Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CIQNSr49zoadqi8i1W9Eb2SX_AA.roa
File: CIQNSr49zoadqi8i1W9Eb2SX_AA.roa (raw, json)
Hash identifier: huAtnBu25umQPBQl0SpAlQUAj788/bNuq2fT4uUSmFU=
Subject key identifier: 08:84:0D:4A:BE:3D:CE:86:9D:AA:2F:22:D5:6F:44:6F:64:97:FC:00
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019067B90B89F13366A33C90AC814FA78A04
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CIQNSr49zoadqi8i1W9Eb2SX_AA.roa
Signing time: Sun 30 Jun 2024 05:58:18 +0000
ROA not before: Sun 30 Jun 2024 05:58:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 5.188.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:67:b9:0b:89:f1:33:66:a3:3c:90:ac:81:4f:a7:8a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 30 05:58:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08840d4abe3dce869daa2f22d56f446f6497fc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:2c:7f:8e:6b:49:16:0b:b5:bf:45:fe:f8:
b2:47:38:bb:f9:d5:29:a2:81:69:c5:51:9c:24:18:
4c:e6:cd:39:af:db:c8:6d:e0:bb:83:79:dc:d4:02:
8a:a6:18:00:34:09:e4:18:a1:34:da:7b:68:f6:18:
b4:5c:73:2f:b0:c7:4c:6d:39:15:58:f5:fc:1b:62:
91:7a:8a:65:f1:a2:96:1c:c4:ed:7d:b8:fa:c6:18:
56:15:d4:aa:81:1b:bd:3d:b8:8e:44:8c:80:5e:7e:
6b:4a:54:6e:93:29:a0:3f:27:b3:31:1c:eb:b3:3b:
5c:3b:22:9e:a7:1f:12:6e:44:b4:66:64:90:b6:3c:
c9:94:f3:48:9b:8a:18:d9:2f:88:51:4a:79:e0:d2:
34:a9:53:ac:8f:8c:c5:a7:49:7f:f7:21:8e:a4:91:
f3:f3:73:88:c2:fe:3b:62:06:9b:72:15:8a:66:e7:
2b:cb:9e:6c:f2:b7:6a:60:4b:95:95:77:8f:fe:ae:
95:b7:ae:d2:fa:f5:ac:9b:08:79:02:ba:ff:dc:c7:
24:67:18:12:17:33:a4:10:6c:0d:39:8b:ca:1e:a1:
73:9e:3e:ff:a9:69:7e:86:e3:86:cf:5d:b9:3e:9f:
50:f9:f5:e3:d8:d3:c7:40:44:93:4c:55:53:5c:6a:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:0D:4A:BE:3D:CE:86:9D:AA:2F:22:D5:6F:44:6F:64:97:FC:00
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CIQNSr49zoadqi8i1W9Eb2SX_AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.164.0/23
Signature Algorithm: sha256WithRSAEncryption
51:41:c2:a2:4a:f4:c6:a3:0e:97:c2:2c:bf:9a:4a:3d:5e:5a:
b3:87:72:91:5d:3c:ba:59:2b:a0:da:e3:05:fd:1a:8b:7c:a7:
e2:85:3e:4f:08:b1:e9:74:fb:8b:45:18:4d:2f:44:6e:a3:6c:
5d:a5:04:1c:c3:8c:06:a7:e8:66:10:e3:c7:f0:6d:c6:f9:db:
50:96:1b:5d:c8:b4:8f:e4:11:01:92:d5:89:90:af:90:f5:6d:
09:c1:a1:b7:fc:99:f6:43:cf:b1:19:fa:de:27:a5:83:f8:cb:
e7:be:0b:70:b2:2e:88:0e:6a:2f:5e:8d:52:3a:58:0a:0b:44:
d4:60:dc:09:db:7f:37:a5:21:68:2a:d6:ae:9b:03:39:dd:e6:
3e:3c:21:ff:73:81:17:01:6c:40:12:7b:28:52:fb:fa:fa:69:
a0:e8:c0:af:ed:e5:87:e2:2e:82:cb:a6:ba:26:ec:c6:eb:af:
41:26:f7:c4:0b:d8:b0:2f:c8:67:09:15:9b:58:a2:50:57:b3:
18:e5:06:34:05:57:0d:e6:5f:43:4c:f0:0c:5c:39:32:ab:9a:
79:98:45:03:7a:da:0d:97:f1:26:4d:ba:cd:75:a8:21:7e:62:
46:b2:09:93:e3:0c:67:5d:fd:83:82:3b:41:eb:fe:64:a1:7a:
24:d9:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:34:04 2024 by rpki-client on console-ams.rpki-client.org