Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cNo1bCGYMiDkItxsJNuy7nB5twU.roa
File: cNo1bCGYMiDkItxsJNuy7nB5twU.roa (raw, json)
Hash identifier: SSNDQPvXkiqzrzPnH/lthWLwvUPA/OWFAGikxyJOauw=
Subject key identifier: 70:DA:35:6C:21:98:32:20:E4:22:DC:6C:24:DB:B2:EE:70:79:B7:05
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADB3A181D42431EFDA16DD0747471
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cNo1bCGYMiDkItxsJNuy7nB5twU.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 5.180.194.0/24 maxlen: 24
2a09:e1c1:f000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:db:3a:18:1d:42:43:1e:fd:a1:6d:d0:74:74:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70da356c21983220e422dc6c24dbb2ee7079b705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:8c:89:8e:9b:88:29:63:9a:38:10:c9:57:
2f:b3:d3:7e:38:00:9f:dd:1e:d0:b6:1a:48:a4:35:
30:4b:b2:91:6e:d4:4b:60:54:7a:26:f7:ec:1f:08:
8a:77:bf:14:18:05:fa:3e:38:68:89:47:1c:45:1a:
bc:6e:ec:d3:15:d5:f7:31:13:dd:f5:d7:6b:e3:04:
ee:de:b9:02:2f:6f:c4:00:c1:ed:57:6b:0b:7a:9c:
bf:eb:1e:46:3d:d6:22:16:e6:bd:e1:23:df:22:17:
f0:b4:8a:d2:cb:da:c6:f3:9e:54:f9:3e:89:bd:88:
2c:7c:87:d8:60:01:dd:97:3f:e1:4a:7b:db:b7:76:
db:03:67:99:a0:1f:9f:ed:10:e0:cc:0d:b0:2c:13:
81:d8:a2:52:2c:3a:b9:e9:5c:c8:09:e4:c7:f7:eb:
48:90:bd:0f:ed:c0:c6:e4:71:76:7b:bc:79:d7:bd:
d4:b3:38:15:e5:52:f6:b7:38:66:dd:c5:cf:b2:1e:
ab:86:5b:ef:b8:ab:41:49:4b:4a:7c:1b:ee:af:3d:
37:9d:88:3b:56:30:34:a9:47:9d:81:32:dd:02:86:
d5:04:5c:32:ec:3a:58:b0:cf:d6:79:24:f1:51:38:
c3:20:8a:58:a9:7f:60:16:4a:d3:4d:b8:2b:cd:ac:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:35:6C:21:98:32:20:E4:22:DC:6C:24:DB:B2:EE:70:79:B7:05
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cNo1bCGYMiDkItxsJNuy7nB5twU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.194.0/24
IPv6:
2a09:e1c1:f000::/44
Signature Algorithm: sha256WithRSAEncryption
01:dd:ea:28:c0:45:b9:f1:39:f7:a1:9e:74:a2:2f:67:a4:25:
b0:f6:52:ff:94:c4:f0:46:0b:23:a7:a8:85:ea:f5:6b:e0:23:
24:74:f7:98:62:ef:72:6b:9c:1b:36:ca:6b:39:b9:e3:5a:e6:
a2:42:72:24:3e:e8:4f:3d:91:35:55:14:38:55:bb:25:5c:f0:
5d:ab:89:15:49:8f:45:54:be:49:2e:be:08:9c:60:34:17:f1:
33:cb:2f:05:21:ea:04:db:93:fa:59:10:7c:ca:06:4b:1a:6b:
0e:77:54:12:f2:aa:27:7d:64:16:5f:09:67:4f:42:9b:f2:2f:
86:c3:51:50:25:59:19:e7:8f:60:20:a9:87:e8:26:82:a5:67:
04:6a:6d:a0:34:b0:3d:b8:45:78:55:2e:40:9e:1b:59:d8:75:
71:a9:ec:63:11:80:b2:cf:b6:f3:bc:94:a4:3e:98:03:39:db:
78:1b:a0:22:0f:8a:c1:87:11:f7:eb:09:28:f6:61:46:49:c4:
97:d1:07:66:db:e5:09:42:54:6d:75:38:8c:98:ee:97:9c:fe:
0a:7f:02:3f:6a:0b:0e:25:28:7e:04:35:af:ad:4a:cf:38:ac:
6f:40:26:9d:9a:d2:b6:ed:60:d2:0a:d6:c9:3e:ea:89:e0:fe:
10:41:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:05:25 2024 by rpki-client on console-fra.rpki-client.org