Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yS82FHljHupn90jf1DH9rINy3pw.roa
File: yS82FHljHupn90jf1DH9rINy3pw.roa (raw, json)
Hash identifier: sbkvF1YOtm7msW4tzsFPaCzj5lpAhoQWqDa9OeNxJxA=
Subject key identifier: C9:2F:36:14:79:63:1E:EA:67:F7:48:DF:D4:31:FD:AC:83:72:DE:9C
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018DF928AABD2CB1BA945929D694A407EE97
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yS82FHljHupn90jf1DH9rINy3pw.roa
Signing time: Fri 01 Mar 2024 08:36:48 +0000
ROA not before: Fri 01 Mar 2024 08:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.84.0/22 maxlen: 24
46.244.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:28:aa:bd:2c:b1:ba:94:59:29:d6:94:a4:07:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 1 08:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c92f361479631eea67f748dfd431fdac8372de9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:bd:46:57:b6:4f:1a:78:56:b0:e7:ad:65:
d1:52:db:c8:59:b2:cc:89:2d:bc:c1:5b:12:fc:ab:
86:6e:db:de:aa:e5:a1:a7:81:15:6e:36:e3:a3:8f:
15:0e:50:73:fa:35:3e:f7:b9:92:4e:25:9b:7b:0b:
b7:c5:52:d7:78:1c:ca:c0:45:0f:12:af:9a:2a:a0:
86:42:1c:2d:69:59:01:1e:75:c8:98:9a:bc:d4:45:
11:26:1d:db:e9:4a:d6:9e:7c:49:72:b9:58:c7:eb:
a5:bb:37:d3:62:df:ec:f7:10:ea:db:37:3c:31:b9:
97:a8:b8:16:12:4d:c8:69:0a:2e:1a:9b:82:70:d9:
56:0e:44:12:20:2c:15:4f:04:fe:8f:50:67:96:d1:
d2:82:d5:12:1b:96:d2:10:76:a9:6a:bc:e2:7c:6b:
05:34:1d:8c:8b:71:6a:f2:e9:76:cd:e1:db:9b:36:
72:84:e6:e8:ec:77:4c:11:38:a1:8b:9c:8b:97:47:
54:05:ed:45:c4:51:c2:cc:85:54:96:63:ee:58:b6:
29:cc:6f:fb:ce:db:ce:9d:6a:b6:94:5a:47:98:94:
2f:08:d1:64:39:39:95:07:4f:a9:1c:0b:34:3d:1e:
7f:30:68:65:f3:a2:4c:55:44:e0:45:0a:9d:28:a0:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2F:36:14:79:63:1E:EA:67:F7:48:DF:D4:31:FD:AC:83:72:DE:9C
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/yS82FHljHupn90jf1DH9rINy3pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.84.0/22
46.244.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f8:5b:f0:ca:c5:a7:fc:a5:4a:bc:4f:10:a9:3a:1e:bc:76:
a2:4f:cb:67:99:62:07:ca:25:a1:f4:3c:97:a7:fb:f3:a8:9a:
36:46:15:32:72:87:e8:dc:27:26:4a:7a:34:2c:f7:09:5a:42:
b5:89:bf:6b:07:b3:71:8d:ef:f9:de:73:ca:39:ba:9b:23:07:
11:bd:ec:c1:6d:af:ac:09:b1:a0:4e:4f:36:9d:d5:48:bc:3f:
ff:0c:33:0c:a7:de:07:2f:13:d7:92:23:5b:51:79:d3:ff:29:
2e:6f:ea:04:b0:29:84:31:8a:8e:da:96:0c:89:15:6c:b3:b5:
71:c9:81:d7:e3:35:19:8a:2a:ae:73:38:bc:91:f9:2d:94:e8:
ec:06:b6:14:2e:68:c1:57:64:65:d7:44:85:dc:b9:d8:9a:12:
60:30:bf:4f:f6:db:83:36:cc:61:3c:f9:0e:2b:e1:f7:02:a6:
d5:b7:2d:7b:d3:3d:85:5b:6e:f9:08:3a:25:15:c8:37:ae:77:
fe:85:fb:f8:d8:dd:c4:8e:e3:a9:8d:2b:e3:eb:c1:9f:de:e9:
7f:a7:58:86:69:a2:ba:61:76:7e:ae:e7:14:9c:e8:3a:cd:c8:
45:98:db:f1:e4:6b:c8:24:98:1f:81:c3:09:19:34:ed:de:8e:
03:4d:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:14:52 2024 by rpki-client on console-fra.rpki-client.org