Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RtISySXRlKud111IXRIbuQ4e2zw.roa
File: RtISySXRlKud111IXRIbuQ4e2zw.roa (raw, json)
Hash identifier: Hfvz7w/fjJtnj1PBcXgTwIp4rD+wLeBluh0BoefHV9o=
Subject key identifier: 46:D2:12:C9:25:D1:94:AB:9D:D7:5D:48:5D:12:1B:B9:0E:1E:DB:3C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01904AF11FCE541E0D3BA20034647FC43FAD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RtISySXRlKud111IXRIbuQ4e2zw.roa
Signing time: Mon 24 Jun 2024 15:50:34 +0000
ROA not before: Mon 24 Jun 2024 15:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152704
IP address blocks: 103.25.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:f1:1f:ce:54:1e:0d:3b:a2:00:34:64:7f:c4:3f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 24 15:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d212c925d194ab9dd75d485d121bb90e1edb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:a9:ce:27:5d:b9:2b:9e:6b:d0:ee:e8:d7:
8d:24:0d:2e:96:cc:89:b9:59:b6:3f:f6:f0:fa:c4:
d6:6b:b6:d4:4d:f3:59:a8:f2:4e:0a:30:56:a5:af:
1c:b9:5d:48:6d:48:c8:1b:bd:f1:21:ee:bf:3f:56:
58:ee:8f:a6:5f:55:29:ec:7b:7d:f2:c9:e4:58:48:
47:b5:2a:b8:cc:c0:73:1b:31:3e:41:d1:d5:06:4b:
9f:ae:22:9f:8c:da:79:d4:55:11:22:a0:0b:d0:7a:
db:47:df:b2:b5:74:0b:56:4a:ef:2b:8d:cc:8c:eb:
6b:24:b2:8a:f0:b2:fe:f2:50:cb:58:aa:e5:0f:7f:
6c:89:6b:ca:e5:90:30:67:8a:e0:c1:db:44:a4:69:
b5:89:67:6e:9b:1c:b6:97:c8:ba:cd:b4:ff:6e:4b:
58:ad:43:d1:b4:c7:f7:8b:77:55:3a:fb:d7:5d:bd:
c3:6f:81:00:e8:73:43:b8:62:4f:8f:af:81:3e:21:
a0:aa:e6:46:84:6b:1f:5e:ff:d5:ef:8b:27:c8:38:
66:05:96:6a:50:44:ab:51:e7:cf:76:17:72:83:77:
79:59:d2:af:22:e0:05:6f:56:4b:ca:07:35:c5:3c:
66:c7:9d:3c:6c:ee:e0:b5:fd:f2:64:9b:b5:cf:19:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:12:C9:25:D1:94:AB:9D:D7:5D:48:5D:12:1B:B9:0E:1E:DB:3C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RtISySXRlKud111IXRIbuQ4e2zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.86.0/23
Signature Algorithm: sha256WithRSAEncryption
91:12:06:23:55:6f:05:79:37:14:d8:10:24:86:9f:dc:7b:ba:
7a:1d:73:32:06:8c:73:42:cf:38:f6:d5:dd:69:33:17:98:35:
a3:97:05:e6:aa:7a:8b:f4:66:4c:27:9d:51:b7:b6:9a:b0:78:
f3:7c:c3:50:4b:64:dc:ad:3d:59:09:56:a6:60:7f:43:67:01:
54:b6:65:50:c5:93:77:d6:3c:fd:85:88:d6:d9:d3:3d:88:8c:
49:ff:5b:59:20:6a:4a:03:c2:e3:3d:ba:37:85:ea:85:87:8c:
f6:92:9a:eb:d3:3f:b6:37:ce:84:48:3c:4f:9a:be:d9:56:c4:
30:78:b0:4f:55:d0:b4:aa:ac:6c:3f:0b:5d:7e:80:32:61:5d:
f3:ac:5e:5d:05:0b:3b:5e:f8:fe:0e:92:49:7f:9f:d6:6a:9c:
31:04:5b:d8:92:65:d2:53:71:4a:cc:c0:aa:e3:e5:b9:8b:fd:
6f:a9:b2:4f:e0:11:a2:96:d3:1a:b2:74:5a:a5:fa:b2:29:12:
29:05:95:66:a2:1a:ac:46:9d:73:18:1c:d5:6e:76:d0:58:67:
5f:29:19:b4:25:ae:0b:83:68:db:4c:6d:92:7e:8c:51:79:b3:
3b:b3:8e:57:81:72:1c:35:38:20:0d:14:5f:ca:9f:8d:13:7c:
bf:7a:e5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:41:17 2024 by rpki-client on console-ams.rpki-client.org