Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9XKhQ05b0G2QciXChLX_r-gu_KE.roa
File: 9XKhQ05b0G2QciXChLX_r-gu_KE.roa (raw, json)
Hash identifier: E9zG+URtOy6f+fOMvw9Y3/QGdzgex15TE0VSxw7HJOs=
Subject key identifier: F5:72:A1:43:4E:5B:D0:6D:90:72:25:C2:84:B5:FF:AF:E8:2E:FC:A1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BE8FE8AFDF45901B3662D4A79EB4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9XKhQ05b0G2QciXChLX_r-gu_KE.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57565
IP address blocks: 5.230.206.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:be:8f:e8:af:df:45:90:1b:36:62:d4:a7:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f572a1434e5bd06d907225c284b5ffafe82efca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:89:5e:f5:10:a6:34:dc:f7:9e:27:60:ef:
3d:84:a7:a1:d7:26:8a:a6:f0:cc:a6:76:e5:bb:17:
69:55:9f:35:04:7f:d3:02:ec:15:6d:b5:ae:5a:4a:
8f:83:77:33:05:eb:a9:b4:34:ce:e6:10:b5:4a:89:
4a:53:22:b7:08:b0:5e:db:65:6c:22:d0:e1:c9:92:
1e:28:a4:b5:70:d2:3d:53:1e:70:a8:6d:19:ec:21:
a4:46:f9:4b:95:a4:44:8e:ba:df:42:91:04:c8:a2:
76:14:ae:b4:35:a6:fa:b2:db:e5:8e:a8:de:7c:1a:
1a:55:1b:8b:9e:9d:02:47:be:e9:d7:cb:62:44:ea:
2b:0d:7d:9d:4b:ac:c1:b3:0b:43:73:53:b4:f6:70:
68:bb:f7:3e:3f:60:d6:68:be:0d:0f:b7:60:7d:09:
ca:f7:26:dd:62:7e:27:53:d8:da:06:06:d9:42:de:
09:36:20:1d:26:6e:8b:22:de:ff:96:d6:7d:1a:03:
0a:4e:63:0c:1c:66:43:8a:7d:4d:25:a8:12:85:6f:
ec:52:4a:7e:6e:46:29:03:b2:71:b0:61:1f:1f:91:
44:cb:b7:3f:fc:1f:ec:20:23:ed:f2:99:b7:d4:78:
32:40:5e:f1:74:a7:9a:c1:48:66:98:17:43:b7:17:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:A1:43:4E:5B:D0:6D:90:72:25:C2:84:B5:FF:AF:E8:2E:FC:A1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9XKhQ05b0G2QciXChLX_r-gu_KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:0e:e4:02:ef:4e:65:fe:18:ee:08:6f:bf:31:f9:f8:09:76:
17:91:17:65:35:d8:b9:63:eb:61:f0:0a:36:b4:d5:47:ad:18:
fb:46:9e:83:8c:9f:8d:61:3e:95:40:d4:7b:6e:4b:7e:f4:e7:
49:d7:49:ad:4d:fa:db:a9:9b:d3:ef:0a:d0:40:8b:31:76:70:
42:c3:c8:2f:18:cc:94:2e:9d:f2:d2:60:c4:f0:dc:f3:2c:a9:
91:24:08:d7:39:86:d5:22:39:3b:b1:41:93:73:ee:a9:27:a3:
03:0d:cf:2c:5a:da:0b:18:dc:5b:4a:07:87:0f:71:36:bc:e0:
03:f4:2d:e8:0d:a6:dd:6b:30:37:4e:99:3e:06:91:cb:5d:16:
7c:f9:94:be:37:e7:43:2f:2b:41:c5:2f:7b:bb:74:2c:92:f0:
8f:58:84:0d:32:9e:ac:60:8e:8d:48:db:70:c5:04:73:29:74:
6d:bb:96:6a:6b:fd:a5:4a:c4:2d:b3:ac:88:16:9d:7e:bd:e8:
21:6d:c3:bb:ea:de:40:6e:2c:93:56:d7:08:fe:a6:30:04:d7:
11:c6:ff:1a:e1:84:cd:b6:15:01:d7:25:87:65:d1:1f:12:65:
c5:f1:06:5d:92:e1:5e:cb:6f:b9:59:4e:8f:c4:fc:2f:9f:5d:
b5:24:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:23:38 2024 by rpki-client on console-fra.rpki-client.org