Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nx4fmnC5ehWSt_AsAL7NGVXVEc4.roa
File: nx4fmnC5ehWSt_AsAL7NGVXVEc4.roa (raw, json)
Hash identifier: xTaUmqhhPyp2n4FokJzwZETEBFzo0y9JExrehOJRG/8=
Subject key identifier: 9F:1E:1F:9A:70:B9:7A:15:92:B7:F0:2C:00:BE:CD:19:55:D5:11:CE
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018EBCA1A688E36E80A8C201FCBA42DB803B
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nx4fmnC5ehWSt_AsAL7NGVXVEc4.roa
Signing time: Mon 08 Apr 2024 07:34:54 +0000
ROA not before: Mon 08 Apr 2024 07:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 103.75.70.0/24 maxlen: 24
103.76.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a1:a6:88:e3:6e:80:a8:c2:01:fc:ba:42:db:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Apr 8 07:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1e1f9a70b97a1592b7f02c00becd1955d511ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:a5:c9:27:0d:38:4e:ac:df:de:90:f1:27:
55:e5:04:57:7e:0b:33:07:f5:5c:c3:b5:e1:9a:46:
13:db:4d:b9:31:35:93:12:10:49:fe:4c:48:5b:61:
93:34:c1:75:a9:92:b0:57:60:04:82:7e:82:07:3d:
c4:99:2c:a7:7e:a8:37:2d:bd:41:6a:b3:e4:c5:ed:
7e:fb:0e:ea:32:77:44:9d:b0:d5:77:6a:06:de:c5:
d4:bd:62:de:28:29:ab:a7:fa:47:86:52:cf:9f:f0:
21:d8:78:e7:d0:1d:7c:29:8d:f5:7e:e4:6c:7d:1b:
b8:46:99:ea:a8:69:c7:f6:32:a4:18:0b:69:f1:62:
c2:d7:1f:e3:61:22:ba:9d:a8:a0:22:71:41:03:7b:
13:ba:aa:2e:7b:cd:bd:39:33:64:08:65:4e:fc:e3:
0c:60:ab:05:95:c2:e5:10:de:b5:73:d9:c8:5c:f1:
3d:1d:5e:77:0f:70:76:9a:72:34:d1:3a:5d:d3:d2:
be:2b:67:6f:54:b1:25:81:04:c7:7e:9f:db:42:0d:
0c:e9:e4:ab:e1:39:80:15:d5:19:cf:12:c1:4b:e4:
19:15:39:1d:63:8c:80:cc:b0:2e:61:cb:97:c0:69:
e9:ab:33:ad:6e:f5:f1:bf:65:74:ae:b5:69:c4:c9:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1E:1F:9A:70:B9:7A:15:92:B7:F0:2C:00:BE:CD:19:55:D5:11:CE
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/nx4fmnC5ehWSt_AsAL7NGVXVEc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.70.0/24
103.76.128.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cd:0f:1d:ab:ec:9b:8c:d1:99:91:42:e2:1b:a9:9a:a1:9c:
7c:8a:90:c1:b6:e3:1d:5b:64:d4:75:ad:3a:48:16:42:b6:6b:
71:5c:4a:cd:18:1f:c7:d7:5e:d7:6d:f3:45:9e:07:b3:26:68:
fd:87:cc:6b:33:e3:a8:56:48:13:93:79:4a:6e:e8:d2:17:1e:
3a:9c:98:d6:f6:68:41:78:a7:0c:49:f4:64:a2:ba:95:5d:34:
8c:c0:da:0c:73:2a:21:40:15:2a:54:a3:d8:eb:66:e6:34:74:
a9:ca:9e:fd:32:a0:1b:c2:5a:6e:34:a1:64:0d:f4:f8:f2:57:
48:2e:17:72:3a:5e:79:42:2e:26:7d:b0:de:32:d8:db:9a:fc:
f0:fb:c6:cf:5b:e1:04:d8:cf:8d:be:b3:23:fb:1c:57:d7:f5:
90:ee:42:4f:2c:04:cc:c0:80:16:27:9c:bb:58:35:fc:61:ad:
3f:76:67:56:3e:a9:f5:81:e4:71:5c:a2:60:f5:2b:d1:55:27:
6d:11:04:21:b1:81:8b:e9:0b:aa:c1:02:78:33:ef:53:6e:40:
d0:d7:bb:63:e1:f7:ad:69:be:61:ba:9f:f2:64:e2:c5:b7:82:
48:9d:e8:d3:91:c7:d5:7d:71:30:34:99:43:1e:f1:ff:e3:9f:
1a:34:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:45:29 2024 by rpki-client on console-ams.rpki-client.org