Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/iqVCWnQAefmccyWauiqGEdhkrBc.roa
File: iqVCWnQAefmccyWauiqGEdhkrBc.roa (raw, json)
Hash identifier: aqZIsVAj4myvKk+JEr87WycFwqPQY/0X9VeN+ifABgc=
Subject key identifier: 8A:A5:42:5A:74:00:79:F9:9C:73:25:9A:BA:2A:86:11:D8:64:AC:17
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018CC8018AF9F0EF19974855EF5A2380DD58
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/iqVCWnQAefmccyWauiqGEdhkrBc.roa
Signing time: Tue 02 Jan 2024 02:29:53 +0000
ROA not before: Tue 02 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 103.76.130.0/24 maxlen: 24
185.173.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:8a:f9:f0:ef:19:97:48:55:ef:5a:23:80:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 2 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8aa5425a740079f99c73259aba2a8611d864ac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:34:da:93:f0:7f:16:0d:ec:3c:71:ed:d4:
86:44:ad:6e:77:ea:57:89:b5:79:22:37:71:5f:2c:
bf:1c:b7:9e:ee:e5:cf:c6:40:c1:e7:f8:f3:1a:33:
82:30:e7:83:39:d3:63:45:07:9b:bc:74:b7:f7:1b:
1d:be:6f:4c:d5:36:04:8b:1b:50:d2:54:5b:76:d8:
0b:ed:f9:5f:5e:f1:93:3c:1c:61:c7:b9:3c:e5:45:
cd:ca:b0:05:bb:27:bf:54:6d:2d:9c:46:94:9e:dd:
ec:cb:55:54:36:a7:1c:59:48:0c:55:c7:3f:91:5e:
f8:ba:12:19:c3:e1:00:b4:73:f6:86:87:37:ff:60:
bd:c4:71:9d:67:1c:e0:e3:77:e8:a7:6a:17:4f:33:
9e:2e:43:25:2e:b8:2e:e8:f7:57:4f:63:38:28:a9:
07:df:dd:c2:7d:ce:70:bd:b7:08:4b:d8:1d:00:3e:
65:42:1b:23:6e:61:98:b1:3f:19:54:98:2c:ee:3d:
d1:e0:02:a6:9c:4c:22:c4:5a:b1:f9:fd:6c:c3:31:
80:b8:10:30:b6:c5:14:00:79:2a:0e:46:f8:4b:d9:
b1:c4:9f:ff:00:b6:ce:61:61:2d:6f:22:b7:09:84:
4f:14:38:e3:9b:10:73:a9:1a:29:a6:42:bf:b4:f8:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:42:5A:74:00:79:F9:9C:73:25:9A:BA:2A:86:11:D8:64:AC:17
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/iqVCWnQAefmccyWauiqGEdhkrBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:e8:45:e4:e6:f0:45:69:6c:4a:90:65:59:3b:85:39:29:e2:
d4:b8:e2:20:18:b8:75:99:63:f1:72:0b:a0:f8:fc:b7:52:a6:
39:8e:54:72:3c:e6:5e:9b:44:fb:2d:07:bf:ab:c0:17:94:8a:
de:3c:91:45:e7:b4:37:a6:c6:a1:e5:9f:86:6f:57:bb:0b:e7:
d4:75:24:77:5f:aa:46:d0:31:45:26:b9:7a:ab:63:90:f3:60:
eb:f8:73:7b:05:e7:83:0f:8d:05:f9:6f:78:cf:84:47:ba:6a:
12:2b:df:83:4e:14:b3:44:a7:d6:3b:02:dd:bf:1a:84:a7:0f:
0a:04:2f:9a:aa:cb:de:2c:6b:ee:a5:16:6e:d7:6f:bd:6f:8b:
24:53:b0:cd:69:e9:56:16:23:4f:22:bb:74:16:f0:02:27:c2:
48:d2:68:58:5d:6a:ef:a4:db:75:be:50:ae:b9:63:86:f2:bd:
f2:7a:06:e5:1a:43:52:ea:38:d5:ce:a7:78:e4:2b:5b:8e:22:
f8:d3:06:cc:2e:51:1e:f9:f2:67:5c:b1:a5:62:cd:33:cd:94:
76:35:ab:38:68:8a:df:47:70:9c:3c:98:e3:18:a5:57:3b:b0:
ff:fc:2e:aa:70:13:b4:9c:88:3f:26:c7:39:83:45:28:15:fd:
bd:69:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:23:27 2024 by rpki-client on console-ams.rpki-client.org