Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/rVHmXt2-ayZFaiXMUJcg5djTYDU.roa
File: rVHmXt2-ayZFaiXMUJcg5djTYDU.roa (raw, json)
Hash identifier: j9hxmboKUP83K5c0C1ISd1Iq7WpYLxLGdKaD2M1SwAs=
Subject key identifier: AD:51:E6:5E:DD:BE:6B:26:45:6A:25:CC:50:97:20:E5:D8:D3:60:35
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 018CC7274D85FA87AB673DF6AC02268C919E
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/rVHmXt2-ayZFaiXMUJcg5djTYDU.roa
Signing time: Mon 01 Jan 2024 22:31:30 +0000
ROA not before: Mon 01 Jan 2024 22:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206757
IP address blocks: 5.252.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4d:85:fa:87:ab:67:3d:f6:ac:02:26:8c:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Jan 1 22:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad51e65eddbe6b26456a25cc509720e5d8d36035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:1f:d8:1c:e3:59:ce:4d:72:56:91:1f:47:
bd:6d:2d:20:df:60:a2:0b:2e:77:60:96:28:b5:ce:
69:de:3f:60:d2:a0:df:10:92:ee:5a:32:be:eb:a8:
4b:c6:80:ec:12:07:f8:9c:a7:35:c5:88:c6:00:e3:
63:dd:be:18:0a:fb:9d:31:57:3b:e3:60:7b:ca:78:
51:2b:1d:7b:56:ff:09:b6:ad:5a:ac:0e:58:db:80:
04:fd:1a:49:96:5b:04:c0:88:bf:ee:89:d5:b8:70:
0b:be:6a:aa:43:a4:93:e5:0c:0f:78:29:0c:d5:81:
56:dc:7d:cc:01:50:0a:19:f8:19:48:11:b6:94:45:
03:e8:11:64:be:a6:af:0f:6b:8d:7c:c5:87:d1:c5:
bc:09:2b:e1:70:d1:90:57:f3:70:6b:0d:1a:22:dc:
96:26:a1:2f:8f:1f:39:1c:78:57:09:81:84:be:79:
0d:37:d9:dc:ab:58:f3:25:1a:29:06:ee:90:8a:3f:
16:17:a0:28:7a:b9:71:79:c9:04:bc:e6:57:75:5e:
ae:e0:34:7e:1d:6a:23:30:7b:0d:e4:e7:f2:8e:16:
2a:ca:e7:8c:73:06:90:53:b6:65:25:79:80:9a:d2:
d6:d9:d0:8d:48:48:0e:1c:e9:e5:6d:0b:d3:51:37:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:E6:5E:DD:BE:6B:26:45:6A:25:CC:50:97:20:E5:D8:D3:60:35
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/rVHmXt2-ayZFaiXMUJcg5djTYDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:37:1b:ed:d4:b3:20:72:dc:1c:e1:2c:84:af:b6:22:1d:69:
45:76:8c:95:de:15:31:65:2f:d6:99:0c:2d:a1:e7:40:20:2f:
fb:ee:ee:c9:a7:79:c9:ee:4c:22:af:28:95:09:a0:d9:66:40:
2b:10:4b:1d:4b:9e:8e:8f:c3:f2:32:57:a0:ed:02:b5:25:cb:
e7:99:86:9f:59:0a:53:53:01:71:75:ac:0d:ad:49:9e:2d:79:
11:99:a4:86:73:a7:1b:33:b8:9e:78:49:f4:41:45:42:79:81:
1f:ba:1e:af:3a:ea:87:18:8a:e9:ea:95:c3:2b:91:50:b4:cf:
cb:1f:08:67:24:ab:1a:04:13:e2:48:5e:ec:3d:d0:e2:c0:78:
c3:c7:fc:91:f0:b5:19:68:3f:fd:fd:3d:08:3e:8f:b5:ff:42:
6a:5e:37:7b:44:b2:03:0f:b0:8d:63:b9:0e:c3:dc:21:99:00:
d9:a7:28:9d:25:8a:b6:6c:49:c6:f6:bf:db:9b:a9:d2:6b:1a:
7c:d5:75:2f:bc:e4:1f:8a:fb:d6:c4:e7:8f:30:88:34:cd:4c:
18:59:85:0e:4e:2c:1f:f1:73:21:f5:2d:37:98:68:2b:3f:cf:
b2:ee:fa:97:bc:5c:5c:f6:f6:14:53:29:59:3b:41:06:80:9d:
93:e3:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:25 2024 by rpki-client on console-fra.rpki-client.org