Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kqcXhb55dZwvvocLRSky7jVYeyI.roa
File: kqcXhb55dZwvvocLRSky7jVYeyI.roa (raw, json)
Hash identifier: 2rm1DAuxRQyHPzoOnMiwybYltro/GpV1Bw19l9H6IVQ=
Subject key identifier: 92:A7:17:85:BE:79:75:9C:2F:BE:87:0B:45:29:32:EE:35:58:7B:22
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193535C7DDF9D118FEEB8CA1F4D2EDDA936
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kqcXhb55dZwvvocLRSky7jVYeyI.roa
Signing time: Fri 22 Nov 2024 10:13:10 +0000
ROA not before: Fri 22 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48835
IP address blocks: 5.231.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:5c:7d:df:9d:11:8f:ee:b8:ca:1f:4d:2e:dd:a9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 22 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92a71785be79759c2fbe870b452932ee35587b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:0b:db:3c:fb:e3:1f:86:e9:b2:62:33:bf:
24:ed:80:71:8f:2d:3d:3b:62:82:54:c5:66:5f:e1:
75:ce:23:0e:bd:4c:2e:9b:b6:53:b1:64:38:b5:65:
f5:42:01:44:31:7e:b7:19:4f:7f:ce:e3:0f:55:50:
67:33:84:8c:05:cb:2e:c4:82:b7:65:35:00:bb:72:
16:1e:1a:d6:62:4c:c5:c6:17:07:2d:02:01:d8:22:
cd:0e:5a:07:c5:27:90:7f:c3:2a:47:41:86:fc:92:
b3:8d:8c:2e:41:a1:86:a3:b6:15:61:ce:c6:e5:58:
b0:63:26:e1:17:5f:d4:5d:7e:42:f0:b6:aa:e6:1e:
e5:a3:20:5d:90:f0:42:c6:8d:81:97:aa:a2:76:55:
28:bd:3a:85:ba:be:e0:c5:92:e3:95:4e:54:46:90:
2e:82:6c:0c:d3:ec:4e:58:37:b9:e7:92:9a:ca:d5:
c4:62:25:27:de:d2:f2:1c:3d:3b:ce:c4:68:91:82:
e3:8f:d2:5a:01:28:91:5a:ff:89:68:88:f1:23:64:
0d:a7:a0:10:6b:17:a2:d8:eb:b9:c2:0b:3b:8b:61:
41:2e:98:41:47:06:47:ec:9f:ee:68:b0:54:4b:28:
29:c1:11:d3:91:40:c9:e8:59:0b:cb:c9:c9:17:ef:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:17:85:BE:79:75:9C:2F:BE:87:0B:45:29:32:EE:35:58:7B:22
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kqcXhb55dZwvvocLRSky7jVYeyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d4:a2:fd:c3:66:9e:ab:86:b2:2b:e2:b0:38:2a:6a:f6:77:
25:45:e0:21:ba:21:7e:da:1b:14:1c:ff:a1:af:a1:63:fb:d3:
dd:98:3a:78:b5:70:53:fc:a1:2d:38:c6:36:2c:c4:21:71:a7:
51:6c:8c:0f:02:23:1f:75:78:94:94:ee:77:5f:ae:82:3d:24:
f3:81:b4:8e:88:eb:95:b5:e5:33:b1:0c:4f:e5:8e:a6:31:c6:
0f:22:2e:1b:ac:ec:f3:0b:e1:af:1e:8e:04:3b:a0:a7:be:e4:
e8:38:71:52:24:99:c0:09:67:66:18:01:e8:bd:22:e1:13:9d:
aa:05:08:44:f3:80:89:f4:8d:21:b6:e2:3c:f6:d7:a4:1a:88:
dc:8b:6b:78:e1:3d:3a:d8:4a:55:02:c9:81:88:12:10:50:55:
74:fc:30:3a:34:66:69:b7:5e:e9:72:ca:76:e5:ad:09:ed:af:
8f:04:8f:f6:f7:61:f4:7e:6b:ff:ad:15:dd:07:ee:bd:cc:bd:
9d:c9:5b:24:93:a6:ab:4f:6f:36:40:cd:23:84:d4:2d:eb:e0:
ba:4e:fb:95:a2:b6:eb:db:66:28:28:08:1f:d0:00:c1:10:3d:
92:f3:ed:cb:e2:1a:16:97:8f:ae:d5:8b:c8:48:b2:89:00:4d:
18:a4:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org