Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5f6i0RCvMcf8hk-BbFNFq9_3Fsg.roa
File: 5f6i0RCvMcf8hk-BbFNFq9_3Fsg.roa (raw, json)
Hash identifier: tzxCZZ4nguCPSKoTQYXaKVmTyR/NuNVBAaYpCWV5HFM=
Subject key identifier: E5:FE:A2:D1:10:AF:31:C7:FC:86:4F:81:6C:53:45:AB:DF:F7:16:C8
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01918EA5E6332055BE2B865FE3807EE7C623
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5f6i0RCvMcf8hk-BbFNFq9_3Fsg.roa
Signing time: Mon 26 Aug 2024 12:25:22 +0000
ROA not before: Mon 26 Aug 2024 12:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214313
IP address blocks: 103.107.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:a5:e6:33:20:55:be:2b:86:5f:e3:80:7e:e7:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 26 12:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5fea2d110af31c7fc864f816c5345abdff716c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:77:af:3d:ca:04:0e:32:80:ae:19:86:71:
90:a3:12:c1:83:f5:19:70:e8:a8:c6:7e:13:9d:f3:
39:41:77:ed:9b:39:f1:e2:f8:6f:64:28:1a:10:67:
bb:81:fd:e4:59:33:3f:95:fe:67:08:c0:48:e0:4f:
77:42:d0:6d:fb:9a:0b:87:29:a7:79:2a:0c:7e:61:
4d:98:79:2c:82:d7:a9:c8:71:a7:a2:55:23:72:69:
77:53:00:a6:6f:ef:f2:68:c9:f9:e3:ce:a6:78:4e:
ae:49:d4:19:b9:00:f4:2a:d7:f0:cc:8c:c1:37:aa:
35:41:30:bf:7b:eb:fb:66:1e:f4:df:3d:6a:67:69:
a0:f1:9c:dd:87:a2:d8:41:1d:7a:4c:96:6f:93:12:
3a:99:b3:5b:6a:0c:b0:a2:56:33:45:76:b2:f2:08:
d5:0e:9c:c8:b9:bb:7e:23:fc:1c:2c:1d:28:a1:08:
c2:1b:fc:93:48:5d:af:2e:a1:aa:63:23:c6:bc:f7:
bb:c2:21:d7:11:d4:65:2b:b9:dc:89:14:9f:23:cb:
ca:01:af:f2:bb:34:8f:50:c3:b5:cd:41:0e:b9:ae:
0c:85:3e:55:da:22:cd:b4:b4:43:ba:1b:76:f0:bd:
40:ce:2d:cc:7f:b9:99:b6:1c:28:8c:c5:0a:86:44:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:A2:D1:10:AF:31:C7:FC:86:4F:81:6C:53:45:AB:DF:F7:16:C8
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/5f6i0RCvMcf8hk-BbFNFq9_3Fsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.107.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:73:e1:90:e6:9e:b6:70:29:8d:96:3b:71:09:a0:5f:1b:1f:
cd:22:2b:5d:31:00:ac:f6:2c:29:72:84:e4:2c:36:fc:19:43:
32:9d:f5:03:56:aa:9a:49:85:83:c3:32:6d:cf:a3:cb:38:57:
ff:8e:19:b8:4a:eb:a3:d0:02:89:86:ae:40:a1:91:9c:47:7b:
d5:47:14:89:a5:81:f4:d5:99:82:44:2f:fe:2c:7b:a4:15:ed:
d8:6f:9c:ef:8c:36:17:1f:bc:c4:b4:64:34:92:48:cf:30:9b:
2b:47:52:22:f2:33:0c:cb:ee:e2:ed:71:ba:00:48:73:d0:96:
28:4e:8e:8c:d8:2a:de:82:7b:62:55:30:b5:5a:32:a4:73:f5:
33:00:65:c0:e2:84:ba:3f:43:d1:bc:1e:73:77:cd:1a:99:46:
4f:48:b0:4e:04:9a:42:29:bd:db:3f:14:8d:81:6c:4d:ca:b6:
d7:ec:e8:fa:06:33:df:5a:3d:15:f8:ef:8f:c3:d1:2b:98:41:
db:f9:68:4f:81:d9:33:98:a7:6f:27:c0:40:fd:3e:63:25:54:
68:98:57:94:50:02:dc:d7:51:62:b4:f6:72:e6:45:af:20:95:
ff:ec:43:b6:5b:c5:73:48:15:06:44:78:94:96:5b:a9:c6:05:
8a:54:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:39:00 2024 by rpki-client on console-ams.rpki-client.org