Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/5QXCfyDPPphpcAX5JvnC-ujHBCk.roa
File: 5QXCfyDPPphpcAX5JvnC-ujHBCk.roa (raw, json)
Hash identifier: CqYuNfocldGsQ/CXtBO2QCu+/15iww0b0d3v8e23hrY=
Subject key identifier: E5:05:C2:7F:20:CF:3E:98:69:70:05:F9:26:F9:C2:FA:E8:C7:04:29
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 018CC6B89188884BDE4543D9921716E7E109
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/5QXCfyDPPphpcAX5JvnC-ujHBCk.roa
Signing time: Mon 01 Jan 2024 20:30:33 +0000
ROA not before: Mon 01 Jan 2024 20:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 46.255.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:91:88:88:4b:de:45:43:d9:92:17:16:e7:e1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Jan 1 20:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e505c27f20cf3e98697005f926f9c2fae8c70429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:7a:74:d7:8b:73:5b:07:a6:9b:54:3f:34:
28:a0:4f:dc:1f:7a:98:90:3f:38:2c:73:4f:aa:96:
c2:ec:34:31:4a:1c:53:7f:79:e6:c5:da:44:06:5d:
a1:f8:ab:e9:e8:8d:00:26:83:ff:02:a0:77:3f:fb:
0a:fc:a4:62:88:a1:d7:16:26:3e:63:bd:0a:5d:27:
f9:88:25:a4:19:1c:11:b9:6e:b7:ba:cc:f4:b2:f1:
e1:91:a5:02:62:0a:82:f1:b5:16:ed:87:6f:3b:80:
a3:e6:66:62:72:b6:5a:ce:09:b7:f4:ec:49:ec:50:
c6:d5:da:f7:09:18:2e:0c:ca:8d:11:25:20:75:da:
3b:5f:aa:77:1d:70:b2:3a:25:48:06:aa:a3:2a:d0:
ee:2e:04:b1:50:cd:00:ec:78:4a:a6:7e:cc:3d:dc:
a9:73:5a:a4:91:94:da:10:6f:07:e8:f2:74:2c:8d:
e2:95:ca:82:c9:73:46:17:b2:d5:74:15:ff:42:d9:
0d:15:6d:74:88:e5:3f:4e:5a:0c:d8:bd:92:54:e2:
75:4a:35:77:c2:27:f0:d9:f4:f2:fe:ce:fa:6a:14:
0c:fd:e3:c9:d2:5d:b6:48:34:30:c5:0b:0a:4d:1e:
53:3e:7e:b5:49:24:24:82:fd:c6:28:cb:c9:15:ba:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:05:C2:7F:20:CF:3E:98:69:70:05:F9:26:F9:C2:FA:E8:C7:04:29
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/5QXCfyDPPphpcAX5JvnC-ujHBCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9e:c9:5f:4b:55:d0:4d:eb:65:72:c1:4f:24:69:5e:4c:4a:
99:f2:e9:85:7e:d9:f6:87:02:81:c5:0a:9e:61:ef:df:c5:bb:
d1:f1:8e:7e:18:9e:07:b2:99:f3:69:07:31:02:3a:fe:1f:7c:
1e:19:56:83:1d:25:64:a4:87:90:03:9e:cd:9b:e7:70:3b:bd:
39:33:75:a2:c6:1f:82:fb:23:7c:cd:06:8e:31:eb:83:07:10:
58:bc:0c:9c:34:a7:5a:d8:5e:ef:29:64:a5:55:22:a5:ce:77:
1b:79:2f:77:11:6f:89:38:34:c7:71:9f:5b:30:be:e0:79:24:
5a:9a:b6:5f:91:8e:41:70:f2:da:b8:01:cb:d5:1e:b8:44:a8:
d6:66:d8:08:22:49:8d:90:30:7d:b0:a6:e1:5f:44:e3:13:1a:
30:c0:f5:35:dc:f2:b1:96:81:04:78:61:0c:b0:33:ee:c1:99:
56:3d:15:a5:e5:b2:4d:fa:0d:40:a8:88:a1:3a:78:e2:55:02:
c3:fa:3e:95:af:dd:a7:d5:92:8c:89:94:5d:c1:20:32:96:d4:
d6:56:42:7a:4e:99:c3:6d:44:2f:58:e8:b7:bf:7d:b8:0b:96:
ff:77:05:48:c9:f4:a7:97:da:28:aa:de:9c:4e:0d:32:3d:f3:
38:24:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:32:20 2024 by rpki-client on console-ams.rpki-client.org