Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/90R5Nf1Jm6UudE3nKCmtk10Jn5Y.roa
File: 90R5Nf1Jm6UudE3nKCmtk10Jn5Y.roa (raw, json)
Hash identifier: wxadMh5QQcKisorJgf2k0n82xKfaexZeg6bUX3IrtUU=
Subject key identifier: F7:44:79:35:FD:49:9B:A5:2E:74:4D:E7:28:29:AD:93:5D:09:9F:96
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 018E0D5559D926E44FC5CED607682F059129
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/90R5Nf1Jm6UudE3nKCmtk10Jn5Y.roa
Signing time: Tue 05 Mar 2024 06:38:01 +0000
ROA not before: Tue 05 Mar 2024 06:38:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211403
IP address blocks: 213.110.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:55:59:d9:26:e4:4f:c5:ce:d6:07:68:2f:05:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Mar 5 06:38:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7447935fd499ba52e744de72829ad935d099f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:80:ed:2e:8c:45:7a:0e:d4:65:0f:3b:11:
bb:91:49:e4:4a:8e:65:07:bc:6d:51:12:0a:03:0b:
3f:74:48:7c:07:12:c8:3f:9f:3f:99:72:e3:0a:c1:
67:a9:f3:27:5f:0f:6f:61:17:93:c4:bc:ed:98:8d:
62:69:62:ee:ba:83:a5:fd:66:fa:17:ec:32:3b:27:
14:d1:de:dd:5f:75:8b:d2:82:97:9e:f5:25:a8:60:
ad:36:17:0e:51:f0:91:b8:b4:6b:0f:a9:31:ed:f4:
24:91:7c:ec:74:29:94:8d:15:bc:12:ae:55:cc:ea:
99:ee:60:13:d1:9a:ef:81:db:93:dd:31:54:ce:3f:
bf:9b:b4:aa:89:29:17:97:e9:b7:2e:91:b1:d3:d0:
c6:20:26:11:d6:a2:81:af:10:08:53:87:99:db:7b:
95:06:6f:ac:a3:ff:06:dd:1c:ad:74:75:6a:9f:b9:
df:ea:60:71:65:3a:61:42:49:a1:dd:fe:c2:15:e8:
ae:da:01:4d:5f:9b:c8:bf:bb:6f:67:11:66:5f:a0:
5f:a7:f3:9d:a1:da:2a:23:78:e1:88:17:40:a7:39:
bf:f6:50:4c:7d:87:f9:3d:b2:8b:09:99:0b:35:b3:
a1:4d:0b:7b:2b:ec:47:43:9d:b1:af:4c:a9:0d:83:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:79:35:FD:49:9B:A5:2E:74:4D:E7:28:29:AD:93:5D:09:9F:96
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/90R5Nf1Jm6UudE3nKCmtk10Jn5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.238.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:71:47:79:9f:a7:80:87:94:24:fe:39:0c:12:06:2f:95:2e:
b9:db:b9:95:0d:08:d3:f7:d4:14:ae:97:d7:2a:63:1b:59:63:
5a:7d:8e:78:ff:12:c1:de:e5:52:19:31:0a:87:ad:e7:0c:7c:
35:d6:55:b9:17:ab:41:6a:d3:dc:87:b1:41:ec:59:c4:7c:ee:
16:ac:ac:ac:27:37:1f:55:43:a9:6e:51:93:6a:fc:ef:ce:35:
7a:c6:a8:f8:e6:fe:d3:cb:f1:37:69:af:c8:d6:44:29:3e:68:
f0:6c:a2:bc:a5:9f:3d:c7:f2:1b:f2:39:d4:93:1c:f4:5a:d3:
8a:cc:24:29:a2:90:9a:c8:cd:66:36:c5:9a:15:61:51:02:86:
7f:33:f2:be:3f:ad:5c:8d:ef:a5:db:5e:ba:63:1a:d5:49:63:
d1:94:30:ae:81:71:29:67:c0:d6:52:52:c1:29:a8:a8:0b:40:
ba:3b:4d:e7:86:fb:c6:b3:58:13:cb:b7:f1:d0:b7:7a:bb:8a:
06:14:e7:ec:62:eb:26:37:17:80:54:1e:b6:50:88:8e:c6:bb:
a1:5d:a4:25:c0:0f:4a:ea:d5:7a:7a:be:77:26:d6:90:ce:42:
87:d2:ee:19:07:33:09:5e:5c:77:9a:94:1a:eb:e8:be:0c:62:
fa:03:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:15 2024 by rpki-client on console-ams.rpki-client.org