Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/x1Lm7W6-e-pSgV_6x-1rQopZVXc.roa
File: x1Lm7W6-e-pSgV_6x-1rQopZVXc.roa (raw, json)
Hash identifier: 6koRD9ExzlqipcjdsTPibegYAPphYX72n0MT6kq3WK0=
Subject key identifier: C7:52:E6:ED:6E:BE:7B:EA:52:81:5F:FA:C7:ED:6B:42:8A:59:55:77
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 0191283D7FB7AF710BAF474DA27CF53BEB01
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/x1Lm7W6-e-pSgV_6x-1rQopZVXc.roa
Signing time: Tue 06 Aug 2024 15:10:04 +0000
ROA not before: Tue 06 Aug 2024 15:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20836
IP address blocks: 5.253.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:3d:7f:b7:af:71:0b:af:47:4d:a2:7c:f5:3b:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Aug 6 15:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c752e6ed6ebe7bea52815ffac7ed6b428a595577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:71:3e:f3:36:5b:4d:29:f4:e5:90:3c:c7:
c9:60:16:1c:94:23:85:07:e1:f0:30:55:15:b7:c9:
42:eb:2b:d6:27:4c:8d:86:5b:f3:3d:5e:da:cc:c7:
1e:f7:33:aa:03:42:b8:41:9a:58:a9:69:c8:02:f8:
42:f4:31:87:43:11:a6:9f:0e:5d:a0:a3:fa:ab:2a:
7b:2f:eb:c2:a9:a4:c4:87:38:5e:e8:fa:e1:32:da:
3a:de:72:22:03:22:cd:f7:76:b2:6a:8d:fb:5a:a1:
87:a2:87:64:05:e9:3d:47:42:9b:71:12:cd:3a:c8:
69:8d:ce:f4:b5:9a:81:b0:e7:e4:8f:8a:9a:b9:b8:
41:3e:88:70:25:38:15:2b:d8:7e:ee:36:62:76:99:
93:eb:5a:36:80:85:cd:e6:b0:6a:ee:37:ef:37:32:
bb:bd:cb:34:3d:62:87:89:f2:c8:82:91:27:f5:d9:
47:ed:60:7d:d8:7e:b9:07:34:b0:00:6b:ed:d5:1e:
13:ef:9b:60:67:8d:ab:9c:59:f0:84:33:31:1d:7e:
44:c5:1e:61:35:4f:a8:fe:c6:4e:ca:db:a5:22:1b:
b7:c3:7e:d8:14:86:c4:4a:31:a6:c3:51:17:cb:f5:
4a:73:bb:a3:b3:26:72:c4:ca:11:41:5b:2c:39:d2:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:52:E6:ED:6E:BE:7B:EA:52:81:5F:FA:C7:ED:6B:42:8A:59:55:77
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/x1Lm7W6-e-pSgV_6x-1rQopZVXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.198.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4f:47:2a:f1:ed:be:6a:2c:cf:69:d3:59:c7:b3:3a:01:b6:
00:cd:e1:0a:56:06:18:d9:32:90:de:17:86:07:71:d5:47:6e:
2e:be:c7:1e:e6:6c:ad:1c:9f:ec:fc:4b:1a:66:d2:87:a9:57:
3d:e9:da:98:7d:6e:1a:42:36:55:5b:aa:e9:32:30:2c:fb:2d:
63:18:9d:6b:c1:2e:65:88:e8:80:7e:89:be:53:c3:12:f5:5f:
bf:5d:a3:18:e4:6b:de:dd:05:8e:26:eb:a9:89:93:1a:b1:d7:
c7:d0:3c:f6:05:77:bf:3a:ba:17:67:a5:06:a0:71:05:7f:95:
5b:3f:64:3e:54:4b:08:3f:ca:51:fa:01:52:c1:6f:0c:3c:7c:
a8:bf:fe:8b:4e:f3:ae:c7:80:f1:4b:53:00:4a:b6:92:38:f2:
15:95:c5:dd:1e:88:2a:5f:95:ee:3b:db:df:ba:d3:19:01:0c:
af:2c:f5:0c:02:dc:b5:3c:85:23:66:34:ad:90:35:82:16:37:
91:f9:8d:a0:45:0b:02:34:9a:e2:3d:e5:dd:63:aa:1c:d0:dd:
f9:4d:b8:65:5d:d0:2f:85:ac:ce:9d:40:6c:74:8b:65:d3:9a:
46:2c:b9:3c:d9:2c:c3:3d:aa:29:56:18:7a:57:41:dd:4a:09:
65:64:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:46 2024 by rpki-client on console-fra.rpki-client.org