Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pMses9rlNXPtzPn2ZiffnOXDIpc.roa
File: pMses9rlNXPtzPn2ZiffnOXDIpc.roa (raw, json)
Hash identifier: 3QQQ5wyORtu4HrRmGp8UgG0k7EhhlZCDNZqprVVgFX4=
Subject key identifier: A4:CB:1E:B3:DA:E5:35:73:ED:CC:F9:F6:66:27:DF:9C:E5:C3:22:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193CE056E7D1EA107964917A4898DD04BB2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pMses9rlNXPtzPn2ZiffnOXDIpc.roa
Signing time: Mon 16 Dec 2024 05:51:22 +0000
ROA not before: Mon 16 Dec 2024 05:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:05:6e:7d:1e:a1:07:96:49:17:a4:89:8d:d0:4b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 16 05:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4cb1eb3dae53573edccf9f66627df9ce5c32297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:f5:ff:d9:48:9e:c6:b9:b0:9a:ef:00:35:
64:d4:93:00:dc:0c:21:2d:70:4b:72:35:d7:33:ae:
89:9c:ea:46:4f:bd:55:b6:07:e0:2c:55:91:e8:26:
75:da:19:b2:8e:ed:32:00:b2:63:a6:a7:39:74:3e:
b5:7b:ef:0d:a1:71:67:5d:1f:0f:40:1c:5a:81:65:
28:7d:e5:5c:9a:af:0b:37:a0:86:1f:a9:f5:e2:d7:
15:67:54:b6:70:c0:7f:4f:bd:67:a8:d4:33:15:0b:
3f:4d:a3:63:b7:61:d6:6a:ad:61:14:40:24:21:c2:
71:62:d3:0f:97:25:32:06:99:b2:36:f5:b4:6e:59:
ea:7c:37:65:ce:1f:76:0f:ed:f5:c8:3d:45:17:2c:
e3:0e:57:e0:f6:40:59:c2:bf:67:4a:95:21:22:1b:
d1:f3:d3:93:44:08:1a:c3:39:d8:3c:f8:07:96:bc:
20:c5:c0:e0:1d:e3:50:77:37:b0:82:f8:fa:80:b9:
8e:36:5a:fc:e6:05:db:de:53:17:53:4f:1c:18:e5:
0e:50:a1:c3:3a:ae:81:35:5c:fb:06:79:66:89:e8:
40:5a:3e:fc:35:ae:12:6e:1e:f6:4d:f3:56:c6:6c:
11:3a:a0:eb:80:4b:a3:31:32:b0:61:f0:fe:38:d5:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:1E:B3:DA:E5:35:73:ED:CC:F9:F6:66:27:DF:9C:E5:C3:22:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pMses9rlNXPtzPn2ZiffnOXDIpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a8:53:92:7d:4e:9c:af:0e:2e:74:c8:aa:83:5a:91:06:d6:
db:89:ce:84:e6:0f:a9:a9:17:03:61:8e:f5:6a:e8:16:36:0e:
dc:1d:c7:ab:0d:56:06:fe:ab:9c:46:6b:ed:0c:88:a9:a5:0b:
45:d8:f8:fa:a0:71:b1:63:2f:1e:65:76:7b:ca:ba:e6:af:4a:
27:31:53:fc:cb:2c:a9:e7:cf:19:47:f6:ee:d1:89:87:cf:1d:
5f:36:db:28:0c:ae:5c:ee:ce:29:38:ef:56:84:db:e4:52:e4:
e8:b9:d8:d4:04:9f:b0:e9:6c:31:08:cb:2c:f7:60:8f:fc:e6:
d8:fb:dd:01:a7:1c:06:87:4e:e3:9b:2f:f1:af:a0:3c:0a:ef:
11:9f:70:3a:30:b2:20:68:5d:32:94:cc:c4:a8:57:73:55:b6:
16:f1:6a:54:7f:31:21:df:09:71:3e:38:8f:71:d4:50:0c:ae:
c4:4c:93:c0:6d:3c:db:f8:25:77:9f:f3:b2:ef:51:3e:d7:85:
c3:ff:fe:cf:3e:2e:84:bb:90:7c:e5:32:e4:f9:42:ea:4d:8d:
c7:b2:6e:99:aa:4e:77:33:a4:12:d5:cd:2d:83:ad:68:86:83:
da:50:c2:55:e6:58:c2:96:ab:02:70:c8:f6:54:1c:dd:a8:90:
6d:50:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 03:20:41 2024 by rpki-client on console-fra.rpki-client.org