Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IPBJrOU0jHsHiUusiW4qzL0Omis.roa
File: IPBJrOU0jHsHiUusiW4qzL0Omis.roa (raw, json)
Hash identifier: tbFCmq1K4gFMLucFx885rmFGwn67GP/ja/got8HXrUw=
Subject key identifier: 20:F0:49:AC:E5:34:8C:7B:07:89:4B:AC:89:6E:2A:CC:BD:0E:9A:2B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193535C7BF464A33A09A56CBD3DF84DB905
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IPBJrOU0jHsHiUusiW4qzL0Omis.roa
Signing time: Fri 22 Nov 2024 10:13:10 +0000
ROA not before: Fri 22 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31530
IP address blocks: 5.231.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:5c:7b:f4:64:a3:3a:09:a5:6c:bd:3d:f8:4d:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 22 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f049ace5348c7b07894bac896e2accbd0e9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:0e:6b:26:d3:de:75:f4:b4:b1:0d:7b:13:
4b:54:48:a8:d2:74:c0:aa:7d:85:fa:38:45:e6:6c:
eb:c4:1b:f1:a1:cc:cd:1c:7d:c9:81:9e:4d:b4:f6:
cc:31:5d:c3:5b:8d:a5:88:a7:91:9d:31:ee:b9:86:
b5:dd:24:f9:31:fe:a7:c6:b7:84:21:bf:e2:5c:73:
fb:af:41:1e:bc:0a:fd:3c:ab:14:0a:01:26:30:cc:
3e:0e:a9:bc:d6:c5:5e:63:4c:cc:24:0e:b8:a9:e1:
3c:2c:e7:9b:2d:5f:3a:5a:2d:26:b7:15:0a:fc:3b:
2c:96:44:41:76:58:65:06:67:13:0e:b1:03:39:0c:
86:16:44:87:c3:a0:1a:8c:bd:30:18:a5:6b:70:d7:
a4:ea:bb:23:a4:14:34:3b:ae:e6:7b:cb:7a:f4:95:
54:7c:24:01:26:30:e7:be:98:33:9e:f5:62:d8:de:
ff:ff:63:76:4a:75:f7:d8:7f:80:e3:4f:3f:82:d0:
a6:1b:97:15:02:8b:4f:5f:c6:fc:98:3a:c5:94:6b:
17:33:41:2a:d8:cb:90:34:0c:a2:91:3e:55:ab:b7:
22:66:64:7b:25:0b:20:2b:37:89:10:40:60:d6:f8:
07:e7:23:15:a9:a4:d9:59:b8:2c:54:6c:fb:7c:eb:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:49:AC:E5:34:8C:7B:07:89:4B:AC:89:6E:2A:CC:BD:0E:9A:2B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IPBJrOU0jHsHiUusiW4qzL0Omis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.37.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:4d:57:c1:ab:99:39:3f:21:37:c0:f0:ca:7e:e6:19:f4:37:
10:7a:e0:11:51:f0:e8:71:a9:dd:17:bb:76:83:1e:e5:e2:46:
98:18:ee:19:84:fa:13:d0:17:67:43:3b:66:e7:5c:ab:ce:75:
fd:26:e1:4a:94:64:70:68:16:12:70:ef:c6:d4:88:e7:83:6f:
63:70:59:2a:59:a0:e6:f9:10:27:bf:be:5a:01:46:62:98:98:
9c:6c:7f:aa:0f:48:a4:ff:f1:80:76:36:13:ff:8a:a7:cc:89:
f1:c1:06:f9:17:32:2c:7f:f8:bc:7b:61:02:f5:8c:90:03:7d:
d8:aa:99:17:fe:a1:9d:73:9a:e9:00:c5:7c:86:c1:95:45:34:
88:7a:92:b6:ac:e8:12:dc:bb:f3:91:63:b9:92:9e:6e:66:ca:
72:52:95:ed:8c:32:38:57:d2:d3:19:e0:ca:ad:f7:29:58:98:
55:63:b6:13:84:07:bd:3f:12:49:30:fb:f1:15:3e:d8:84:8b:
da:fc:4a:ac:04:85:67:87:d8:1b:73:bb:51:46:86:cd:e2:c6:
72:6e:a1:c5:e1:ea:d9:70:b8:e0:dd:08:e7:8c:99:7d:39:8d:
45:f0:e5:09:1c:9b:9b:1d:30:6a:1e:e1:fc:e5:8c:87:5d:a7:
96:2e:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org