Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1wBalx9WDLcBACbpU9hwC1crxOM.roa
File: 1wBalx9WDLcBACbpU9hwC1crxOM.roa (raw, json)
Hash identifier: E+AQusnxoOIWMPpr3gYfcxHhS/KWBayHugfHAUV9qrQ=
Subject key identifier: D7:00:5A:97:1F:56:0C:B7:01:00:26:E9:53:D8:70:0B:57:2B:C4:E3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BBECB6DE06E9614863339CD8ABE8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1wBalx9WDLcBACbpU9hwC1crxOM.roa
Signing time: Mon 01 Jan 2024 06:29:41 +0000
ROA not before: Mon 01 Jan 2024 06:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57747
IP address blocks: 5.180.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bb:ec:b6:de:06:e9:61:48:63:33:9c:d8:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7005a971f560cb7010026e953d8700b572bc4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:08:28:80:78:ed:0b:58:16:90:2e:f3:73:
55:8c:63:42:91:3b:88:e6:16:c6:fe:26:fa:6f:44:
54:c5:b1:32:06:91:c7:39:f3:29:ab:cb:81:75:e9:
6f:94:43:c4:4f:bf:fa:b2:d4:f5:b5:b2:b9:eb:d9:
a7:03:2d:ea:11:a4:54:9d:77:97:ee:38:59:12:14:
61:94:68:77:f2:c9:7a:00:71:21:1f:87:3d:c2:e7:
dc:cb:de:3c:c1:1b:79:c9:ec:e2:f5:2b:a5:47:08:
1a:66:fb:19:96:7f:8e:9e:b3:12:f6:2b:32:79:b5:
22:b0:68:ba:6d:59:66:a7:09:e9:90:7e:50:8e:f5:
b2:f1:34:bb:07:98:dc:bf:5f:bf:fe:72:dd:c0:21:
b4:74:89:99:dc:32:c3:ba:4d:86:53:75:04:39:8f:
25:e6:4e:b1:c6:c0:be:33:a4:74:5f:f5:87:5d:1a:
5e:32:2c:8d:31:7d:d1:be:24:29:06:49:9a:a4:82:
14:37:67:14:c7:f0:28:7c:45:de:de:aa:43:8e:f2:
50:99:e4:a6:01:df:a5:9f:e9:d4:41:62:4a:b0:31:
5f:bb:3d:20:e8:1a:21:a0:00:f5:2e:be:d9:db:e5:
f9:d6:27:a3:23:4b:02:ac:4c:5e:45:60:43:3d:9a:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:5A:97:1F:56:0C:B7:01:00:26:E9:53:D8:70:0B:57:2B:C4:E3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1wBalx9WDLcBACbpU9hwC1crxOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.120.0/23
Signature Algorithm: sha256WithRSAEncryption
49:69:f2:14:a1:53:3f:b1:e7:e1:cc:8e:81:11:3e:4e:11:ee:
b0:f7:e8:fb:96:df:c4:6b:e9:f6:80:a9:c8:19:29:56:7e:d9:
8e:99:60:91:f9:51:cd:cd:8d:5e:0d:42:dc:db:e9:ec:16:3e:
ff:5a:94:95:b3:ae:c3:a7:78:3d:9a:c4:c5:b8:c6:3a:ba:78:
86:ae:66:a2:25:f9:fe:50:9c:3a:98:74:83:20:d8:3d:70:9e:
b0:9c:48:e6:17:c3:39:9f:8a:d3:e8:ba:b8:f3:24:bd:00:6d:
c6:df:23:ab:f1:3a:e8:f6:72:37:22:82:47:b6:7e:ca:d5:9c:
77:4b:e4:8b:81:30:3b:ff:a0:53:06:e2:4e:95:66:c3:00:5f:
0f:75:45:ec:09:9a:fb:bc:3d:c6:ec:0c:72:36:b4:72:e4:a0:
3b:13:f6:4f:e7:6c:37:e8:26:1a:61:2d:44:9d:13:37:fb:29:
9c:dd:4d:0c:e4:c0:af:1a:0a:a2:41:eb:a7:9e:88:d2:70:cb:
8b:67:b6:fb:51:d4:31:46:8f:01:cb:36:73:97:4d:a4:cb:bd:
9a:5e:05:63:54:b1:4f:30:7a:8c:38:50:df:90:b4:8a:fb:fb:
65:56:0d:2f:69:77:62:ae:b9:8d:1f:7c:f4:7f:63:ce:d3:4a:
b1:83:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:42:35 2024 by rpki-client on console-ams.rpki-client.org