Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VpG3pHOjBU_SnJDsfuA_3O94sdE.roa
File: VpG3pHOjBU_SnJDsfuA_3O94sdE.roa (raw, json)
Hash identifier: 00JbhyqGfzrRTCvK0QMx2h6IoXbpVafNyewg4g9PSiM=
Subject key identifier: 56:91:B7:A4:73:A3:05:4F:D2:9C:90:EC:7E:E0:3F:DC:EF:78:B1:D1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019377F5FD42600212137074D3DAE1394FC7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VpG3pHOjBU_SnJDsfuA_3O94sdE.roa
Signing time: Fri 29 Nov 2024 12:47:10 +0000
ROA not before: Fri 29 Nov 2024 12:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62880
IP address blocks: 5.175.236.0/24 maxlen: 24
5.175.237.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:f5:fd:42:60:02:12:13:70:74:d3:da:e1:39:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 29 12:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5691b7a473a3054fd29c90ec7ee03fdcef78b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:80:56:a7:42:a6:b3:22:e9:34:18:0f:c3:
11:9a:08:58:65:5b:dd:83:31:6d:0f:21:5d:6b:ef:
47:d3:c9:8e:09:bd:22:c0:79:57:02:97:39:a6:5c:
20:69:41:b8:f4:46:a0:e4:68:ed:c6:48:44:a0:86:
5b:c5:1d:ea:26:64:a1:43:43:8c:39:a2:ea:6c:2d:
a4:5b:16:3b:03:75:1f:0e:e3:d0:b6:44:d1:81:3c:
79:b6:a9:b1:06:58:21:af:90:36:e6:40:4b:43:8e:
fc:b7:72:c7:0c:19:c2:f9:a1:fa:5b:b8:9c:66:4f:
4e:3e:5a:ab:82:b7:d7:67:9b:ae:0e:15:4c:4c:be:
f8:a8:eb:d2:62:39:2b:02:eb:ed:ca:73:91:73:4f:
db:5f:bd:17:ff:5e:7a:b7:1a:9a:b2:0f:87:c7:7e:
f6:bd:60:a5:3b:e0:62:78:67:e1:47:15:e3:3a:de:
27:58:64:9e:f8:7e:4c:d8:0b:0e:7b:09:c9:a2:ec:
41:2e:c9:3b:55:a6:62:41:25:1f:c4:a8:5c:53:57:
18:92:01:94:5f:b4:92:3b:0d:a8:c5:cf:87:02:f3:
8c:dc:d8:0c:0e:98:46:3c:15:5a:15:34:60:e8:f0:
76:0d:1a:95:35:3a:24:e6:a4:37:3e:6a:8d:f9:ac:
d1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:B7:A4:73:A3:05:4F:D2:9C:90:EC:7E:E0:3F:DC:EF:78:B1:D1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VpG3pHOjBU_SnJDsfuA_3O94sdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.236.0-5.175.238.255
Signature Algorithm: sha256WithRSAEncryption
57:41:13:ba:e5:7c:23:79:bf:8c:bd:f4:c6:16:89:8c:d4:a2:
a9:51:4e:81:8f:72:d8:fd:c1:f8:3c:6a:ac:ac:83:2f:a0:c7:
52:9f:df:49:b2:02:29:65:16:83:d2:0d:9a:3f:e7:a8:44:d7:
6a:e2:cd:39:42:bb:de:0a:e6:4d:57:c2:b5:da:bf:77:4b:e7:
b7:5a:7e:50:4a:6a:71:05:4c:8a:79:05:44:06:7a:9d:93:35:
ac:27:4d:a4:d8:4d:b2:7b:f7:1c:ca:0d:d4:e5:fe:4e:22:ad:
3e:f5:5c:d3:1d:90:ed:2e:7c:db:cd:6e:77:4c:39:51:bb:1e:
19:9a:94:a3:62:39:a5:53:18:12:f8:90:ed:ef:14:06:1a:03:
28:f3:3d:90:da:dd:fd:06:f9:22:c2:16:c0:cf:e1:00:24:36:
81:f6:aa:1a:69:52:2c:6f:a5:c7:ea:f8:4f:45:69:96:ba:a3:
ab:42:55:0a:db:0c:7c:c6:33:bb:83:07:61:c4:e7:26:cc:00:
61:33:84:d7:24:f7:9f:ca:6d:89:59:af:3d:09:48:14:14:3c:
10:44:69:dc:ac:4c:e7:c5:71:66:23:d3:f9:9d:bc:4e:f6:cb:
cd:9a:53:07:ae:c6:06:65:7f:c6:74:c3:ed:ce:33:42:b3:7a:
85:cb:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org