Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/dg_4CT2kTDkZyd2lhnITBQY2Gc8.roa
File: dg_4CT2kTDkZyd2lhnITBQY2Gc8.roa (raw, json)
Hash identifier: XkbA9PhnJGswLDlaYqqz9rLQ/XmWPs8RI1j0/HR2+I0=
Subject key identifier: 76:0F:F8:09:3D:A4:4C:39:19:C9:DD:A5:86:72:13:05:06:36:19:CF
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 01912BDCED26A288F1BC66DFF9878D2A319E
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/dg_4CT2kTDkZyd2lhnITBQY2Gc8.roa
Signing time: Wed 07 Aug 2024 08:03:04 +0000
ROA not before: Wed 07 Aug 2024 08:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60475
IP address blocks: 5.253.196.0/22 maxlen: 24
5.253.196.0/24 maxlen: 24
5.253.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:dc:ed:26:a2:88:f1:bc:66:df:f9:87:8d:2a:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Aug 7 08:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=760ff8093da44c3919c9dda586721305063619cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c7:cd:c7:6f:d6:2e:29:77:34:87:a0:31:0e:
aa:c1:25:ce:c5:f9:d9:79:e9:80:fd:e3:53:38:10:
fd:1a:1f:6e:4a:a1:73:58:81:54:60:48:92:c5:b8:
40:90:69:87:95:48:41:14:66:99:ba:9a:39:0f:f0:
4b:8a:1e:82:8d:bd:e0:4e:50:a7:4b:07:ac:e4:41:
50:88:83:7e:a9:43:79:4a:14:1a:7e:3f:0b:4a:8a:
5a:bd:65:75:61:69:c0:57:00:9e:33:e6:61:d6:c2:
37:4a:9b:2c:20:8f:09:c9:e2:9a:84:a9:21:59:79:
14:48:b5:6f:a6:15:54:6c:9d:14:7b:01:89:14:bb:
17:51:4a:c7:12:41:5e:62:96:87:52:d0:12:42:5e:
c8:23:6f:81:2d:4d:50:88:e5:83:70:d8:2b:76:0f:
45:c6:32:5a:37:aa:10:e6:43:11:e9:b4:48:49:e9:
ce:9c:dd:6b:45:a7:6f:e2:a1:fb:38:2b:06:de:b1:
94:b7:1a:78:a1:88:c4:17:6e:3e:23:32:55:e1:60:
67:44:0b:98:e3:9e:7a:84:4f:53:7e:5d:7e:86:2e:
86:43:35:40:f5:16:a9:2e:01:6f:03:7b:2a:f1:02:
9e:e5:9e:d4:03:28:4e:4e:28:73:98:12:53:bc:b0:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:F8:09:3D:A4:4C:39:19:C9:DD:A5:86:72:13:05:06:36:19:CF
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/dg_4CT2kTDkZyd2lhnITBQY2Gc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.196.0/22
Signature Algorithm: sha256WithRSAEncryption
49:6f:74:77:f6:b8:00:fb:f0:47:3f:93:c8:ca:d4:41:d2:b8:
92:07:40:06:c3:a2:07:62:11:eb:b1:79:db:f1:6b:e1:f1:4b:
b1:36:24:ed:0f:d2:9e:e3:30:76:6f:91:cb:48:9e:a6:3e:8f:
cf:f8:8d:e5:91:0a:0d:63:2f:6c:74:89:c5:87:43:83:f6:40:
c0:4b:dd:fe:5c:fc:97:9b:1d:42:2b:b7:5e:63:0e:5a:84:dd:
12:be:b3:06:08:04:fd:e3:3d:6b:7c:de:1b:ba:ba:b5:37:59:
57:27:bb:e9:7a:5d:33:bd:0d:d1:34:e4:f2:ab:ce:67:ee:c0:
87:05:f1:fb:21:cd:c4:cc:15:bd:9f:d2:ac:36:14:ea:30:97:
5d:a6:56:d6:b3:7a:c0:f5:04:f4:c8:4f:aa:32:26:b2:8a:7b:
d0:bf:80:80:da:64:3d:dd:88:9d:2f:31:28:cb:ff:41:4d:9b:
e5:ca:01:10:6a:2f:99:86:6f:34:9f:56:13:fa:51:e8:61:ad:
5e:89:a8:c0:d3:2a:ac:4b:34:42:9a:44:87:93:58:cb:bf:b0:
17:b6:8c:fc:6e:fd:15:9a:2c:fe:e0:29:57:67:76:3a:49:f1:
2e:e4:20:77:b1:2d:53:a8:57:c8:8b:5d:8f:9b:0f:8b:e2:fb:
34:f9:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:42:17 2024 by rpki-client on console-ams.rpki-client.org