Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa
File: 3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa (raw, json)
Hash identifier: 0YI1GCFO83+XAPwsaYqpDxr2GgHzNz2wso9ALQPXTRA=
Subject key identifier: DE:10:20:06:F0:C6:48:C4:FF:97:DA:31:DC:BF:E9:F6:37:FE:4F:D0
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01942143CED1F80E7B425FEAC20759C9F94D
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62318
IP address blocks: 5.160.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ce:d1:f8:0e:7b:42:5f:ea:c2:07:59:c9:f9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de102006f0c648c4ff97da31dcbfe9f637fe4fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:d4:43:70:60:35:24:92:7d:34:ac:9a:ed:
6b:6b:d4:a8:21:60:aa:2b:5e:f6:5b:75:c3:ab:1e:
40:e9:56:21:76:a8:e8:80:e8:a7:48:6e:ca:35:81:
a5:ba:63:3b:87:9e:1a:0d:06:52:3f:ce:c5:ba:ea:
04:fa:da:6e:32:75:41:34:64:2d:2c:8a:a3:26:38:
f5:cf:f7:cf:e2:c6:bd:a8:ba:84:d2:54:45:f8:8e:
95:a7:dd:36:e2:c3:16:99:73:06:ba:42:e3:b6:d6:
7a:ad:c9:6d:e2:97:c3:fb:63:18:4f:7a:34:71:c5:
56:c1:dd:6f:88:c0:f4:aa:80:d9:a5:3c:24:10:39:
6e:fd:dd:f5:6d:c7:53:01:37:6b:07:55:9b:28:71:
f8:70:d0:d7:3c:4b:ff:34:9d:c4:68:ea:8e:a1:f9:
12:8c:0a:f8:7b:15:d4:40:da:f0:b9:ef:f9:0d:09:
f5:fd:4b:fd:c0:0e:c4:42:38:67:d9:ca:7a:03:9a:
21:95:9a:c2:06:0c:c1:a5:57:2c:d4:12:03:82:ed:
97:fe:b6:54:1e:7d:a7:41:09:3f:49:f9:c7:3e:ed:
8c:30:ab:b3:91:65:3c:21:e8:35:58:e3:22:ba:4b:
56:ab:d1:32:45:83:40:96:79:9a:25:33:7d:3d:d9:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:20:06:F0:C6:48:C4:FF:97:DA:31:DC:BF:E9:F6:37:FE:4F:D0
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/3hAgBvDGSMT_l9ox3L_p9jf-T9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c5:ad:0c:27:d5:81:33:56:f6:d6:34:81:6c:1f:fe:2c:06:
e5:a9:1c:77:08:ae:0c:1e:c0:19:10:20:54:1a:48:ec:a9:47:
ea:c0:cd:a3:92:a8:19:3e:54:3e:f6:f9:6b:47:82:28:54:d4:
64:6f:54:74:d9:47:06:05:92:84:1e:88:cd:6e:74:bf:ae:cb:
63:07:53:d2:2e:e7:58:63:4f:8d:66:5d:ea:c1:de:92:ab:4a:
3a:55:02:b8:1f:72:47:59:b7:a5:9f:a6:00:eb:49:f8:9c:42:
5a:f2:01:94:60:33:81:25:d4:94:af:dd:c2:7a:e6:65:11:a2:
a7:83:62:7f:74:b4:b5:d5:8c:9d:68:00:c2:8c:47:d3:ac:67:
7d:c8:1b:d2:ac:f3:b6:2c:b5:2b:d8:b1:82:6a:4e:cd:7e:a2:
02:ce:64:ad:37:d9:5a:c2:18:67:79:78:7c:d8:ce:de:e5:5e:
a5:1c:13:10:eb:8a:c5:cf:09:d6:11:a3:38:53:f1:c5:50:78:
fe:46:00:ae:95:1b:36:55:25:44:70:01:9e:24:52:b4:85:2d:
72:40:5a:08:35:2b:dc:0d:e2:33:fa:04:c4:eb:a4:a9:64:b5:
20:d1:7e:ba:1b:c5:0c:ae:e9:61:39:94:b1:00:5c:99:dd:9b:
41:99:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:32 2025 by rpki-client