Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/yFsW7MxfMpXqiWJgqxpu0cQseTM.roa
File: yFsW7MxfMpXqiWJgqxpu0cQseTM.roa (raw, json)
Hash identifier: Cwcnxmg2FlAmmYhV4/fF/kq95MJtcRKQrOWfP+oRrOo=
Subject key identifier: C8:5B:16:EC:CC:5F:32:95:EA:89:62:60:AB:1A:6E:D1:C4:2C:79:33
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 018CC5DC77A33AF43A8BB80385C12DA70A69
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/yFsW7MxfMpXqiWJgqxpu0cQseTM.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207191
IP address blocks: 5.102.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:77:a3:3a:f4:3a:8b:b8:03:85:c1:2d:a7:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85b16eccc5f3295ea896260ab1a6ed1c42c7933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f3:a6:db:5d:cf:bc:c5:4a:af:db:46:c0:3f:
46:65:8e:82:85:e7:5c:18:41:05:ad:ea:76:15:d0:
f4:d1:8a:17:14:52:d5:67:6a:38:46:89:39:39:3a:
05:64:61:ae:7b:96:6c:fc:2d:56:39:be:c7:ea:49:
12:19:99:c8:b8:f2:2a:c1:ec:f7:2e:cb:97:de:28:
62:72:c1:bc:a8:e1:81:4b:2e:39:90:ec:48:fd:5c:
f0:6a:b5:55:4e:10:52:ac:aa:3d:37:20:00:f4:49:
19:c5:66:fa:fe:86:69:5d:74:92:06:9b:7d:45:4d:
93:69:37:ad:23:ef:0b:b0:97:79:b1:da:36:3c:05:
78:4e:f5:0d:f3:98:59:a4:c9:f7:0c:52:85:e6:6b:
9a:42:ed:35:ab:40:61:e8:73:50:a4:77:3c:90:22:
75:d8:0a:cb:30:eb:43:29:43:62:d0:78:cd:43:bd:
07:f6:b0:ee:ce:49:1a:30:6a:c4:b3:8c:04:c0:8c:
e0:b4:a5:b3:dd:7b:be:3b:56:c4:8d:05:8b:81:b4:
00:b1:cd:b5:eb:a3:f1:34:da:90:65:59:8e:23:89:
a4:96:fb:5f:c8:47:3c:6a:8a:5e:4b:e9:9c:f9:c4:
5a:f2:63:80:66:4b:0d:a3:2a:3f:46:eb:b7:64:69:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5B:16:EC:CC:5F:32:95:EA:89:62:60:AB:1A:6E:D1:C4:2C:79:33
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/yFsW7MxfMpXqiWJgqxpu0cQseTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.134.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e4:70:7e:59:b5:38:57:77:d5:93:ea:43:58:9d:e1:11:c1:
8e:54:8a:28:f5:98:f8:73:74:69:7a:61:af:1a:13:a7:9a:86:
a0:a8:86:67:7f:a0:1a:3b:09:fa:24:ce:e7:39:95:7d:c7:41:
24:c2:e8:82:06:85:9a:d1:c5:26:8c:d0:e5:05:fe:a0:cc:99:
35:0b:5c:02:68:bf:3c:c4:ba:5f:6a:28:fd:c6:bb:dc:db:a6:
ac:06:72:dc:38:5f:36:06:44:23:c5:12:52:52:86:e4:97:dd:
99:40:2b:1c:c8:ce:f7:64:57:a7:2e:b9:d0:98:89:bf:bf:51:
ae:76:f5:d5:6b:19:f6:ee:26:cf:dc:f1:b4:4f:a8:60:54:74:
a8:1c:3f:a8:58:a4:5b:1f:ee:39:32:5e:2f:cc:63:30:47:3b:
e4:9b:2a:9a:fc:34:c5:ac:b8:48:de:c6:3d:90:76:a7:8c:ff:
1e:5e:46:04:78:6e:c0:ca:0a:22:80:4b:e1:44:09:68:fe:0c:
c4:41:2e:0c:12:f7:17:4d:ef:44:31:89:61:6e:ed:3e:b3:d5:
a1:33:6a:a9:48:35:a3:ea:5b:75:da:cb:44:40:fe:24:5b:eb:
7b:21:e4:e3:28:47:5d:a2:f0:b3:e8:f6:eb:ed:24:92:f8:14:
44:91:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org