Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/CYrrLmQyJZ8ICdvYi9zbuLVngl8.roa
File: CYrrLmQyJZ8ICdvYi9zbuLVngl8.roa (raw, json)
Hash identifier: xmgzmUkkyQEsGHvXae5pScc7JvonLHUiudmj4/6MB30=
Subject key identifier: 09:8A:EB:2E:64:32:25:9F:08:09:DB:D8:8B:DC:DB:B8:B5:67:82:5F
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0190C33738A46B265BE06398D05658B42ABA
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/CYrrLmQyJZ8ICdvYi9zbuLVngl8.roa
Signing time: Thu 18 Jul 2024 00:21:34 +0000
ROA not before: Thu 18 Jul 2024 00:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 103.76.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c3:37:38:a4:6b:26:5b:e0:63:98:d0:56:58:b4:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 18 00:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=098aeb2e6432259f0809dbd88bdcdbb8b567825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:ff:42:ec:f4:12:63:3b:ab:94:7c:ae:d4:
5c:f2:8d:a4:4c:c0:9b:16:e0:4b:06:61:b8:68:b6:
81:40:a1:4b:83:e0:47:c9:94:9e:b6:53:95:49:d7:
a8:32:af:cf:a1:2d:19:df:fd:d4:7b:9d:45:32:fe:
d9:d2:6d:a6:94:e1:4d:eb:0c:27:5b:ab:f9:3a:53:
15:fc:97:bd:8d:54:3e:c7:e6:5e:e8:da:d4:11:fa:
f0:65:ba:0a:02:89:80:cf:2e:d7:44:3f:d5:0f:06:
c0:31:9c:ac:80:14:20:93:e5:ac:4b:49:6e:f8:92:
74:8f:53:90:d2:b7:fc:82:03:07:76:dc:89:18:9f:
74:70:ee:cf:c9:15:b6:6f:17:92:3f:99:61:40:e5:
66:65:80:a5:b7:f6:50:6a:83:9f:8e:d6:84:b3:2f:
e4:43:21:c6:e1:5a:97:7c:ba:0f:b0:5c:d9:48:d6:
1a:a2:ed:b1:19:48:ac:94:6d:16:13:51:d2:24:1f:
00:62:70:21:54:81:0f:8d:84:05:2f:3e:9e:95:a9:
d7:35:32:3f:60:2e:ad:65:c3:05:a3:99:7c:dd:03:
d1:a0:56:6b:66:ae:f4:00:39:bb:61:12:ae:dc:c2:
82:a1:92:55:58:b0:c9:88:93:8f:83:4b:94:16:6a:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:EB:2E:64:32:25:9F:08:09:DB:D8:8B:DC:DB:B8:B5:67:82:5F
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/CYrrLmQyJZ8ICdvYi9zbuLVngl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9a:fd:dd:89:9d:30:93:02:56:7d:8f:fe:48:63:5d:91:c5:
f8:ca:aa:d7:78:2a:eb:9d:ce:0d:cf:1c:bd:85:92:6e:70:7e:
41:af:7d:79:04:cd:0a:1f:9f:5a:48:7b:7d:b5:ac:62:d4:45:
48:62:52:35:e0:d4:18:22:ef:0e:ff:f7:5c:57:d0:36:11:b8:
b8:fd:d2:e2:d7:fb:3b:26:b5:f3:85:bb:bb:47:ff:9e:68:83:
35:19:69:40:b0:4d:62:e5:22:05:ac:74:a8:62:70:99:08:9f:
ad:72:f8:ba:1d:a4:d2:eb:ff:bf:dd:b9:06:55:41:c2:20:a2:
17:98:b6:4f:55:72:c0:41:c5:b7:6a:0d:33:53:bc:6c:1e:ac:
15:3f:60:2c:e8:f4:13:86:7d:8f:a0:89:fb:85:34:1a:0b:b0:
50:73:34:03:b6:3e:e7:1c:8d:8b:7b:71:99:68:f1:b6:86:5c:
78:77:5c:bb:99:8d:ed:fe:02:0c:cf:2c:b8:cc:20:2c:33:e0:
09:a6:46:19:80:c1:f0:4d:6c:7b:e3:15:ea:5b:44:f4:6d:92:
5c:c8:b7:ee:fd:ef:4e:2f:49:48:6a:b6:4d:a8:29:9e:ce:d0:
92:88:ab:fd:19:09:18:42:eb:c5:aa:b2:86:56:b3:21:9c:3a:
09:ac:5e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:59 2024 by rpki-client on console-ams.rpki-client.org