDD0JWB68wXL0xStTxdTAo2NGQ/Lkzd4o=
Subject key identifier: B6:66:CB:9A:3E:B3:45:4F:71:8B:87:C6:68:8D:FB:E8:F6:04:B9:CF
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492DD665D6C9E2F189450A6CCDB4410
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/tmbLmj6zRU9xi4fGaI376PYEuc8.roa
Signing time: Mon 01 Jan 2024 10:30:08 +0000
ROA not before: Mon 01 Jan 2024 10:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59797
IP address blocks: 5.160.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:dd:66:5d:6c:9e:2f:18:94:50:a6:cc:db:44:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b666cb9a3eb3454f718b87c6688dfbe8f604b9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:5c:71:e3:8b:f4:5c:ba:29:b2:b2:37:5d:
ce:69:a1:bc:de:65:46:6c:b2:6e:be:ed:26:b4:c6:
0e:05:fa:f3:5a:1b:2e:d3:80:2f:cd:54:19:ef:70:
18:57:01:45:d9:71:90:41:a2:ef:82:f7:09:eb:17:
26:50:0f:56:f5:7a:5f:07:9d:bf:88:6e:41:fe:ef:
0d:cf:e8:ca:7f:4f:a0:4f:25:dd:c6:7a:af:9d:d1:
d4:88:63:fd:fa:51:c2:39:eb:0d:e2:f8:10:c1:14:
33:d8:a0:6f:35:8d:f2:55:ba:1d:a8:e3:96:67:6a:
17:67:ec:d8:ac:c9:75:94:17:ad:56:ea:33:96:67:
10:04:68:1d:87:35:21:80:e1:b3:fa:76:c9:c2:0c:
8a:31:bb:ee:6f:33:ca:34:79:6f:43:67:6a:08:14:
e7:2c:08:a9:ee:2f:59:9d:e7:4b:71:6f:2a:43:56:
d8:22:d3:0b:25:df:9e:2e:68:0a:1f:d7:40:55:16:
28:b3:85:15:ca:16:39:15:43:da:33:b6:1e:16:30:
1a:fb:ea:9d:33:12:51:28:ca:f8:13:eb:1d:4f:1f:
8a:d8:32:68:79:6b:f9:9c:cf:94:c7:52:d5:b3:30:
dc:c3:e1:56:9a:02:40:2a:1e:a7:42:a1:29:01:f3:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:CB:9A:3E:B3:45:4F:71:8B:87:C6:68:8D:FB:E8:F6:04:B9:CF
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/tmbLmj6zRU9xi4fGaI376PYEuc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.194.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f8:87:0b:47:f4:0e:1f:19:ec:1a:04:36:71:b1:9c:0a:7f:
7b:dd:ee:f1:28:11:7b:95:6e:50:9f:3a:7b:7d:9f:a5:2f:88:
cd:09:e8:de:db:4c:ef:08:c7:f1:3b:ce:63:02:f9:01:86:df:
6d:02:34:e4:46:d5:ba:e6:3c:89:f0:2d:41:1a:33:10:ef:d2:
64:a9:66:38:c1:61:e6:85:c9:1b:eb:39:a3:58:7f:e6:d4:f7:
1e:cd:b5:9a:fe:e6:54:8e:0e:dd:10:10:9b:f4:8d:eb:00:5b:
7e:ef:8e:ca:9e:cb:f1:3c:c8:0a:bc:4e:b0:9e:77:00:24:1d:
4a:09:7e:76:1c:0e:6d:57:e5:37:42:59:f9:1a:50:6a:66:4b:
f1:81:d1:35:0e:74:60:ac:8f:ab:98:36:50:df:3d:73:f9:30:
a3:53:0c:e6:b9:d7:5b:08:e7:5a:74:9f:ae:7a:d3:7f:62:9a:
2f:ad:25:a4:7c:55:aa:08:7b:5c:0e:dc:63:7d:62:ae:03:cf:
85:82:e6:34:17:6a:c1:c2:a1:26:93:d7:59:1a:ff:28:79:35:
92:5c:f5:c3:50:a9:73:86:a5:ed:25:12:a1:6f:09:5e:d8:21:
f9:20:a1:32:10:4c:e6:f4:c8:7b:9a:ac:9a:30:31:df:60:7c:
02:e1:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:16 2024 by rpki-client on console-fra.rpki-client.org