Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1pbOJSQ-yeZ0SU17GjyFWKkQksA.roa
File: 1pbOJSQ-yeZ0SU17GjyFWKkQksA.roa (raw, json)
Hash identifier: KQUo+MdpAt0vIk5t43nzk7fsAlQjIZN6rRM+Na/fR/0=
Subject key identifier: D6:96:CE:25:24:3E:C9:E6:74:49:4D:7B:1A:3C:85:58:A9:10:92:C0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192C3826C44C53FA2BCE0F4DEC8A4E74073
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1pbOJSQ-yeZ0SU17GjyFWKkQksA.roa
Signing time: Fri 25 Oct 2024 11:49:17 +0000
ROA not before: Fri 25 Oct 2024 11:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214019
IP address blocks: 5.175.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:82:6c:44:c5:3f:a2:bc:e0:f4:de:c8:a4:e7:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 11:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d696ce25243ec9e674494d7b1a3c8558a91092c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:f6:7a:5c:d9:d2:f2:8c:4d:e1:7f:98:b6:
96:a3:28:98:65:62:88:53:f8:1e:e5:3b:cd:4a:93:
14:eb:20:43:15:e3:f1:d5:c3:bf:58:2c:1c:74:48:
63:07:c2:11:43:97:95:43:c5:27:f5:ba:a6:9f:a7:
6e:a2:81:db:96:10:83:49:79:be:77:dc:ed:53:89:
e2:81:86:61:da:3a:db:21:b2:80:cd:c3:44:10:0f:
e5:0c:7b:9a:78:bf:ec:bd:50:bb:fd:68:cd:f8:b0:
32:c3:bd:6b:c2:1b:bf:99:0c:48:a3:56:e5:75:58:
b3:39:7b:17:47:e1:fc:5f:99:66:6c:b4:31:9a:e4:
90:bb:4c:3c:78:ba:bc:1a:2f:49:e9:05:f8:bc:b9:
13:29:a4:90:b2:ed:cd:dd:4e:ff:b9:f8:35:65:05:
28:c3:cb:ed:4f:49:ed:7c:4c:8e:7b:68:64:0d:62:
da:d0:26:4f:e1:c1:39:03:50:30:ea:65:27:ac:7d:
f8:8e:fe:7e:df:8a:8e:c4:30:a3:b0:49:8a:07:7c:
0b:51:df:92:6f:8d:f4:e1:dc:c0:b9:ef:9c:1b:bf:
ef:37:83:f7:20:5d:fa:42:45:30:6d:a3:24:49:eb:
55:bc:6e:57:d5:33:f9:7f:97:cc:31:a6:1d:35:60:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:96:CE:25:24:3E:C9:E6:74:49:4D:7B:1A:3C:85:58:A9:10:92:C0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1pbOJSQ-yeZ0SU17GjyFWKkQksA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d7:89:9f:5d:eb:e8:7e:6f:4f:71:92:b0:28:e1:98:75:c4:
59:a6:a4:8e:5b:a8:30:65:d3:38:a9:30:33:61:e0:12:ab:71:
69:47:c6:27:8f:30:02:e5:f7:39:e4:f7:a9:d3:85:7f:d8:29:
eb:14:29:2a:54:13:d2:97:0a:f3:cb:3b:12:5c:0a:e8:4b:b2:
ae:de:e3:29:f4:d4:74:15:b3:97:9c:19:e1:83:35:52:ec:7a:
2a:dd:f1:d0:18:bd:43:53:4d:9d:c2:ba:50:3b:cd:f0:98:ef:
b0:fb:1c:6a:a1:b9:6a:a9:91:0e:be:8b:a1:5a:ad:e6:bb:64:
41:d1:54:7c:ce:90:db:66:5d:10:6d:2d:b6:58:bd:4f:50:5a:
74:64:55:8d:1b:0f:7f:47:09:6e:7a:3d:e2:ad:21:fb:b4:dd:
cf:e9:ff:48:af:ae:a0:e7:d3:b7:d9:ce:c7:0e:52:a3:1a:79:
b9:43:9f:70:b6:18:95:b7:03:08:00:44:47:0e:7e:64:2d:e2:
50:96:f5:52:12:85:2d:2c:b4:af:84:87:df:6e:a8:b0:07:12:
e4:8d:87:83:7f:53:1f:e0:74:bb:b2:24:44:8b:14:7a:e7:7b:
86:5c:76:74:a6:f1:0e:c6:2e:4b:87:70:4d:bf:cc:3b:0b:f8:
63:66:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org