Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFFVuymOdRDY3TJ3g8aBeRiSSEw.roa
File: aFFVuymOdRDY3TJ3g8aBeRiSSEw.roa (raw, json)
Hash identifier: agp361vXMP9Lj/HomAFp5hhupcaf12AwCKZ5UR8Fl8g=
Subject key identifier: 68:51:55:BB:29:8E:75:10:D8:DD:32:77:83:C6:81:79:18:92:48:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019343048676DA51964CCF2E5D470FA86673
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFFVuymOdRDY3TJ3g8aBeRiSSEw.roa
Signing time: Tue 19 Nov 2024 06:03:10 +0000
ROA not before: Tue 19 Nov 2024 06:03:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214537
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:04:86:76:da:51:96:4c:cf:2e:5d:47:0f:a8:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 19 06:03:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=685155bb298e7510d8dd327783c681791892484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:53:3a:38:24:16:37:39:3d:8c:e5:76:1c:
7b:9a:db:eb:b8:ea:92:e9:74:e8:74:df:ff:08:77:
89:a4:f8:10:b2:6f:5f:f3:07:24:c4:d1:fb:21:2e:
ea:2d:23:90:f5:f5:86:50:a8:76:53:76:78:e5:0a:
fb:74:da:2b:84:a8:cc:47:ae:d2:9b:34:46:05:66:
a3:9c:2b:50:7e:5b:84:cc:4e:49:f4:ab:63:f7:44:
24:79:bd:eb:4e:13:14:9a:c9:6d:d8:07:da:ce:c3:
c8:45:37:6f:c9:9d:9f:09:44:f0:f3:bd:47:c8:34:
77:52:32:b8:63:31:2f:e7:04:9c:87:6d:1d:d6:48:
b4:66:c6:dd:5b:e6:3a:ed:bb:79:de:75:02:85:79:
5b:f5:71:06:32:e6:bd:1c:00:b5:6f:d8:5d:2f:a9:
5c:0b:47:ba:cd:fe:80:d9:7e:77:ba:69:e6:54:28:
57:a5:fb:52:bc:c5:f9:55:ce:15:56:e6:4c:8a:ce:
15:8f:f6:9d:a7:1f:06:27:e7:09:95:a3:e5:45:e3:
53:3d:b6:e7:ff:82:b9:72:8f:b0:6a:4a:2a:56:f4:
fd:df:46:0a:f6:ac:0b:c1:44:06:e3:f1:48:9d:80:
e3:53:7a:5c:ae:4b:eb:d0:95:76:f4:91:cd:6a:ec:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:51:55:BB:29:8E:75:10:D8:DD:32:77:83:C6:81:79:18:92:48:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aFFVuymOdRDY3TJ3g8aBeRiSSEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
85:82:d6:60:ad:5f:15:f3:83:38:98:7f:5c:41:c8:15:88:00:
2e:09:76:6b:7e:ea:f2:cd:8b:e3:82:6d:38:d7:e2:25:58:d7:
e6:e2:e9:9c:48:42:10:63:6e:47:2b:36:d3:d8:aa:56:09:62:
ec:2a:e8:db:98:6a:f3:0e:34:8c:b8:5e:16:23:29:36:cf:11:
15:55:eb:a3:2f:02:2e:f7:65:3c:2d:32:ba:50:15:0a:f9:27:
d9:59:86:ea:c6:57:3b:4b:a7:5e:c3:75:5e:c7:a9:b8:95:94:
80:6b:ad:35:a6:7c:ae:da:6d:73:56:23:e9:ba:ae:81:e6:ea:
83:93:e4:1c:74:a1:07:cd:45:b7:87:f5:12:86:36:b8:63:a4:
9d:67:d8:ba:da:71:36:5f:ea:7f:57:d7:7a:e9:ad:13:6b:46:
db:f6:fb:cd:3c:9c:5c:b1:23:cd:e6:25:9f:06:77:14:eb:a2:
19:63:b0:84:60:23:86:5a:fe:8e:49:54:61:eb:5d:c3:25:b8:
73:6d:50:81:c2:15:ed:72:10:73:3d:1f:85:44:0c:58:ce:e5:
25:7f:b4:97:ad:90:c7:ae:49:d6:d5:63:c6:33:98:fc:5c:cd:
6b:51:da:f7:2e:c5:bf:15:5a:7a:43:49:52:fd:db:20:4b:a7:
1c:ce:b3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:16 2024 by rpki-client on console-fra.rpki-client.org