Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aHt3qzYih8XUYund4vGLDEAd-eQ.roa
File: aHt3qzYih8XUYund4vGLDEAd-eQ.roa (raw, json)
Hash identifier: 57XbrxBmkZX5hVpvaVPBtprmBrEEF+ziSd3+PnutwMw=
Subject key identifier: 68:7B:77:AB:36:22:87:C5:D4:62:E9:DD:E2:F1:8B:0C:40:1D:F9:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018CC500BF473B1F52DF0EA056856BE9503B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aHt3qzYih8XUYund4vGLDEAd-eQ.roa
Signing time: Mon 01 Jan 2024 12:30:09 +0000
ROA not before: Mon 01 Jan 2024 12:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59592
IP address blocks: 5.231.200.0/24 maxlen: 32
5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bf:47:3b:1f:52:df:0e:a0:56:85:6b:e9:50:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=687b77ab362287c5d462e9dde2f18b0c401df9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:8a:5d:56:d5:ab:74:be:ea:29:75:1f:7f:
a7:2d:31:b0:25:f7:e5:ab:ce:7a:3d:47:69:09:a2:
ce:c0:f8:4b:f4:c3:05:8e:da:20:a3:8b:dc:85:fc:
22:76:41:f6:cd:70:09:e3:87:89:ba:96:36:92:ef:
19:12:05:38:ca:6e:14:6c:82:13:7a:ab:09:d9:70:
84:8a:cd:be:4f:bf:37:58:d9:f2:b8:c1:bd:2d:dd:
9d:4a:a1:7b:07:86:b5:4f:8a:55:15:23:e8:03:f2:
89:4e:08:98:24:7c:68:22:55:b6:ad:c6:a7:9f:62:
bf:3a:23:fb:18:c7:1f:3b:ed:00:33:6a:19:74:00:
ce:da:b2:ca:b7:25:70:0b:15:75:90:e1:bd:22:1e:
74:1d:b6:0f:65:77:e0:12:c7:a5:b2:7c:fc:8d:c2:
32:d4:8c:08:67:df:7e:6e:11:bd:7c:76:09:24:68:
af:dd:33:cb:25:9f:22:d0:3a:da:db:d9:08:fa:60:
d8:e2:05:eb:eb:48:03:ff:8d:b7:93:b1:18:9c:bb:
1a:1e:a6:72:26:bf:fc:96:2c:95:4a:66:29:09:09:
97:b5:4e:c3:3b:52:b3:f0:41:0f:32:48:b3:b5:d9:
05:10:e4:da:d7:93:1e:c1:b8:8d:60:0e:39:1f:64:
0c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7B:77:AB:36:22:87:C5:D4:62:E9:DD:E2:F1:8B:0C:40:1D:F9:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aHt3qzYih8XUYund4vGLDEAd-eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:26:b3:b0:ef:a1:a9:bb:45:f8:f0:9b:dc:b0:8d:96:2a:a8:
fd:65:c0:4a:ae:f6:6d:6b:10:2e:03:bf:7a:64:50:96:d0:cf:
65:34:db:0c:63:50:41:fc:fc:93:50:03:26:7e:d7:cf:e3:96:
61:99:c3:d7:81:2d:2b:1e:4e:06:fb:66:9b:53:5a:25:53:00:
85:03:8d:aa:68:e5:bd:91:c1:bd:de:ec:35:0c:14:65:69:72:
d4:b3:4d:56:ed:cb:5a:48:a1:e9:01:d4:74:42:79:03:ea:74:
fa:d0:00:19:cc:50:b6:6d:5d:27:e4:dc:44:be:33:8c:7f:d9:
3b:44:bc:3a:85:0f:9b:2e:e7:b0:0d:31:8f:57:b7:c9:74:c4:
81:01:24:b4:e8:78:38:f4:fa:90:9a:22:a2:74:d7:50:40:a9:
2f:98:a2:ba:59:37:7c:b9:05:c1:0e:a2:fd:fb:df:ef:c2:ab:
03:53:1b:27:2b:ba:1d:b6:7e:5a:ad:f9:69:2b:21:91:b9:14:
c2:c9:cf:36:6b:ae:c5:b0:96:6e:7a:9d:6a:2c:99:66:b3:3f:
e6:e8:2a:4f:8a:11:3a:a8:a4:17:22:da:80:41:05:17:93:77:
96:82:c8:5e:a1:6a:38:7a:7e:a3:7b:9a:1b:5d:f7:21:92:01:
a1:df:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:00:14 2024 by rpki-client on console-ams.rpki-client.org