Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nMgKO5Xltde4_5PDm-3dXa_OxY0.roa
File: nMgKO5Xltde4_5PDm-3dXa_OxY0.roa (raw, json)
Hash identifier: Y292zoqUTac3pypd3RaFNOlO0SyIjcOR034CfdNSbWY=
Subject key identifier: 9C:C8:0A:3B:95:E5:B5:D7:B8:FF:93:C3:9B:ED:DD:5D:AF:CE:C5:8D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193680750E49EB8EB4B759447E86C0B0CC5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nMgKO5Xltde4_5PDm-3dXa_OxY0.roa
Signing time: Tue 26 Nov 2024 10:32:10 +0000
ROA not before: Tue 26 Nov 2024 10:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57433
IP address blocks: 5.83.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:07:50:e4:9e:b8:eb:4b:75:94:47:e8:6c:0b:0c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 10:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cc80a3b95e5b5d7b8ff93c39beddd5dafcec58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:09:b0:8c:ce:b2:45:bd:d6:4a:6f:1e:61:
7c:31:0b:08:87:ac:ed:31:6f:0c:12:e5:90:f7:7c:
16:42:24:c7:44:03:ca:ce:d5:40:8f:25:f5:7a:b5:
4e:70:86:6e:9f:e9:01:ce:ba:7b:6c:dd:11:0d:94:
fd:c0:26:4d:f9:15:cd:6c:8b:f9:ff:81:2f:72:67:
2c:e5:01:10:4b:9b:bd:19:03:7f:93:55:f6:e9:58:
37:f7:79:62:09:fe:85:2b:60:f2:6d:06:bd:d5:63:
33:01:83:82:fa:25:b7:89:5a:cf:77:02:d4:e6:16:
ca:e9:71:7a:5e:c9:fa:3d:e2:5b:56:a3:56:17:21:
d2:1e:ce:28:d3:a4:34:5f:c2:12:bf:01:00:db:cc:
2f:74:83:61:0c:82:01:b0:c8:b6:30:5d:a5:89:e3:
10:6b:65:5b:79:45:a3:1f:88:ef:57:24:74:bd:d9:
c7:b7:7d:d9:6d:1b:16:cf:fb:ae:4a:84:b4:b5:ad:
ee:dc:36:16:6b:b2:98:7d:9e:aa:9a:35:a7:37:0d:
b5:41:44:42:01:42:c3:42:f3:be:ba:a3:85:39:75:
0b:f6:a0:71:a4:3e:0a:37:28:74:8f:e5:1c:5a:99:
5c:ce:28:da:e6:6c:cc:b6:4d:60:9b:64:ae:6b:8a:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:0A:3B:95:E5:B5:D7:B8:FF:93:C3:9B:ED:DD:5D:AF:CE:C5:8D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/nMgKO5Xltde4_5PDm-3dXa_OxY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:f2:6f:9b:b3:e8:f2:ec:08:9f:f8:c8:3a:d9:06:0e:a8:
99:fb:fc:c6:a6:2b:eb:95:3a:9b:3a:0e:e1:1c:6d:d7:d3:fc:
27:9b:ec:bc:bf:32:80:eb:60:15:d7:33:20:d8:16:18:bf:c3:
7e:c1:28:2c:33:17:a4:30:ee:b4:03:af:41:f3:5e:29:cb:cb:
bb:46:5d:2c:28:28:2c:07:41:15:c3:83:7e:99:e5:64:19:88:
51:dd:4d:1b:e9:7e:d1:84:03:21:ae:3f:3f:f2:e5:5e:e2:35:
33:87:2a:3e:da:71:ea:c4:14:e7:9d:f4:4c:22:8e:1d:e5:8b:
d7:24:81:d0:f3:04:e9:ca:df:fd:a1:8e:95:54:fa:eb:f6:22:
7a:f8:27:9e:2a:fc:8e:e3:d4:fa:bc:d9:9f:b7:5f:8f:44:6b:
19:a7:91:bc:8b:63:35:90:88:85:64:1e:04:a4:2b:62:52:34:
88:0d:2c:77:df:30:85:73:e9:ea:22:9e:71:31:29:cc:3e:53:
ef:9c:5d:15:8a:2f:ec:ba:c4:4c:eb:fe:a5:69:6c:a6:7b:a6:
8e:7c:84:ba:dd:5b:2c:29:bf:99:00:b2:80:89:64:70:38:1c:
61:7e:3d:bd:8a:e2:c3:3e:33:fc:8f:43:87:c0:7b:5c:57:f5:
35:32:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:31 2024 by rpki-client on console-ams.rpki-client.org