Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa
File: QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa (raw, json)
Hash identifier: FJEs1UAw/2fWEyd3HQec4Uk3Cub4P5S3Z3JxVhVUvqI=
Subject key identifier: 42:62:58:58:77:F7:CB:49:C5:92:9F:BA:35:B9:CA:D1:BD:A4:93:03
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018CC94DB60E039EA12E948BD365DA13C286
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa
Signing time: Tue 02 Jan 2024 08:32:42 +0000
ROA not before: Tue 02 Jan 2024 08:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206124
IP address blocks: 5.154.103.0/24 maxlen: 24
5.154.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:b6:0e:03:9e:a1:2e:94:8b:d3:65:da:13:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 08:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4262585877f7cb49c5929fba35b9cad1bda49303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:3b:76:d6:fb:a2:77:59:0f:90:42:96:18:
ce:be:15:aa:4e:4e:18:97:29:de:f7:4f:f1:44:53:
dc:21:7a:65:88:8f:8b:12:40:99:34:a7:cb:b5:60:
a6:3a:90:f1:64:7c:6f:e0:dc:2a:5c:20:54:a2:9c:
fb:52:ab:ff:13:9e:a2:3a:8b:10:e2:48:40:3f:94:
a2:8a:98:0f:20:d9:07:17:af:7a:21:0d:8d:7f:e9:
d4:c6:71:92:be:c3:d6:ec:64:14:bc:14:13:31:e0:
d4:ee:5b:98:a2:15:b0:6d:93:49:70:99:59:db:42:
de:fb:b3:73:e6:55:90:e1:0f:cb:ff:db:50:3b:3d:
cb:a9:d1:b1:a8:de:ca:e0:c6:de:54:55:49:ba:8a:
a8:14:96:4a:9f:47:d6:63:4b:02:fe:62:a9:08:78:
94:6f:24:ec:c7:92:11:f4:5e:e1:d5:0e:70:24:ab:
0e:48:3c:22:2b:2f:d4:dd:94:54:07:97:45:55:7a:
31:6b:15:d5:21:f4:02:cb:1f:64:12:ae:b2:e4:66:
eb:d0:9e:87:ab:43:ec:5b:82:80:fc:7c:6b:ea:ef:
97:8c:d1:25:bb:27:5b:1f:04:8a:66:e9:b2:3a:20:
09:24:b9:50:8c:0d:64:57:3a:6e:40:2a:17:7c:ba:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:58:58:77:F7:CB:49:C5:92:9F:BA:35:B9:CA:D1:BD:A4:93:03
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QmJYWHf3y0nFkp-6NbnK0b2kkwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.102.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:10:87:20:cb:f3:2a:f8:0b:5a:a2:01:45:95:50:48:74:66:
07:82:6b:84:7e:a8:80:5d:2a:06:8d:30:d0:c9:ca:49:66:30:
82:39:7a:8e:48:e5:39:53:5b:cd:72:71:67:c2:f6:3d:49:3b:
61:ae:1d:c6:f7:ed:5f:cd:c2:a0:53:4f:ab:8a:eb:6a:40:e2:
bf:db:93:aa:5f:2c:3e:e3:5e:4d:fb:fc:3b:18:34:14:66:92:
a5:bb:1d:e6:79:03:e1:f5:39:08:ea:da:87:56:fb:c2:b9:43:
05:69:6c:67:48:e9:11:47:f8:16:ce:f0:e4:39:8e:ee:4a:6f:
1b:bd:29:2a:ea:94:b2:25:20:cb:24:cf:c9:c4:0b:bf:cf:5c:
7b:3a:18:b9:f9:20:92:8e:9b:a3:95:73:1a:30:1b:0e:28:a3:
9c:cb:0a:3e:5a:05:38:d7:87:3d:27:99:a1:8d:d9:51:b6:0d:
22:34:0f:b3:eb:58:b9:cf:c0:4f:c3:4b:07:b4:72:38:bb:98:
de:5e:55:9f:d8:55:6e:88:f0:f7:03:69:3d:32:34:40:54:01:
1d:61:ff:bf:de:62:f6:1a:54:00:34:36:e4:b4:b5:56:8b:74:
2e:4a:6d:42:4e:14:77:4d:96:3d:91:83:6d:a9:da:90:ec:cf:
0e:f4:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 06:09:00 2024 by rpki-client on console-ams.rpki-client.org