Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/aeES5Pz3Flbk0x2MA5gW5EKUff4.roa
File: aeES5Pz3Flbk0x2MA5gW5EKUff4.roa (raw, json)
Hash identifier: vl7NPaxW4l0Msf7S0cQCmC6bdYTw7KB7bGH33n5o2hM=
Subject key identifier: 69:E1:12:E4:FC:F7:16:56:E4:D3:1D:8C:03:98:16:E4:42:94:7D:FE
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 018F5CE0A39BF67C27EDB635A6C555EFB183
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/aeES5Pz3Flbk0x2MA5gW5EKUff4.roa
Signing time: Thu 09 May 2024 10:22:56 +0000
ROA not before: Thu 09 May 2024 10:22:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 103.69.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5c:e0:a3:9b:f6:7c:27:ed:b6:35:a6:c5:55:ef:b1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: May 9 10:22:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69e112e4fcf71656e4d31d8c039816e442947dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:e1:38:83:be:60:27:ef:e9:a9:ae:2d:cf:
bb:ab:87:a4:b4:a5:41:1b:eb:6f:f3:43:de:d2:8c:
14:a1:66:64:05:0b:c4:61:ea:86:2f:f8:20:7a:43:
b6:1d:03:ee:7d:21:d4:d8:19:6d:c8:32:dc:90:ba:
23:56:ba:69:67:3b:0e:9c:35:7c:88:91:7d:a0:68:
15:8a:e5:ed:0e:ac:88:6b:6e:91:3d:46:95:f3:e5:
22:7f:cb:b6:1d:c6:a4:db:7b:12:e0:1f:04:1b:6f:
67:a7:a1:c2:ed:b6:18:20:2b:57:84:fd:33:e5:d3:
51:da:d9:80:24:44:6e:52:4b:22:d4:92:86:ac:96:
8a:87:32:4a:22:bd:4f:83:5f:9f:bf:68:ee:4e:26:
8d:62:45:15:fa:68:6d:06:06:a9:e9:a2:9e:aa:c5:
4a:7f:5f:2f:39:4d:af:36:ff:dd:a9:f1:5b:45:4a:
dc:a7:d1:0b:70:f8:3e:ee:e6:15:cf:3a:bf:35:9b:
f3:13:e7:73:8e:a9:a1:9b:0f:df:41:65:1c:2d:59:
fe:48:e4:6b:4c:36:3a:93:14:be:77:05:91:07:d3:
72:ff:f0:16:22:a9:a6:49:10:17:dd:17:c5:e4:a5:
17:4c:eb:13:cc:37:79:ee:27:1f:50:f2:8a:23:ac:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E1:12:E4:FC:F7:16:56:E4:D3:1D:8C:03:98:16:E4:42:94:7D:FE
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/aeES5Pz3Flbk0x2MA5gW5EKUff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:da:52:f2:7b:fb:4b:60:8c:9b:bd:1c:9a:99:74:9f:f9:2e:
a8:f6:be:1b:71:2f:3b:55:48:67:f4:58:9a:3b:f9:65:c2:c9:
d9:5d:d6:fd:80:3a:af:0d:bf:a8:15:22:9a:8f:0c:7d:59:4f:
1e:e8:b1:51:5f:1a:6b:71:b4:3d:ea:c2:62:4e:80:4f:cc:1e:
31:9d:c3:4f:73:fd:8e:c4:1b:e6:11:81:85:b9:6b:23:19:27:
fc:1b:8b:eb:3d:a1:2e:39:08:8b:70:d6:53:b8:9c:a0:ce:17:
63:e0:d7:4a:da:5a:c3:3d:a9:c8:fd:38:b7:de:9f:20:29:77:
7e:59:5d:4b:25:f7:f5:d7:b7:b4:58:84:e8:10:7d:88:c4:12:
7b:13:8b:f0:3d:4e:0b:a3:5b:c2:34:7c:7b:d5:2e:2e:4f:45:
4a:72:f0:89:0d:4b:55:20:ea:98:74:e9:42:64:90:47:75:b6:
6d:57:fd:ba:10:6b:8d:22:23:00:b8:9d:f4:0d:e6:a6:53:b1:
f3:a2:8b:8f:af:e8:8f:fc:51:69:43:6d:2f:a1:39:a1:aa:4b:
89:ed:16:68:59:79:ba:4b:2b:5e:6d:97:f4:dc:58:cf:37:93:
ad:33:01:bd:a2:88:5b:38:e0:05:69:20:8a:63:32:fb:8e:fc:
ac:37:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:19:53 2024 by rpki-client on console-ams.rpki-client.org