Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/m0hBA3E9dgfWnH_IoVjbCKpmk5o.roa
File: m0hBA3E9dgfWnH_IoVjbCKpmk5o.roa (raw, json)
Hash identifier: /6iwM0WhCO54Qtbk5xr9ub8PMn7T2Gc+qQ1XKH1kIsM=
Subject key identifier: 9B:48:41:03:71:3D:76:07:D6:9C:7F:C8:A1:58:DB:08:AA:66:93:9A
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018F1F873996FC86CA08DA8F38A15D81DCDF
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/m0hBA3E9dgfWnH_IoVjbCKpmk5o.roa
Signing time: Sat 27 Apr 2024 12:28:26 +0000
ROA not before: Sat 27 Apr 2024 12:28:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
5.102.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:87:39:96:fc:86:ca:08:da:8f:38:a1:5d:81:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Apr 27 12:28:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b484103713d7607d69c7fc8a158db08aa66939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:7e:bd:3a:84:f3:f8:e7:13:ff:d1:91:4c:
f9:7c:6f:7d:c3:67:01:a4:df:b4:3c:ba:25:3a:8c:
53:1e:ae:e8:88:08:90:1f:f6:f0:38:dc:79:23:db:
a7:e6:d0:74:2b:da:41:1b:99:2d:d1:4b:a8:17:f0:
c3:27:f0:98:dd:41:6a:55:ba:f1:67:8f:1a:03:94:
10:4d:a2:34:e2:5e:fa:19:94:ab:10:f3:98:78:52:
e8:99:74:34:3c:b0:16:63:ff:14:75:8f:f4:f1:e3:
fe:82:10:23:e9:78:a2:0d:6d:1a:fd:45:40:a8:12:
9a:ff:88:e9:3d:32:e5:d8:26:24:e5:b8:25:b9:99:
de:40:31:ce:ca:66:45:de:14:37:34:68:ac:56:83:
ab:3c:77:e1:e9:00:3a:a8:fe:98:ea:0f:be:6f:36:
89:d3:a1:cd:96:f4:f8:1e:c8:fe:39:45:92:ee:61:
14:e4:ed:ff:62:01:8c:e0:15:10:bc:af:54:ad:15:
44:67:f1:58:29:5b:a0:60:dd:15:70:16:6f:d0:3f:
99:61:91:6c:75:05:bc:76:a1:e9:3a:f9:1f:17:12:
32:4d:53:7b:4f:7e:db:2a:1e:7c:bd:a0:87:44:81:
32:39:bd:f8:96:74:71:f4:8f:12:22:48:22:24:44:
fc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:48:41:03:71:3D:76:07:D6:9C:7F:C8:A1:58:DB:08:AA:66:93:9A
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/m0hBA3E9dgfWnH_IoVjbCKpmk5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:55:67:a7:33:9f:71:33:74:41:76:98:67:81:d3:fd:83:4d:
fd:10:d6:a8:25:a0:f4:5b:06:f4:6e:a0:c3:aa:45:9d:96:84:
15:eb:7a:3f:35:bb:92:a4:58:da:6a:bb:76:2c:01:6c:cd:6a:
73:98:d7:6b:f4:bc:46:56:2b:f9:e3:7a:cb:c4:31:44:3d:6b:
9d:82:01:ea:60:4f:9f:b1:f2:ba:1a:2b:8f:82:1c:9a:44:c0:
b5:15:c8:95:90:ec:64:43:56:d8:ac:9b:e5:a0:a3:52:21:e7:
e7:ca:a0:23:d9:c5:05:26:d7:30:dc:40:0b:aa:de:76:51:77:
cd:91:aa:19:dc:bf:d2:dd:64:7c:ed:f3:be:a8:04:39:c6:d1:
b3:98:ff:95:31:aa:46:cc:a2:a8:55:ae:79:10:48:03:f7:37:
c4:03:3f:b5:da:e5:ba:f9:3c:eb:d9:04:c0:d7:51:3d:49:28:
81:58:d3:25:c5:cd:fa:be:2f:b3:55:e6:a6:96:ae:8d:0a:01:
e8:82:3f:95:8d:32:10:b3:c7:c2:ff:68:90:52:fa:d0:8a:a6:
08:54:8f:7f:67:c1:46:0e:1e:eb:ba:46:86:a2:8a:32:aa:9b:
37:82:95:37:e8:af:31:72:cf:a2:a3:dc:4c:77:38:bf:e5:bc:
9d:60:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:30:30 2024 by rpki-client on console.sobornost.net