Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/62X10bKrik9HOwlzFB68fsT-MQg.roa
File: 62X10bKrik9HOwlzFB68fsT-MQg.roa (raw, json)
Hash identifier: MJJkakDkE4RVoqhRJ7ObZUjkeb4ubf3o70Q4byhyjDY=
Subject key identifier: EB:65:F5:D1:B2:AB:8A:4F:47:3B:09:73:14:1E:BC:7E:C4:FE:31:08
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 0191B28EB72E8518365E4BCE6B77D0B18CA4
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/62X10bKrik9HOwlzFB68fsT-MQg.roa
Signing time: Mon 02 Sep 2024 11:46:23 +0000
ROA not before: Mon 02 Sep 2024 11:46:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57610
IP address blocks: 5.250.255.0/24 maxlen: 24
185.123.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:8e:b7:2e:85:18:36:5e:4b:ce:6b:77:d0:b1:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Sep 2 11:46:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb65f5d1b2ab8a4f473b0973141ebc7ec4fe3108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:9d:94:28:35:60:9d:6f:a7:9b:c2:7e:3f:
d0:5c:aa:14:56:32:c4:f5:42:32:25:be:8d:a9:46:
b2:7c:56:01:f7:4c:07:ac:2b:ed:52:28:2a:be:3f:
0a:b5:68:26:63:64:91:ac:e8:20:e6:a4:16:93:75:
11:01:2b:2a:75:4d:40:f7:aa:89:9d:a6:fb:ad:bb:
ca:4a:64:7b:d8:1c:37:43:3b:5f:f0:22:2c:40:de:
7e:a5:5e:b6:bd:e4:cd:c4:a7:6d:62:58:c6:8e:1e:
d9:0f:6f:37:5b:90:95:d6:f3:08:19:fb:0b:0d:51:
6e:59:bb:d5:d4:a3:9f:cc:eb:56:36:c1:99:e9:82:
81:19:82:ab:13:19:0e:a4:d7:1b:64:6d:0d:34:76:
af:dc:92:0b:c1:cd:26:ba:ad:cb:11:7a:fe:01:a0:
46:b6:63:59:d4:e0:c9:2e:ec:14:86:74:90:e6:7d:
5a:fb:42:86:ed:11:8e:a5:54:6a:fc:3b:29:c6:7e:
61:3e:9d:7f:10:85:17:d7:1f:e8:7c:14:42:1b:00:
d6:91:ff:c2:6b:77:f6:2d:5a:7d:be:09:0c:8a:ca:
51:88:cb:96:88:9b:a6:0e:94:40:fa:ea:1f:ba:e3:
b4:12:55:f9:c8:b0:02:8e:71:f5:1d:07:b9:3b:3f:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:F5:D1:B2:AB:8A:4F:47:3B:09:73:14:1E:BC:7E:C4:FE:31:08
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/62X10bKrik9HOwlzFB68fsT-MQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.255.0/24
185.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
28:45:6c:3e:ad:fe:f5:52:7a:5e:37:24:d7:37:0a:0d:40:fe:
e0:d6:f9:df:14:78:71:7b:ea:60:9f:b8:50:1c:1d:bb:ff:62:
2b:57:ef:0c:1e:23:0e:ef:53:9f:49:1a:01:ed:dc:9d:39:b7:
50:9c:04:1b:11:fd:77:7d:3a:df:7e:b2:a3:47:d4:44:8c:37:
e8:85:2c:e6:4c:ea:f6:64:cc:6f:8d:50:00:db:dc:ab:67:1c:
fb:c0:18:00:d5:9d:b1:dd:a2:06:3a:4b:0c:b2:94:b3:ef:32:
d4:a6:83:89:af:3a:85:00:3b:40:dd:6f:f2:80:fb:5d:91:3b:
93:73:c4:e4:51:8a:f0:e0:bd:6d:a1:d9:e0:4a:34:b5:51:6b:
6b:71:b4:22:9d:ff:4b:0c:84:7d:29:ea:e4:6e:45:0b:d1:38:
90:f3:9a:05:4e:3d:69:a8:a1:8e:51:00:15:8b:91:d7:3d:b6:
c7:7b:de:be:bb:14:d2:4c:64:c4:97:d7:36:25:b5:a1:14:1e:
7f:24:82:82:34:98:78:db:9c:1a:2e:28:27:4a:25:d2:46:0c:
37:fd:90:2b:79:ba:00:9b:7f:d3:0d:21:8c:44:d2:6c:8c:64:
a1:a9:ed:13:74:ab:8c:71:b8:62:59:1c:d6:cd:a2:83:8e:34:
a6:07:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:15:21 2024 by rpki-client on console-ams.rpki-client.org