Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/L50vcIX8cmfVpGj7NRCT5nxWaOs.roa
File: L50vcIX8cmfVpGj7NRCT5nxWaOs.roa (raw, json)
Hash identifier: ZJvD7P+XiLQzdUR91U+KouUXZYl5WMjyc7f9jzC3sqI=
Subject key identifier: 2F:9D:2F:70:85:FC:72:67:D5:A4:68:FB:35:10:93:E6:7C:56:68:EB
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 018CC5DC7856214F8D4138FD2DC7CFACC577
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/L50vcIX8cmfVpGj7NRCT5nxWaOs.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209259
IP address blocks: 5.102.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:78:56:21:4f:8d:41:38:fd:2d:c7:cf:ac:c5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f9d2f7085fc7267d5a468fb351093e67c5668eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:88:d9:7e:4a:89:6a:04:d0:51:bc:0b:fd:
83:26:50:6f:0a:ec:d4:8e:68:71:94:9f:11:7c:24:
ac:3e:47:ca:70:34:ca:1a:39:c4:40:06:6f:2b:53:
de:84:c7:73:29:74:b4:ae:fa:70:71:86:67:1a:70:
a3:20:ef:b6:13:cf:90:eb:30:68:78:60:2b:a2:96:
82:c9:e8:4a:0a:98:b6:ed:d1:8d:3e:7f:47:1b:45:
ed:9c:0a:e8:b1:4c:5d:b0:fc:10:0c:da:2c:dd:5f:
ce:0c:ed:50:b8:92:ed:7b:4d:08:25:ee:7c:59:63:
4e:e4:0b:d1:8e:38:9a:6f:b8:f9:8d:9a:7b:35:95:
f7:2a:04:e8:b6:e3:b1:e0:0d:22:b0:98:c8:30:d4:
dd:c6:c9:ba:0b:fa:7f:61:1e:11:ee:01:25:16:6b:
5f:9d:84:f9:62:fe:5e:b4:98:04:1f:a1:0e:47:4c:
73:95:61:14:93:b6:68:18:70:3c:68:5a:e6:47:78:
13:c8:ad:f5:48:0f:77:97:54:ac:90:fd:35:3a:7e:
6a:62:27:dc:ea:87:67:84:37:2c:0d:27:e5:2a:3f:
f4:c4:ca:f9:77:ed:25:8a:57:05:13:d1:90:bf:bd:
5d:d2:46:f1:9d:26:eb:7a:8e:a6:e9:09:be:0d:f1:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:2F:70:85:FC:72:67:D5:A4:68:FB:35:10:93:E6:7C:56:68:EB
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/L50vcIX8cmfVpGj7NRCT5nxWaOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:e4:82:c4:cb:7c:ae:5c:2e:30:13:02:25:87:1c:78:12:a0:
11:90:96:37:31:b5:ed:17:89:c1:fb:e8:eb:82:43:a7:cf:0d:
2f:32:0a:28:f6:5a:07:48:5a:ac:f0:61:9d:a7:0f:1a:3a:a2:
47:8d:d3:b2:fb:c1:8b:70:fd:04:ba:30:08:b8:26:d0:9e:e8:
da:7a:44:f9:e4:fe:1b:fa:d0:15:d7:dc:51:b5:df:24:16:5f:
73:9f:17:03:02:6d:f3:ff:0b:23:ba:c1:4d:1e:0b:d2:c8:03:
d2:95:71:13:00:19:6c:9a:03:c7:1a:a4:eb:14:ff:ee:33:93:
43:6c:82:7b:23:9d:19:89:ce:20:00:7f:67:a3:12:16:a4:40:
92:3a:78:76:2f:8f:e9:30:c1:ce:c4:59:1c:a5:ee:35:30:f2:
a9:d9:59:67:e3:e1:5c:67:08:06:af:04:4c:4a:31:d0:ed:29:
31:69:19:86:7c:a1:ef:84:29:22:b1:3b:76:96:cb:da:4d:fd:
a2:c6:f3:76:aa:a4:1d:4a:e0:89:72:90:9b:0a:af:84:30:10:
9d:b1:2d:73:8e:7d:ff:40:ff:ad:8f:0d:fe:e2:63:0b:ff:a9:
48:1e:b8:c7:42:11:1a:64:59:fc:82:4f:88:4b:0f:15:2d:42:
4d:28:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:03 2024 by rpki-client on console-fra.rpki-client.org