Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-WvspI4kgLfnUlz_c_GrO9qTk8.roa
File: y-WvspI4kgLfnUlz_c_GrO9qTk8.roa (raw, json)
Hash identifier: bQdmyDDfru83BoPKtAbU1LcKlCzsP0rNooDrXYtjhNI=
Subject key identifier: CB:E5:AF:B2:92:38:92:02:DF:9D:49:73:FD:CF:C6:AC:EF:6A:4E:4F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193535C7D1328C5D0645AB8A3E50406CCCC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-WvspI4kgLfnUlz_c_GrO9qTk8.roa
Signing time: Fri 22 Nov 2024 10:13:10 +0000
ROA not before: Fri 22 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48039
IP address blocks: 5.231.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Dec 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:5c:7d:13:28:c5:d0:64:5a:b8:a3:e5:04:06:cc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 22 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbe5afb292389202df9d4973fdcfc6acef6a4e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:c3:15:a3:21:9e:09:7f:89:74:f7:d2:2e:
38:bc:d7:28:58:a5:b5:a6:c5:c2:0f:47:06:68:59:
3c:c0:d5:16:34:a5:7b:bd:ba:b9:fa:37:fa:0f:29:
f7:80:aa:2b:bb:5d:35:d5:ff:38:f5:8c:72:1b:2c:
c5:73:a7:d0:81:43:c0:8b:a4:53:75:d6:ce:1f:4d:
29:b9:01:fa:7d:11:25:c9:18:24:54:a5:a4:06:75:
23:62:d2:37:32:0e:19:34:6b:54:c4:4e:82:5e:73:
e6:9d:cb:a9:ce:68:98:39:1e:97:f9:4b:66:ca:3e:
24:5d:20:4e:49:44:89:c0:e6:a4:87:4a:2f:63:ab:
02:de:85:bb:dd:54:95:30:e6:61:ff:a2:8d:8d:63:
59:87:25:83:d7:fb:0d:57:3d:cd:71:5c:6f:0c:48:
72:75:0f:0d:1a:cc:bf:a0:d5:5b:20:94:d6:a2:8f:
22:ce:a9:af:c5:63:ed:5e:f3:0c:f3:f6:e7:0c:24:
5a:71:da:b6:e9:26:11:fd:4b:d6:86:af:87:8a:8d:
fd:14:1d:e9:4b:39:fb:55:c3:54:bd:b4:c3:0e:13:
fa:9d:7b:b9:e9:0e:81:c2:6d:a7:b2:d7:4e:42:dd:
3f:b3:63:0e:07:cb:27:84:1e:0f:72:02:84:2b:a6:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E5:AF:B2:92:38:92:02:DF:9D:49:73:FD:CF:C6:AC:EF:6A:4E:4F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y-WvspI4kgLfnUlz_c_GrO9qTk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.38.0/24
Signature Algorithm: sha256WithRSAEncryption
13:0d:83:57:17:43:4f:57:e0:33:d1:d2:eb:4b:81:d4:fe:5a:
63:b9:65:3d:0f:aa:c4:5a:cd:ce:d7:14:07:27:24:50:5e:10:
0e:2e:7f:ff:a9:83:5b:03:e5:32:3b:3e:33:e2:c5:ac:ba:b0:
48:1b:09:b7:1d:a3:69:1e:a1:8f:2a:33:6a:53:bb:30:80:27:
05:6b:0b:83:7c:33:5a:03:37:68:e6:22:ed:03:e8:be:f8:0f:
2d:dd:81:e7:b7:2e:45:63:eb:cc:d7:3c:d2:e9:cf:ed:ab:b3:
4f:9d:70:c1:e0:f7:79:65:09:6b:8e:08:90:98:a5:93:11:8e:
bf:65:96:be:64:56:a0:90:fb:11:ae:ce:21:ae:63:5c:5a:25:
5f:31:57:5a:76:4f:ba:27:84:ce:cf:70:05:16:94:12:f0:6a:
6c:ba:91:a1:65:72:e9:56:80:62:e1:56:3b:52:f8:ee:81:51:
af:b3:1d:0e:b1:e5:a8:df:f0:cd:ee:18:7b:c0:d1:6f:40:7c:
d4:8b:a3:d4:7c:94:3e:e6:e7:d6:2b:51:24:90:7a:34:93:0e:
97:d3:80:48:e9:a1:4b:55:5d:b0:98:c1:33:6e:0e:a1:27:3c:
e4:a3:b0:13:b2:fc:0d:ee:72:b4:f2:59:24:07:b4:17:d0:db:
3c:a6:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 18 04:28:32 2024 by rpki-client on console-ams.rpki-client.org