Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k_j3LU1-uINirJ0DGyJij_uC1fU.roa
File: k_j3LU1-uINirJ0DGyJij_uC1fU.roa (raw, json)
Hash identifier: JtvVAHldrAQCMC9TqCu27GN8JDk1EksOOfRKYGLIVm8=
Subject key identifier: 93:F8:F7:2D:4D:7E:B8:83:62:AC:9D:03:1B:22:62:8F:FB:82:D5:F5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193B7805AF7A421A6FFEF8203F4FF2D82EB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k_j3LU1-uINirJ0DGyJij_uC1fU.roa
Signing time: Wed 11 Dec 2024 20:54:22 +0000
ROA not before: Wed 11 Dec 2024 20:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26042
IP address blocks: 5.175.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b7:80:5a:f7:a4:21:a6:ff:ef:82:03:f4:ff:2d:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 11 20:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93f8f72d4d7eb88362ac9d031b22628ffb82d5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:dd:80:91:44:74:33:9d:03:17:37:89:dc:
c4:50:a5:26:de:30:df:1a:25:e2:2a:50:d7:41:62:
bb:76:7c:f7:92:02:47:2b:2a:d2:4f:e5:61:23:8b:
90:64:20:a2:bc:b7:76:59:76:5d:6b:0d:89:2e:67:
4d:ed:9e:59:c6:b0:6d:c6:4b:98:01:83:01:24:95:
4c:9e:9f:0b:65:b8:98:cf:22:5e:33:50:f8:c6:b4:
1a:67:e5:b4:2a:fa:e5:a8:ea:bc:4a:fc:c4:d7:db:
5b:68:09:7d:23:e0:8a:72:8a:7b:55:12:dc:63:6c:
8a:e5:d4:43:6f:c8:39:e4:88:4e:bd:93:15:ba:6e:
5d:c3:f0:dd:93:5a:ee:1e:62:3e:e9:f7:63:0d:0f:
17:48:0e:7c:7f:fb:68:c0:96:0b:a8:b9:5f:ac:72:
00:bf:4c:df:a5:c7:06:41:79:65:b6:f6:2f:50:79:
0b:0d:e0:e3:d8:ca:a9:e4:47:0b:4d:c1:c2:c6:ac:
3f:29:52:47:31:5b:35:23:cd:f4:4d:d0:2b:84:49:
5e:9e:6d:41:e8:69:40:be:09:15:97:2d:4f:05:02:
de:d2:01:85:30:84:5e:a0:25:fe:de:76:26:f5:a4:
ba:18:6f:c0:e0:26:d1:85:63:93:04:e0:29:91:df:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F8:F7:2D:4D:7E:B8:83:62:AC:9D:03:1B:22:62:8F:FB:82:D5:F5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/k_j3LU1-uINirJ0DGyJij_uC1fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.234.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c1:75:9c:fd:2f:30:58:bf:0e:b6:17:63:74:02:ef:6b:c6:
78:ad:b1:e6:19:49:fe:41:47:c0:f0:7c:87:81:8d:3c:35:d4:
c8:38:f5:00:0b:c5:42:d0:fc:f4:eb:70:ea:1d:b7:51:fc:b6:
4c:77:7b:f4:d8:89:44:fe:54:fd:0e:91:2c:4d:75:0b:82:d0:
fc:41:7e:23:51:c4:1e:eb:ea:a7:4c:31:d2:ab:d4:ca:a9:a2:
a5:6b:75:f8:96:a1:72:ec:42:87:65:6e:d9:d9:53:f0:49:6f:
cd:4c:a1:b8:48:b3:17:d0:c1:66:d3:b5:ee:97:b9:54:e6:b2:
ca:01:40:c6:44:6b:b7:61:46:4d:c9:fd:ac:44:5b:45:01:e8:
5d:11:7b:4d:3a:80:e8:f9:d8:8e:b3:81:0b:3a:dc:97:0f:1b:
13:e4:06:bb:a1:62:18:87:4c:25:07:55:e0:eb:5c:85:a2:8d:
e3:76:bc:79:af:2e:0b:ed:e5:22:de:76:7c:6c:7e:e6:98:b2:
a2:db:6d:20:95:99:bf:bc:d6:8d:e0:d4:da:c0:1f:e3:c1:5b:
27:0d:f9:c6:18:dd:78:2e:9a:e8:ef:b7:7b:93:58:16:7c:c1:
75:9c:eb:a5:ec:70:82:b9:4d:62:81:46:46:1f:cb:b2:00:ba:
3b:3c:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:20:41 2024 by rpki-client on console-fra.rpki-client.org