Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aNSfhcJef1mv8l-OitlRncxekM8.roa
File: aNSfhcJef1mv8l-OitlRncxekM8.roa (raw, json)
Hash identifier: KyGuJ+0LUkC8Dbl0C4fHzNQTuDS/O6+47FPyEsIVML8=
Subject key identifier: 68:D4:9F:85:C2:5E:7F:59:AF:F2:5F:8E:8A:D9:51:9D:CC:5E:90:CF
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8E1D038C3565F96B8D810CF9AB1E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aNSfhcJef1mv8l-OitlRncxekM8.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200092
IP address blocks: 5.226.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8e:1d:03:8c:35:65:f9:6b:8d:81:0c:f9:ab:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68d49f85c25e7f59aff25f8e8ad9519dcc5e90cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:7e:11:6d:59:00:e9:c1:d7:8d:46:0d:fa:
87:d7:2c:ca:28:09:0d:e6:8c:c3:27:b8:1e:8b:58:
be:64:48:96:03:2e:8a:f0:0e:e5:29:5c:c4:ab:36:
ce:96:44:8b:b8:a2:4a:c0:8b:3d:25:55:05:d5:1b:
12:2b:b9:30:23:0f:11:0b:2e:29:16:29:4d:04:1a:
32:fd:5e:98:0f:68:9b:08:d5:36:1f:85:00:d3:f1:
5f:2e:16:62:d1:ff:80:c1:b3:ce:2c:68:99:3d:6f:
0f:a8:83:ef:0a:01:18:48:94:69:31:a3:40:77:0f:
c0:21:26:3c:e2:5c:ab:f2:da:d0:37:31:c4:1e:30:
dd:1b:f2:55:8a:7a:12:d7:eb:d2:51:b7:13:2a:44:
21:a1:e0:be:c0:73:0b:c9:97:23:ee:d3:7e:91:a2:
f4:ee:2a:9e:f7:27:ca:3c:5f:db:b9:87:5b:a9:5a:
c4:60:8e:16:ba:55:50:84:4e:07:a0:bc:4d:c8:3e:
b5:95:76:37:90:e7:74:a3:79:3c:1f:3f:3d:25:15:
49:90:72:15:e2:3c:f6:7f:40:92:35:5f:b2:74:45:
38:65:06:97:4e:47:72:9f:17:ae:6c:f3:b6:15:c7:
4f:3c:b5:3b:09:65:c1:0e:fe:39:51:82:cb:c3:bf:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:9F:85:C2:5E:7F:59:AF:F2:5F:8E:8A:D9:51:9D:CC:5E:90:CF
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/aNSfhcJef1mv8l-OitlRncxekM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.132.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6e:0e:cc:69:f9:9b:83:1d:cd:47:29:4e:4a:d5:9d:6f:7f:
b2:a7:68:6c:ba:c7:66:fc:d5:fd:0a:9e:21:10:e2:a3:ff:31:
3b:ac:3f:78:23:da:15:81:5c:dd:cd:64:e0:40:2a:05:ec:1e:
d2:5e:be:e5:5e:e8:c0:53:36:a1:30:84:d6:c0:69:05:7d:4c:
50:74:bb:a2:fd:26:47:a9:cc:3a:d5:2c:e0:8c:10:8f:aa:58:
04:c8:32:1b:df:5e:9c:63:97:b6:c7:ab:85:74:74:d6:37:c5:
0b:f8:ac:d6:95:19:67:15:50:07:ea:3e:06:32:c7:e7:7e:52:
28:2b:4c:d8:e8:96:fe:3c:9a:aa:af:6d:7d:9e:ee:93:50:ea:
0f:be:12:15:f8:cc:94:88:af:0b:70:a7:b0:e7:7b:a1:3f:a8:
85:f6:c3:96:76:8c:88:d1:51:63:df:4f:7f:3e:bc:fe:b3:3b:
02:80:a4:b6:c0:32:62:f6:45:8c:ed:9b:0b:d2:aa:54:53:73:
47:6e:d3:41:45:42:4a:a4:2d:26:1e:ae:da:60:e2:54:a0:4f:
ce:18:4c:85:79:1d:9e:25:57:c4:a9:26:c8:64:61:a5:ca:2e:
e1:4b:13:ca:c4:87:63:f3:15:79:da:8a:35:03:2a:f8:cd:12:
7a:0d:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org