Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/x2cwY4cQcrc37G-z0MX7i25wGuM.roa
File: x2cwY4cQcrc37G-z0MX7i25wGuM.roa (raw, json)
Hash identifier: S/Cwxk8uavaMKgHuEbpo69dnTIukw0fCY7E4xxSFtr0=
Subject key identifier: C7:67:30:63:87:10:72:B7:37:EC:6F:B3:D0:C5:FB:8B:6E:70:1A:E3
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01927FE476DC17A2EA79951C47D8FE325EBC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/x2cwY4cQcrc37G-z0MX7i25wGuM.roa
Signing time: Sat 12 Oct 2024 08:42:12 +0000
ROA not before: Sat 12 Oct 2024 08:42:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209544
IP address blocks: 5.160.142.0/24 maxlen: 24
46.209.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:e4:76:dc:17:a2:ea:79:95:1c:47:d8:fe:32:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Oct 12 08:42:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7673063871072b737ec6fb3d0c5fb8b6e701ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:8d:85:3f:2c:27:66:c7:ff:12:b4:11:2f:
7d:1a:b9:37:8b:be:b1:00:68:9f:54:c8:f3:a0:a1:
21:ac:ad:82:5e:a0:78:ea:3d:8f:18:e5:9e:18:d2:
30:27:9a:4b:50:e0:e0:97:c4:53:7c:52:5a:ab:69:
fa:56:59:c6:ba:51:09:03:91:ee:c2:f8:14:e2:96:
69:c4:2c:97:89:3c:f3:18:85:b1:ae:75:13:fb:5b:
e3:a6:26:1e:72:46:19:b2:81:b0:e4:98:38:6a:f6:
49:53:0b:aa:c4:94:ab:05:46:be:e7:39:f5:58:95:
62:e5:f2:2a:a8:be:6e:8f:3a:25:a8:b7:e9:57:86:
25:4c:3e:dc:2d:cb:bb:73:0a:36:6a:a9:9c:c1:72:
92:f2:35:a0:1d:3e:a2:37:04:fd:bb:6f:9a:ed:df:
1b:48:90:23:80:28:21:6b:5d:62:e3:f3:fa:db:9e:
3b:2d:35:67:39:f8:8e:73:de:a5:9f:6b:2f:1e:29:
8f:7d:2c:be:15:c2:f5:6c:ae:96:11:44:f7:a0:98:
ef:47:72:6a:4c:90:58:91:c4:98:a8:f0:22:a2:6e:
16:d4:ef:5b:0d:86:79:af:f4:0b:1f:08:9f:8f:b4:
4a:34:55:1c:c3:b0:b8:bc:ff:e0:ec:04:a3:84:78:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:67:30:63:87:10:72:B7:37:EC:6F:B3:D0:C5:FB:8B:6E:70:1A:E3
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/x2cwY4cQcrc37G-z0MX7i25wGuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.142.0/24
46.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
04:25:71:58:90:c8:89:49:c4:ef:da:f1:cc:1a:3f:bb:0b:63:
10:24:3e:03:8d:9c:77:25:91:63:48:98:a9:25:a3:a9:74:42:
08:68:e9:15:18:de:36:b9:dc:35:2b:c2:e4:f6:2f:cb:e2:d7:
c4:8a:9f:cb:74:43:23:07:9d:6d:e7:43:61:cb:48:b4:e3:c5:
da:b6:2e:de:c3:0a:a8:cf:67:49:27:ff:8f:97:dd:fd:a6:b7:
3b:62:ea:0b:b4:bb:06:af:7c:5d:e3:b5:34:7b:b9:71:1a:97:
3b:8b:b7:b4:27:49:7b:2d:f1:30:1b:24:78:da:ad:3b:94:36:
6f:eb:46:db:6d:f1:4f:13:07:2f:fa:1e:e2:ec:29:95:4a:a9:
d3:2f:70:1e:31:67:9f:c7:73:7c:a2:cb:fa:c6:02:0c:75:5d:
8f:70:00:d6:e0:98:41:53:13:1d:24:83:bf:35:77:79:63:7b:
1d:16:bd:b2:b2:30:59:d4:3e:61:f4:6a:9d:fc:ce:98:af:7b:
6e:1a:13:30:1c:61:05:16:74:e5:56:9e:3e:88:e2:c3:9f:82:
11:10:a2:01:df:21:d0:c1:6d:66:1a:f0:92:2d:0b:19:ff:b1:
2d:3a:7e:00:d5:62:1a:42:da:76:78:b7:67:ad:73:e3:3d:6d:
79:0a:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:22 2024 by rpki-client on console-fra.rpki-client.org