Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/xigKcTzjiWJAgNGvF7PaTY-yaWE.roa
File: xigKcTzjiWJAgNGvF7PaTY-yaWE.roa (raw, json)
Hash identifier: x/MEu5jpef4PFMk+5jDdaL1DvuNxqvlX0kqD6jzgsHA=
Subject key identifier: C6:28:0A:71:3C:E3:89:62:40:80:D1:AF:17:B3:DA:4D:8F:B2:69:61
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018CC492E042574A5BC8FBD96B1444607B28
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/xigKcTzjiWJAgNGvF7PaTY-yaWE.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60932
IP address blocks: 5.160.198.0/24 maxlen: 24
5.160.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e0:42:57:4a:5b:c8:fb:d9:6b:14:44:60:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6280a713ce389624080d1af17b3da4d8fb26961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:b7:0b:a1:c0:b7:c9:2e:d6:9e:be:dd:1f:
b5:c7:69:05:ed:72:ca:3c:c7:5d:5f:27:10:61:a0:
e0:11:34:59:10:bf:b7:02:93:5a:4c:0c:01:13:2f:
49:dc:a9:e6:c4:2d:c7:04:2c:cb:ec:02:b2:c8:10:
f8:00:25:e7:d7:27:b7:f2:62:ff:2f:90:1d:39:1f:
0a:07:94:2a:28:fe:06:9b:a8:ef:d7:ae:b7:75:41:
01:7c:a6:89:2d:72:4f:50:2b:78:4e:3f:e2:d0:04:
00:f5:c5:b0:b4:74:23:6f:a5:e5:f2:a4:48:4f:55:
46:ab:db:55:b8:6f:12:5f:80:4d:88:00:e2:c7:d2:
44:39:71:b8:95:db:09:f2:31:b9:c2:dc:2e:fe:1c:
d7:52:c3:7d:a2:36:de:e1:d4:41:eb:ed:06:73:a6:
56:48:01:c6:9d:08:cb:0a:6a:05:a8:21:60:7e:3e:
be:93:90:f2:2c:40:09:a2:b4:f9:93:29:cb:a5:f2:
03:56:da:1d:58:61:25:21:fa:a9:e3:fc:2c:d9:b1:
af:1b:22:c9:7c:00:ce:36:b8:e6:38:c2:c3:f1:bb:
a1:cc:01:1f:2d:97:5d:90:10:4c:ac:1f:2d:c6:85:
03:e8:00:12:67:e7:94:3f:c7:51:65:1f:db:d5:67:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:0A:71:3C:E3:89:62:40:80:D1:AF:17:B3:DA:4D:8F:B2:69:61
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/xigKcTzjiWJAgNGvF7PaTY-yaWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.153.0/24
5.160.198.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:6b:bd:e5:30:b1:34:87:cd:a8:ce:be:4b:d9:56:45:a8:
42:24:e5:f1:f1:f4:3a:fb:2a:c0:84:ba:b1:29:15:70:4c:c0:
bd:37:73:a8:1f:33:90:17:26:cb:0d:52:8b:50:c0:26:73:58:
6f:2a:03:8d:15:60:ae:61:cf:a9:04:ed:e4:b7:0a:6c:64:d3:
be:b2:8d:1b:c9:e9:52:48:b9:1a:c1:ea:c9:ce:cf:cd:c8:a7:
08:fa:aa:3a:94:66:a8:4d:67:bc:4a:a2:43:67:7a:7b:95:8a:
b0:10:e8:33:f0:ff:3d:5e:e0:28:62:63:02:2b:04:c7:d6:0c:
7b:5d:7b:2c:fa:45:ce:ed:cf:68:57:35:7d:37:b7:13:6e:82:
4f:32:78:79:d8:42:14:f4:5e:67:af:24:d1:3a:6f:00:98:ed:
2b:a5:c2:b8:18:e8:68:9f:df:a7:9d:2d:08:57:1d:30:20:8a:
ce:3e:b5:fb:b0:3e:88:3c:de:6a:ad:52:e6:28:53:f7:37:6a:
b7:bc:aa:89:93:73:fe:8e:15:cb:3d:97:d6:5d:5c:ff:09:3e:
f3:39:e7:87:1a:b9:cd:69:9b:18:1a:15:fa:79:1b:9a:8a:97:
26:01:91:5d:bb:b7:5b:39:42:9c:4e:32:bd:63:e0:ea:5d:d6:
19:13:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:25 2024 by rpki-client on console-ams.rpki-client.org