Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Q-0B0WWCABSQE_ckmt6egNPw0k.roa
File: 5Q-0B0WWCABSQE_ckmt6egNPw0k.roa (raw, json)
Hash identifier: YH9Ud7M9+UeK6AA65EuMbNs57xajvsd6fyyq+bfwkPI=
Subject key identifier: E5:0F:B4:07:45:96:08:00:52:40:4F:DC:92:6B:7A:7A:03:4F:C3:49
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01906AFC02D696EEC2AA05BDDFFB7081CC69
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Q-0B0WWCABSQE_ckmt6egNPw0k.roa
Signing time: Sun 30 Jun 2024 21:10:19 +0000
ROA not before: Sun 30 Jun 2024 21:10:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199415
IP address blocks: 217.145.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6a:fc:02:d6:96:ee:c2:aa:05:bd:df:fb:70:81:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 30 21:10:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e50fb4074596080052404fdc926b7a7a034fc349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:aa:30:27:9b:65:4d:fd:42:59:8d:41:3d:
53:06:73:01:1e:2a:84:71:b4:69:a2:58:7b:10:fd:
1d:c6:d0:3e:8b:65:fb:bb:4a:5e:22:07:43:53:00:
e1:63:e0:08:eb:c6:4e:f6:f8:8f:82:64:a1:5a:5c:
ce:19:3c:04:32:c4:1c:0d:88:03:28:87:05:6d:1d:
4c:91:7f:ff:8e:e5:46:43:38:f5:4c:ba:b6:d2:fb:
b7:02:17:31:3e:d5:7b:ec:41:58:0a:c8:11:dd:9e:
3e:4f:42:a7:ca:2a:c7:92:af:53:20:37:6f:d0:f2:
33:22:33:c6:0f:96:ca:e3:5a:47:b5:c9:6e:5c:85:
9b:f0:36:69:16:95:4c:15:e9:c1:63:0c:79:9d:22:
ab:42:7e:31:e2:30:d2:f3:e0:e2:b0:6b:01:2f:dd:
f9:67:22:25:79:a5:de:38:8e:9c:37:93:1f:1f:2c:
e0:d4:a4:3a:7d:fb:8c:d6:33:ab:a2:da:39:11:99:
f8:bc:a2:d9:05:17:3c:d2:c1:bd:2e:d6:a3:6f:da:
7d:e7:b5:1d:83:fc:17:5c:b0:75:17:41:43:97:7e:
58:b5:51:26:50:9e:f4:83:8c:7a:55:17:2f:5a:4d:
44:80:98:6e:b5:be:8b:b7:d5:77:8b:c5:ad:7a:75:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:B4:07:45:96:08:00:52:40:4F:DC:92:6B:7A:7A:03:4F:C3:49
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5Q-0B0WWCABSQE_ckmt6egNPw0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:54:a8:77:af:c3:4f:24:d2:bd:5c:13:13:7a:f1:12:1b:d2:
91:50:92:7c:3c:61:14:48:42:c1:db:9c:2f:32:77:0a:db:1f:
e4:10:fb:b7:45:fe:b3:35:c8:86:40:4b:76:83:bb:34:93:47:
ce:17:21:dc:56:0d:94:fb:90:8b:73:a1:e4:c7:a3:1f:ad:8d:
6a:64:13:00:1d:cd:96:49:4b:1a:88:84:ae:19:56:4b:6b:09:
cf:06:82:82:15:5a:d6:95:03:1d:6d:40:52:01:ad:82:41:40:
94:b8:75:b1:fc:0e:be:fa:34:0d:36:b1:a5:d4:9d:be:37:31:
55:a5:f6:71:4f:d5:24:e3:ed:c9:89:f4:34:a8:6d:fe:d7:f6:
70:2c:75:46:70:77:cb:ea:ce:d7:d4:e5:cf:3d:c1:84:f8:22:
86:05:d8:64:b1:34:4b:64:c2:61:d4:0b:02:94:f6:93:c6:67:
5e:32:17:b3:90:e6:e5:93:69:61:25:c1:53:0b:2c:70:dc:05:
03:b8:d0:b4:97:77:e1:da:f0:61:84:52:0e:11:8d:33:2d:83:
30:53:d6:7f:59:d8:72:b4:45:c7:c7:90:c6:40:76:76:a8:ae:
e8:4c:36:d8:f7:02:94:44:91:7c:eb:93:02:cb:6e:ea:0e:66:
08:6c:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:22 2024 by rpki-client on console-ams.rpki-client.org