Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/p6DZtb_6s2AdoF6gezuixAZ6ML4.roa
File: p6DZtb_6s2AdoF6gezuixAZ6ML4.roa (raw, json)
Hash identifier: 8BcH5lgauLkiJSbODhCBNw/dnjF0zzmK/EbNvFoEkEQ=
Subject key identifier: A7:A0:D9:B5:BF:FA:B3:60:1D:A0:5E:A0:7B:3B:A2:C4:06:7A:30:BE
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 018CC8031197C755EBF8FC2A8B363E510760
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/p6DZtb_6s2AdoF6gezuixAZ6ML4.roa
Signing time: Tue 02 Jan 2024 02:31:33 +0000
ROA not before: Tue 02 Jan 2024 02:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48815
IP address blocks: 5.104.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:11:97:c7:55:eb:f8:fc:2a:8b:36:3e:51:07:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jan 2 02:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7a0d9b5bffab3601da05ea07b3ba2c4067a30be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:1a:94:b9:bc:b7:fb:25:99:47:66:10:44:
b9:43:20:6a:16:0b:87:82:a7:84:96:b7:56:54:24:
54:51:4f:5d:1a:10:4a:77:85:ff:4c:d5:63:fd:a9:
82:ee:95:48:60:cd:f3:63:6f:5e:79:09:9b:d4:5b:
31:15:16:3c:de:c8:94:bf:13:b5:d5:48:d8:6f:0c:
33:a9:1f:ca:2b:f3:dc:49:aa:e2:4a:81:34:c3:58:
a1:ec:1a:ef:29:69:9f:c3:6a:5a:08:40:80:83:a5:
b2:9d:99:3e:1c:22:a8:af:69:65:ae:9b:f8:83:e0:
c2:2e:c6:ab:21:a9:4a:7d:13:8d:5c:38:a5:22:97:
73:e2:40:54:c4:c8:87:e5:46:f5:54:e7:74:96:38:
a3:d4:9d:73:c6:52:17:da:22:20:3e:1b:4b:ee:20:
ac:24:73:b7:59:7e:dc:36:85:4e:fb:aa:b8:4b:ba:
5f:80:12:18:0b:49:a7:d7:bc:5f:ab:df:4b:f2:4b:
ea:38:8f:98:34:1d:e1:d2:22:37:01:08:26:04:b1:
0a:e0:6e:4d:a3:35:a7:56:37:45:03:3c:e1:7b:20:
db:b9:ba:4c:f4:17:58:36:12:0a:c2:a4:da:bf:e8:
61:e7:fa:c7:97:c2:6e:9c:23:e1:3e:db:63:32:f5:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:D9:B5:BF:FA:B3:60:1D:A0:5E:A0:7B:3B:A2:C4:06:7A:30:BE
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/p6DZtb_6s2AdoF6gezuixAZ6ML4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.24.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7e:d9:0e:31:97:4b:07:d3:0a:6c:8e:fc:73:5f:73:c5:c4:
62:c7:f6:dc:ae:a3:de:74:9f:da:17:d4:73:3f:85:8c:0f:0f:
8e:26:8e:dd:75:4c:39:20:06:63:b1:97:2c:e5:da:4e:fa:d6:
37:20:82:7c:31:c7:86:8e:f8:97:ef:02:56:c3:e8:25:11:c1:
75:bb:a9:c0:d2:e3:cc:69:00:c9:bd:8a:0d:d1:f8:a1:f0:f0:
75:07:8b:37:96:ad:e3:8c:97:1f:9f:cd:3f:fd:c0:79:4d:b3:
a1:be:0d:c3:59:a2:23:4d:3e:0b:d2:bb:ee:89:5d:e4:91:4b:
c5:9f:33:90:20:4a:07:e8:9b:c9:c1:3d:b3:97:ef:97:43:cc:
78:8e:88:16:58:a0:5f:0e:9e:26:68:65:cb:73:1a:44:17:da:
28:5e:21:4a:e8:d8:4f:b5:2a:db:b1:5d:11:e6:31:fb:b9:92:
f3:32:42:fd:0f:37:af:03:ca:55:be:d4:f8:52:68:41:58:92:
4c:30:f8:77:84:60:39:62:5f:0b:6a:b4:cf:0f:58:c0:6f:6f:
69:65:9c:dd:15:eb:17:27:eb:b7:eb:75:fc:78:c7:30:24:97:
22:07:16:bc:68:ab:db:57:64:c7:0f:56:fb:0f:ed:bb:00:ed:
93:6d:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:55:16 2024 by rpki-client on console-fra.rpki-client.org