Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa
File: L9pE8jo65hdDCd4F98583kwXzuE.roa (raw, json)
Hash identifier: Q+TKAP79qsbP4mlBtQ/LLF/n9JBce70IZ8yru6luKf0=
Subject key identifier: 2F:DA:44:F2:3A:3A:E6:17:43:09:DE:05:F7:CE:7C:DE:4C:17:CE:E1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192D347E4E7C061139075CA015FE6EF0455
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa
Signing time: Mon 28 Oct 2024 13:19:17 +0000
ROA not before: Mon 28 Oct 2024 13:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 5.175.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Dec 2024 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:47:e4:e7:c0:61:13:90:75:ca:01:5f:e6:ef:04:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 13:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fda44f23a3ae6174309de05f7ce7cde4c17cee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:2e:d2:01:92:26:26:53:07:e0:e3:ca:a2:
bc:5f:fb:0f:28:63:ba:7b:bb:46:5f:1c:e1:db:23:
97:4d:cf:49:f5:1a:55:92:b4:86:a7:49:60:a6:23:
56:83:3e:5d:6d:86:32:cb:d2:41:7a:98:a5:b3:b3:
89:40:93:f8:00:b3:52:fb:a3:fe:87:f1:6e:6c:a2:
f3:f9:3d:aa:2f:a6:34:98:17:87:fb:13:a7:62:81:
a9:c7:a1:7f:56:06:8e:cf:93:81:49:8b:70:21:f2:
6a:72:62:fc:f7:76:6d:dd:3b:09:76:47:36:ae:82:
0c:a7:d6:47:73:03:37:03:c1:65:79:46:1f:61:71:
85:ad:e5:37:37:50:ce:a8:67:03:d8:db:dc:d9:eb:
c8:3c:d9:e4:2a:8a:66:e7:69:c9:7d:13:b7:60:97:
5c:06:67:b8:39:13:0c:75:ad:ac:03:80:60:5d:0f:
d2:75:e2:66:ab:eb:37:8f:a7:24:1c:5a:50:a6:67:
5a:36:5d:f7:b6:48:89:85:54:08:b8:21:68:ce:90:
8e:6f:e4:e0:3e:46:b8:e0:cd:f3:26:48:b1:c8:57:
a6:5b:14:a8:ec:77:0f:6a:46:f6:95:a3:0b:a3:8f:
34:15:d3:27:a5:a8:a6:6e:5c:23:b9:c7:fe:a5:ab:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:44:F2:3A:3A:E6:17:43:09:DE:05:F7:CE:7C:DE:4C:17:CE:E1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/L9pE8jo65hdDCd4F98583kwXzuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cb:5a:ea:ec:fb:2e:78:e1:9b:d5:60:96:74:dd:60:f8:0a:
be:2d:a2:15:02:9c:84:82:7b:e9:1e:e9:83:06:bf:fe:7a:32:
39:ca:f3:4d:be:2b:2d:25:69:bc:cb:b5:ad:92:7c:15:95:e9:
47:cb:e0:ef:e5:b8:a7:b2:25:9d:6e:42:e3:8e:bd:15:76:44:
0a:73:89:4c:be:70:06:90:0d:64:fe:5e:54:97:67:cf:fe:6b:
13:0b:ce:a4:30:9f:43:c8:df:c1:ca:ac:63:a2:72:55:b6:de:
3a:de:4d:95:eb:54:b7:00:ba:0d:a4:6a:06:6b:1c:b0:61:8b:
c8:7c:a6:b6:bc:5c:d3:8f:7b:da:54:f0:72:3c:4d:5c:19:f9:
c6:ac:81:18:01:69:22:64:55:f7:28:c9:6a:9f:2c:65:bd:21:
65:db:b6:96:62:c6:20:1e:46:37:1e:d1:54:24:3c:c2:fd:3b:
68:85:d9:41:ea:16:b0:52:78:44:16:ac:b7:a0:0d:53:f2:57:
16:7b:9b:6d:d2:96:61:a4:54:1a:0c:8d:31:e9:79:8d:53:27:
d6:5b:1a:77:27:3b:06:e3:8f:c4:e5:5b:86:36:5c:99:02:89:
60:df:86:ac:e9:1f:fd:41:70:3b:70:3c:6f:b0:58:af:a0:cf:
c2:98:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 22:42:54 2024 by rpki-client on console-ams.rpki-client.org