Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RU08t81ZrWlzlGgUs7r40pNgDOw.roa
File: RU08t81ZrWlzlGgUs7r40pNgDOw.roa (raw, json)
Hash identifier: 6/rS44VT+YMWFWbiTWSgBKKqmcnir532EWPdO1HMG4w=
Subject key identifier: 45:4D:3C:B7:CD:59:AD:69:73:94:68:14:B3:BA:F8:D2:93:60:0C:EC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BBBFA1583BDF3F13D0EBBF63633A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RU08t81ZrWlzlGgUs7r40pNgDOw.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12360
IP address blocks: 5.231.128.0/18 maxlen: 32
5.231.128.0/19 maxlen: 32
5.231.160.0/20 maxlen: 32
5.231.176.0/21 maxlen: 32
5.231.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bb:bf:a1:58:3b:df:3f:13:d0:eb:bf:63:63:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454d3cb7cd59ad6973946814b3baf8d293600cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:7b:d8:9c:d2:1d:c7:9d:2d:41:a2:f0:31:
1d:9e:bc:28:4b:0a:a6:d5:f6:c3:ba:26:98:7d:86:
ba:b5:e8:59:83:eb:b7:f8:1e:d5:13:9d:3a:59:69:
0a:bf:d7:5c:69:1d:7c:52:25:1e:bb:a5:83:dd:75:
1a:0a:95:c7:de:11:a8:ea:d9:29:e7:47:2f:a5:3b:
7d:38:d7:01:05:e8:19:0c:dc:5d:f7:03:4e:5f:fa:
41:9f:05:59:b0:c6:44:9e:65:ac:b2:1f:18:84:b7:
96:a6:05:a4:3c:0c:04:13:25:21:b7:ef:79:27:4b:
68:23:95:04:bc:2c:b9:b6:fd:d8:cb:af:63:cf:e0:
77:c7:6d:27:82:e9:1f:1d:ba:77:77:f8:e2:cf:07:
aa:c3:0b:63:53:74:74:8d:06:c1:be:a6:2f:0e:1d:
41:af:71:fb:ca:0f:99:60:7f:7a:56:d0:67:c2:55:
65:3f:1b:6f:93:44:68:9b:d0:b1:5a:1a:57:cc:3a:
97:23:5d:91:c8:6e:8f:55:68:f2:00:ce:3c:94:2b:
09:f5:9f:6f:3d:d2:98:ab:02:7c:83:17:3f:90:e8:
63:91:56:ef:f2:ef:5d:ea:10:59:ee:46:98:c9:ed:
ac:0e:0b:15:6b:88:ae:f8:65:5a:36:0a:3d:52:99:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:3C:B7:CD:59:AD:69:73:94:68:14:B3:BA:F8:D2:93:60:0C:EC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/RU08t81ZrWlzlGgUs7r40pNgDOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.128.0/18
Signature Algorithm: sha256WithRSAEncryption
06:76:59:a6:27:cd:5f:09:ff:21:d5:4e:cc:a4:a7:e7:29:5a:
b7:fe:50:16:b9:89:45:79:ac:ac:23:70:4f:2c:0c:d7:35:5d:
1d:bd:88:19:f3:ed:8d:be:60:bc:98:2b:db:5e:c1:8d:bc:54:
33:d5:e6:f1:96:75:76:37:29:73:89:5d:d4:f8:12:22:db:79:
d2:b9:81:bb:8a:59:03:9e:92:96:07:fa:bd:cb:dc:c0:de:18:
52:ad:d9:f1:d4:e9:67:ec:08:bb:1a:9c:b6:a6:dd:d9:56:d3:
cc:c6:11:1f:7b:71:64:3d:56:f4:12:e7:f5:a2:b6:86:01:10:
3d:58:3e:05:0c:d8:96:f2:0b:24:4c:fb:f1:2f:c5:f4:9c:95:
e7:e6:74:21:39:3b:b3:b5:18:10:a7:50:8a:68:bd:4c:bc:ba:
25:b3:7c:54:34:9f:a3:07:e0:5d:59:05:f9:2a:35:f1:a2:e2:
1d:d3:84:a1:70:10:81:3a:56:ed:99:7a:6d:7d:7f:1d:b7:1f:
eb:ec:17:28:76:93:c1:18:4b:47:3a:6f:11:57:00:6a:74:5d:
6b:83:8b:f2:12:ab:42:88:1f:3c:2c:28:9a:13:cf:30:bf:52:
3d:a4:9d:56:64:46:e2:28:4f:50:91:54:50:f7:d0:e9:ce:a9:
19:8e:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 12:10:57 2024 by rpki-client on console-ams.rpki-client.org