Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FSlQLahZIUcuzgfLWweneFBuRF0.roa
File: FSlQLahZIUcuzgfLWweneFBuRF0.roa (raw, json)
Hash identifier: UQTvlL6E7UkmCVbKAVfYLkHYJwfMT21H4uds3QqTsus=
Subject key identifier: 15:29:50:2D:A8:59:21:47:2E:CE:07:CB:5B:07:A7:78:50:6E:44:5D
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 018CC56DEFFE1373B54C4B6648D6F2834D8D
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FSlQLahZIUcuzgfLWweneFBuRF0.roa
Signing time: Mon 01 Jan 2024 14:29:25 +0000
ROA not before: Mon 01 Jan 2024 14:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202421
IP address blocks: 103.229.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ef:fe:13:73:b5:4c:4b:66:48:d6:f2:83:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Jan 1 14:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1529502da85921472ece07cb5b07a778506e445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:4e:ae:a1:5d:70:77:76:32:49:41:29:ee:
bb:e9:a9:17:d3:ef:9f:cb:a9:4a:32:dc:92:21:42:
30:20:9e:ec:a2:d7:9f:d6:30:bd:ff:6c:17:0b:e8:
a8:cf:54:89:a0:85:e3:ab:00:b4:ea:e3:92:5c:09:
d8:2f:ae:38:e4:90:0a:d5:28:e8:29:8b:4b:97:fc:
31:5f:4f:4c:db:2d:01:a8:ab:d6:9d:e9:5c:d8:70:
69:d3:61:ed:ec:4e:cf:65:ca:04:05:82:9b:d1:4c:
8c:67:04:4d:08:95:25:43:bd:0f:84:a5:02:2b:ba:
14:13:31:53:63:53:94:dd:4d:91:e7:54:b7:62:d1:
7c:b4:71:dc:f0:6c:7f:cd:7c:40:de:ac:12:43:3b:
8d:08:56:0e:9a:cb:df:20:a5:8d:35:93:36:86:21:
94:73:2b:08:80:55:e9:89:9d:dd:1a:3f:0e:1e:32:
b9:a2:9e:b9:9e:99:2b:0a:87:8e:87:33:37:0f:56:
4a:75:69:d9:e4:e1:b8:da:46:8a:92:5e:74:df:13:
d9:f5:6e:d2:c3:aa:bb:1d:e4:17:25:c6:95:e8:53:
8d:43:3e:74:ff:64:67:6a:7a:fc:3e:20:37:e4:35:
8b:62:da:e8:5e:d2:4a:91:5d:55:db:01:b8:46:06:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:50:2D:A8:59:21:47:2E:CE:07:CB:5B:07:A7:78:50:6E:44:5D
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/FSlQLahZIUcuzgfLWweneFBuRF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.169.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5c:52:98:dc:60:7c:e3:1f:df:b7:5f:a3:eb:17:f1:af:c7:
b2:8d:a2:44:41:a7:73:ae:e0:90:29:b2:67:2b:9c:da:a8:55:
49:26:9a:68:78:9a:44:16:09:69:19:12:bb:27:b4:87:a8:72:
03:a6:4e:ce:11:d6:71:c5:7c:61:11:07:c8:ab:19:91:1e:2a:
9d:67:b8:bc:42:cc:77:15:fa:86:ed:b8:5b:42:85:38:54:62:
d1:34:11:3d:b2:c2:39:69:38:07:e1:27:b9:e4:fb:75:78:69:
14:5e:89:cf:01:b1:17:93:12:4e:ca:ce:23:43:f4:48:b6:31:
a6:cc:44:d4:67:f2:05:83:43:c5:d9:45:cc:06:70:53:09:5d:
39:a0:1f:12:d7:0c:f8:ad:11:6f:ba:ed:93:09:bd:f3:e2:cf:
8b:c8:d1:ef:49:47:d5:bd:93:15:6d:13:5e:5e:fd:c0:64:70:
0b:1f:9f:2d:8d:2a:09:99:45:53:7b:cf:ca:a5:3d:14:a1:8b:
e4:73:c2:4b:84:6c:36:c6:66:22:91:33:60:86:22:ef:28:d1:
44:ca:a8:7a:25:19:73:c3:b9:72:aa:c0:42:55:2f:f9:8d:28:
bb:c7:76:2e:1e:ca:9d:f6:7f:cc:1b:30:77:80:d7:bb:1c:05:
e7:fb:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:26 2024 by rpki-client on console-ams.rpki-client.org