Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IziDiafrr51ZniiKBP1ErlZBxKw.roa
File: IziDiafrr51ZniiKBP1ErlZBxKw.roa (raw, json)
Hash identifier: NAMadkclkT+xE3EaB4/6bBF+EoebdChvQQ/GCsosoeA=
Subject key identifier: 23:38:83:89:A7:EB:AF:9D:59:9E:28:8A:04:FD:44:AE:56:41:C4:AC
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018F854FB6138AF365E32D7851D5E1D0570B
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IziDiafrr51ZniiKBP1ErlZBxKw.roa
Signing time: Fri 17 May 2024 06:49:04 +0000
ROA not before: Fri 17 May 2024 06:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203098
IP address blocks: 43.230.56.0/23 maxlen: 23
43.230.58.0/23 maxlen: 23
103.49.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:4f:b6:13:8a:f3:65:e3:2d:78:51:d5:e1:d0:57:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: May 17 06:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23388389a7ebaf9d599e288a04fd44ae5641c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:13:a7:b9:b7:f0:db:7c:8b:0f:a6:1f:48:dd:
f1:81:af:ff:90:25:17:e0:24:a4:0a:fe:8a:36:35:
e0:33:50:87:be:84:43:6c:92:88:b3:56:4b:06:bc:
27:2a:28:28:5e:39:24:ed:b0:e7:ac:31:af:4a:b9:
ea:a6:46:e3:57:b0:72:48:f9:ae:4f:e8:09:ef:5f:
1f:8a:90:2e:43:8c:02:59:d8:22:dd:1d:89:37:79:
b1:09:c2:22:7c:ec:7a:58:12:37:74:b7:9f:5f:f8:
44:c5:7e:47:b6:3a:79:61:f2:de:3e:1a:f8:b4:58:
70:23:5b:ef:e0:9c:20:e0:a2:e2:82:a3:3f:36:59:
0c:f8:06:d5:d8:be:e6:c3:83:b6:d5:c5:c8:c8:c0:
3c:a9:96:13:99:39:1c:ab:0a:e4:41:c6:2c:60:19:
9a:2b:21:d9:ad:24:5a:ec:95:48:57:88:2f:31:b0:
b0:61:b0:df:ed:18:25:2d:0d:ad:ef:9b:b6:43:97:
87:4d:f5:0f:8d:de:63:4b:be:9b:6a:29:9e:40:19:
6f:0e:7d:66:04:12:e4:18:27:b6:47:bc:91:17:3a:
1b:02:1f:ac:02:f8:95:14:6f:fc:8d:ba:f4:9a:9d:
f7:e7:7e:b8:71:dd:c5:cb:c2:b4:0e:8b:a2:60:78:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:83:89:A7:EB:AF:9D:59:9E:28:8A:04:FD:44:AE:56:41:C4:AC
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IziDiafrr51ZniiKBP1ErlZBxKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
103.49.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:4a:ca:eb:bf:75:cf:7a:1d:6d:3a:f3:67:5b:fa:41:8a:1d:
4e:57:8d:45:43:bf:d6:b2:f4:03:d1:83:08:41:a4:1f:70:5a:
77:65:56:45:6c:53:9f:27:9e:ac:53:3d:e9:da:7c:eb:3c:a8:
a4:75:ed:04:a0:69:9c:06:3d:09:b4:0a:36:af:20:3e:b5:78:
0a:4a:1d:9e:15:fc:80:dd:18:ca:5a:8b:1e:bc:d3:a7:01:f0:
a0:99:c3:b4:42:c3:e7:8f:19:c8:61:43:97:e6:00:c4:4b:5a:
fa:a5:49:b5:4f:78:b1:fd:b0:06:88:5f:2a:79:84:f2:db:f4:
c2:56:3f:ad:90:53:05:cd:ab:c2:17:7f:9e:22:bd:a4:bc:1d:
0b:f1:1d:00:75:d7:80:28:5d:80:8d:e4:1a:9c:3f:6f:c2:6c:
10:55:06:4c:1d:a3:ec:e0:78:93:79:30:9e:11:e5:94:48:2f:
b8:45:b3:fe:5e:47:3a:32:07:51:dd:f4:dc:2d:30:64:2f:c2:
ab:fb:a1:c0:9a:58:9c:05:65:f9:c7:2b:4c:35:a6:06:f4:cf:
c6:62:27:66:6f:28:89:e5:d9:f6:4f:61:e3:81:3d:32:b1:4c:
1f:f3:dc:9c:4d:f9:62:c0:3c:a8:64:ab:04:fd:c5:cc:97:72:
76:9c:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:49:44 2024 by rpki-client on console-ams.rpki-client.org