Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4LN_epHULYBdfRjYQYnx-eRrh1Q.roa
File: 4LN_epHULYBdfRjYQYnx-eRrh1Q.roa (raw, json)
Hash identifier: sNCmkJCl1rU+oRwYYRy9pjanAXVtfYtUIjjC1Rj04fg=
Subject key identifier: E0:B3:7F:7A:91:D4:2D:80:5D:7D:18:D8:41:89:F1:F9:E4:6B:87:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019308D11A3207A6BEC2EFDF5694114896D3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4LN_epHULYBdfRjYQYnx-eRrh1Q.roa
Signing time: Thu 07 Nov 2024 22:49:01 +0000
ROA not before: Thu 07 Nov 2024 22:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197071
IP address blocks: 5.231.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:d1:1a:32:07:a6:be:c2:ef:df:56:94:11:48:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 7 22:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0b37f7a91d42d805d7d18d84189f1f9e46b8754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:fb:d0:2c:99:c9:05:ec:f6:ef:8e:0e:b5:
2c:f8:64:c8:97:f2:c0:88:5e:b7:06:66:0a:ca:8e:
39:e4:17:80:13:4d:f7:d7:b9:9f:d8:c9:4c:95:58:
4f:6c:e2:3a:d0:c8:f2:12:13:7f:e4:b1:6e:45:1f:
62:fe:2a:c4:47:56:8b:2e:83:6a:4d:ce:09:e3:30:
7b:f3:db:5d:5d:9c:93:cb:bb:18:92:82:57:85:f8:
3e:c0:5b:0c:7e:5d:3a:a3:5e:ae:86:f8:55:2a:32:
eb:c7:a7:8a:88:f8:ba:3b:f2:3c:91:30:a0:b1:eb:
82:38:88:06:99:9d:cc:58:bf:89:2f:25:f2:28:7f:
7d:4d:95:5f:18:c0:9d:8e:67:2f:eb:21:a4:0f:4b:
b6:02:07:e3:4d:9d:db:41:16:e1:65:49:83:8f:ee:
81:11:5a:0f:30:34:05:7b:bc:05:4c:07:59:f8:00:
9c:c6:59:90:4f:c5:4a:34:3e:db:a2:87:9a:c5:34:
6a:31:3d:75:e9:78:4d:36:82:f5:d0:64:d1:79:74:
b3:e3:f7:2e:f7:12:72:50:fb:74:a5:53:df:90:18:
50:ed:17:ff:ac:55:c7:78:7c:41:90:23:3b:4a:73:
d5:de:29:65:96:df:2b:90:43:51:a9:7c:ce:3f:e4:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:7F:7A:91:D4:2D:80:5D:7D:18:D8:41:89:F1:F9:E4:6B:87:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4LN_epHULYBdfRjYQYnx-eRrh1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.26.0/24
Signature Algorithm: sha256WithRSAEncryption
93:80:55:84:52:26:59:58:0a:9c:ba:65:30:18:54:fc:95:b2:
24:c8:e8:45:49:79:34:b4:f9:7e:f8:79:64:f4:b5:32:00:6e:
21:b9:c6:75:b0:3d:60:5e:27:4c:b8:9d:3e:c3:7d:be:9e:16:
ed:00:86:ec:6d:f7:3d:4c:cd:1e:86:b5:ce:71:25:81:a2:0f:
84:34:47:17:20:8f:07:d1:78:ba:3b:de:f3:bf:08:e0:fb:b8:
cd:b9:7f:2e:66:49:6a:36:2d:1f:30:55:bb:df:a4:7a:95:38:
81:de:06:c5:84:8e:e0:41:44:9e:d8:a3:ec:c6:11:ab:a5:17:
03:5f:04:c1:63:22:bb:72:97:3f:4b:79:14:27:de:17:14:3b:
ce:b3:69:11:b9:48:ba:67:dd:02:c4:f8:dd:fe:81:cd:b7:90:
97:f1:99:ba:89:a7:30:36:ef:d0:b5:a9:e4:91:5a:6f:5b:95:
97:61:c5:f2:bb:58:e2:25:cc:67:da:84:d8:3b:e6:b1:93:84:
70:d5:f3:dd:70:2d:e5:cf:2d:a8:db:75:62:a5:f7:e1:2b:0b:
db:8e:af:47:ee:36:e4:f1:72:72:1d:c3:9f:d6:99:e1:94:ed:
fc:a3:2b:95:af:d6:26:26:a6:e7:d6:13:85:a2:59:56:45:ce:
9a:26:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org