Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bPu_6x1Sw-bV2fd67wY-ytgAbjk.roa
File: bPu_6x1Sw-bV2fd67wY-ytgAbjk.roa (raw, json)
Hash identifier: I+XfyPo7W5mqqAOtSv6f8UrvbIfK1retGCxx+vYbYkU=
Subject key identifier: 6C:FB:BF:EB:1D:52:C3:E6:D5:D9:F7:7A:EF:06:3E:CA:D8:00:6E:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193535C7CA840E41FE21A953AE0765D046F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bPu_6x1Sw-bV2fd67wY-ytgAbjk.roa
Signing time: Fri 22 Nov 2024 10:13:10 +0000
ROA not before: Fri 22 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34899
IP address blocks: 5.231.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:5c:7c:a8:40:e4:1f:e2:1a:95:3a:e0:76:5d:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 22 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cfbbfeb1d52c3e6d5d9f77aef063ecad8006e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:c8:cb:ba:a7:60:46:dd:d2:7a:7b:4a:e8:
ec:4b:8b:25:a8:07:64:23:19:b6:26:ac:50:90:be:
3b:1b:ef:04:8e:0c:33:c1:0b:76:2e:68:af:6f:b0:
48:f0:d1:71:52:48:c2:42:04:24:58:90:25:a4:b6:
d2:9d:ff:c0:ea:23:50:a7:db:86:2e:83:33:fc:74:
8a:0f:47:77:ab:60:ac:51:ba:ee:c5:1f:1a:04:16:
e8:07:f7:57:ad:0a:c5:21:c7:fe:c7:3f:35:a7:64:
5d:89:ba:33:81:54:49:3f:d0:45:2f:b8:04:a7:5e:
39:89:65:77:ac:5c:d1:34:09:ca:db:79:52:c3:92:
94:eb:9f:8a:ad:bf:5f:04:30:5d:48:38:17:38:6f:
b9:12:32:1f:bd:23:24:a5:53:9d:26:9f:72:dc:98:
75:b5:de:27:8e:04:85:31:91:2f:09:fe:b9:8b:ee:
17:d5:60:59:3a:44:86:8b:38:14:7d:e4:15:55:d1:
d6:70:4f:9c:49:15:4b:e3:fd:da:f5:48:05:d7:c5:
b1:02:d5:e4:24:ba:8a:14:3b:eb:b5:2c:96:76:6b:
c2:0a:30:ed:d5:9f:3c:c5:05:fd:1d:4c:aa:39:57:
f5:62:a2:ae:15:a0:fc:9b:9b:92:33:50:4d:f3:8a:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:BF:EB:1D:52:C3:E6:D5:D9:F7:7A:EF:06:3E:CA:D8:00:6E:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bPu_6x1Sw-bV2fd67wY-ytgAbjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.39.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d8:c1:cc:5d:f1:92:7f:22:96:ea:34:fa:3b:4e:0a:63:15:
1a:54:b1:5e:d2:e1:ec:75:69:84:38:4d:2d:c2:5e:bb:4f:d8:
c0:4f:88:37:f1:d7:4e:83:d2:b0:bb:79:ab:3c:55:e8:03:c6:
40:b8:c1:fc:20:bd:9a:a2:b5:52:84:75:c4:a1:51:b0:6e:69:
07:68:72:7f:68:fb:b8:77:12:fc:f5:ca:af:13:9c:60:19:d5:
58:bc:52:ae:af:cc:ce:29:c7:85:fa:8b:68:3c:b9:19:18:aa:
29:15:d7:c2:d3:e4:41:b4:36:12:45:b3:13:0c:05:68:46:16:
1a:c0:a7:8e:5f:f3:3f:cc:a6:11:7b:e1:4c:ac:f3:ac:fb:50:
06:ff:06:76:53:6a:6f:9b:eb:d2:41:24:96:13:c6:d4:21:6e:
64:fe:7f:6e:f6:60:78:b7:66:ee:bd:37:0d:f3:3d:e2:a1:b6:
af:08:19:fd:98:1c:d2:88:69:c2:8f:b5:58:f8:c2:d9:a1:c2:
af:b2:3d:5e:57:2b:5b:3a:21:7f:15:46:c4:39:6e:a9:76:5a:
7d:62:15:1e:d8:c9:80:c8:0c:93:79:e2:f8:95:17:4b:94:eb:
bb:bd:d9:60:9f:3f:ea:34:ad:b5:79:73:76:e7:dc:d6:f9:f5:
90:a4:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org