Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/i3utCbCWZEYHDvJRkfen7xGKm5k.roa
File: i3utCbCWZEYHDvJRkfen7xGKm5k.roa (raw, json)
Hash identifier: 634gBOKTJZAIt7DUV7KDyTtDG/iyjpJdCDlO0SwV4Wo=
Subject key identifier: 8B:7B:AD:09:B0:96:64:46:07:0E:F2:51:91:F7:A7:EF:11:8A:9B:99
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 018CC2DAF5247FC3DE7D66C32E98F0B76F4C
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/i3utCbCWZEYHDvJRkfen7xGKm5k.roa
Signing time: Mon 01 Jan 2024 02:29:38 +0000
ROA not before: Mon 01 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210251
IP address blocks: 5.1.120.0/23 maxlen: 23
2a02:e740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f5:24:7f:c3:de:7d:66:c3:2e:98:f0:b7:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Jan 1 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7bad09b0966446070ef25191f7a7ef118a9b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:1f:cb:45:d3:96:56:f8:05:8f:7e:99:35:
d7:7d:65:e2:60:6e:a7:89:c3:33:cf:19:5b:50:10:
62:68:a0:f6:bd:d3:a4:b4:e0:78:52:96:cf:e5:ee:
45:03:c1:19:64:83:9c:c9:cd:f9:8b:2b:fc:0d:63:
46:10:ce:77:f0:fb:a4:8a:7c:52:d8:ed:62:aa:0b:
72:42:79:e1:60:b0:7e:5e:a6:b4:95:31:cc:b1:7f:
ee:f7:9f:db:ee:c9:4d:33:17:50:97:41:62:83:05:
16:cc:69:a3:e3:c3:2d:85:e2:25:c9:ae:66:61:93:
68:a8:f1:79:97:1d:35:df:68:21:1b:45:1f:5c:15:
2f:60:10:12:e9:15:3e:79:6d:24:bf:b2:c3:7e:77:
77:38:11:6a:76:3a:2b:e8:8a:65:6e:59:db:14:8d:
9d:b2:7e:e7:93:85:20:c6:b0:c4:fd:f8:c8:25:af:
b0:05:d9:f6:50:8b:b0:c5:e5:5e:36:cc:4d:3f:b1:
48:7d:14:c9:22:c8:99:44:a8:31:c9:32:d2:77:8b:
8e:7f:98:8d:38:be:f2:41:8c:ea:bf:6a:09:84:08:
db:4b:96:1f:6b:96:10:6d:c2:ed:c4:0c:7a:d2:32:
4d:c3:f1:14:5d:3f:7f:e3:2c:69:8c:55:b3:b8:20:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7B:AD:09:B0:96:64:46:07:0E:F2:51:91:F7:A7:EF:11:8A:9B:99
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/i3utCbCWZEYHDvJRkfen7xGKm5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.120.0/23
IPv6:
2a02:e740::/48
Signature Algorithm: sha256WithRSAEncryption
6f:79:6b:cd:a2:7f:58:aa:1a:6b:b4:34:dd:27:fe:c3:c1:be:
41:d5:e9:e6:29:92:db:f4:14:05:af:36:0e:1a:a5:79:ad:2d:
54:71:22:d2:de:35:c6:be:f2:62:0e:10:e4:28:f0:a2:57:de:
a2:3e:c1:34:84:f2:f7:71:d8:3b:03:30:f9:38:39:c1:6f:dd:
29:02:47:96:df:9f:2c:5c:77:b3:ba:08:32:90:3d:f7:bf:f9:
b5:15:0e:f4:89:30:b7:bf:f5:31:0f:fd:76:ff:52:c1:a4:c8:
89:47:40:ba:96:30:d9:37:ac:85:6f:82:49:02:6b:0d:38:6d:
d9:c8:fd:fe:7c:75:10:f8:ac:32:49:18:dd:16:91:ac:93:50:
cb:5b:d2:60:3a:7a:2e:5e:69:57:01:1c:ac:13:18:dd:0f:54:
15:1e:a7:17:24:79:be:97:d9:fa:f0:9c:ed:f5:5c:72:80:6c:
a3:42:94:13:f5:76:8a:46:51:c8:07:74:82:d6:9d:db:83:ab:
f0:03:15:32:cd:65:ed:1c:17:95:d3:d5:6c:53:4d:0f:34:44:
9a:57:88:6c:0b:98:2c:d8:8d:1b:ed:21:26:09:29:8f:23:67:
2b:c2:c5:12:00:78:30:82:32:f3:0a:d6:15:c1:01:fd:db:0a:
d9:6c:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:56 2024 by rpki-client on console-ams.rpki-client.org