Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/vZI6cCFk8HUzkkeunJCMog6cXCY.roa
File: vZI6cCFk8HUzkkeunJCMog6cXCY.roa (raw, json)
Hash identifier: NwVpmKMVYt44W1EXcszcBLpMTEiAz3MhriFSAcZ+Exk=
Subject key identifier: BD:92:3A:70:21:64:F0:75:33:92:47:AE:9C:90:8C:A2:0E:9C:5C:26
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 018D01DAEB4AEBD441FCC79487B5EC93B169
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/vZI6cCFk8HUzkkeunJCMog6cXCY.roa
Signing time: Sat 13 Jan 2024 08:05:40 +0000
ROA not before: Sat 13 Jan 2024 08:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212954
IP address blocks: 5.253.131.0/24 maxlen: 24
5.253.128.0/24 maxlen: 24
5.253.129.0/24 maxlen: 24
5.253.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:01:da:eb:4a:eb:d4:41:fc:c7:94:87:b5:ec:93:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jan 13 08:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd923a702164f075339247ae9c908ca20e9c5c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:ab:56:a1:1f:94:fe:80:0b:03:ca:2e:29:
67:6a:79:ef:11:17:91:b0:aa:2f:ab:d0:f6:32:41:
7e:44:02:d3:d0:4c:7e:e9:86:8b:cb:a1:96:89:47:
fe:00:3b:0e:2b:09:42:4f:83:b0:d2:3c:c0:3f:0a:
81:86:3d:44:5b:78:fc:06:de:ac:60:72:cc:21:03:
c1:9a:2b:28:54:c7:3e:67:40:87:18:f9:7d:16:87:
ab:d5:f8:83:ee:18:22:26:b9:f5:b2:5f:1e:21:03:
81:ab:7b:f4:1e:82:e4:e2:e4:d8:d1:73:10:7c:1c:
b5:af:04:fb:b3:0b:99:63:5e:ce:26:b7:57:80:be:
1e:16:49:63:67:70:3e:87:49:1f:ff:80:7b:63:28:
e0:d9:13:60:6f:c8:eb:52:95:ff:2b:ee:eb:af:5b:
14:8b:59:49:70:5c:39:c4:e8:55:99:f7:0d:ba:a1:
34:e1:48:0a:4d:e7:09:ac:2e:a4:2f:11:ca:39:47:
9c:5d:d8:d4:18:f8:7e:84:a9:84:1a:eb:10:03:f4:
a0:ec:a1:82:c6:49:1c:be:2b:57:8a:7b:5d:d1:74:
22:70:93:d5:d7:a1:e3:df:a2:50:72:22:bc:79:01:
92:66:f9:fc:65:7f:96:97:42:31:18:85:e9:5f:10:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:3A:70:21:64:F0:75:33:92:47:AE:9C:90:8C:A2:0E:9C:5C:26
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/vZI6cCFk8HUzkkeunJCMog6cXCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.128.0/22
Signature Algorithm: sha256WithRSAEncryption
11:23:be:47:60:09:cb:bc:78:50:5c:89:97:1f:de:dd:7a:ea:
2f:aa:ea:b0:0a:00:4e:62:b0:57:70:df:c8:56:af:93:e1:75:
9e:0c:7f:c0:1b:bc:6b:c8:de:21:98:94:31:b0:51:61:dd:f8:
ed:b8:ab:85:24:16:71:7b:d8:2e:6d:6e:a7:14:da:f9:4e:24:
ee:91:fa:20:28:01:ab:28:56:63:f4:4a:f2:b1:7e:08:00:82:
34:ea:da:e7:10:66:9c:3e:24:22:8c:a8:76:af:88:c0:22:5c:
df:49:21:2b:5a:ba:6c:63:40:a6:b1:0a:a2:20:f9:99:d4:c4:
f2:45:d7:63:e1:5b:ea:b3:0e:48:a6:1f:25:3c:2a:8f:73:2c:
5d:ff:48:17:fb:fd:60:71:05:df:3e:44:ec:db:a7:18:4e:b6:
6c:e9:53:5f:b9:8e:5a:56:61:c0:b6:8e:c6:32:01:73:c5:03:
a6:88:6a:41:4f:d4:f0:39:eb:bf:9d:bf:88:f2:3e:6a:ea:c9:
a3:d9:86:25:08:71:17:07:2d:75:82:4c:aa:a8:cb:9d:ba:ee:
ab:4a:63:bc:7c:a0:be:e0:11:14:aa:96:c7:9f:5a:79:eb:a5:
ae:cc:18:9e:c8:06:04:af:40:c8:30:ec:ce:1f:6f:3a:ea:6b:
c4:c8:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:07:03 2024 by rpki-client on console-ams.rpki-client.org