Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/6kNlBi9h1ZHmPoii53_kXa1mrAw.roa
File: 6kNlBi9h1ZHmPoii53_kXa1mrAw.roa (raw, json)
Hash identifier: rHTV0hL2/EzU/sVJfxN+lj8K5FQtZElJVGqS8Kv0uds=
Subject key identifier: EA:43:65:06:2F:61:D5:91:E6:3E:88:A2:E7:7F:E4:5D:AD:66:AC:0C
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 018CC80158DCDFDE340065E518291A749771
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/6kNlBi9h1ZHmPoii53_kXa1mrAw.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42745
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:dc:df:de:34:00:65:e5:18:29:1a:74:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea4365062f61d591e63e88a2e77fe45dad66ac0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:09:5d:96:d6:a1:9d:b7:bc:1e:9a:f8:b7:
85:14:7c:8b:38:77:34:2e:f2:26:9d:ed:ed:4b:37:
08:82:e2:bb:8b:76:76:1b:f8:d2:f3:9a:7e:c4:ed:
9e:ba:41:47:d2:1b:b3:88:a9:d0:2a:1d:fa:dc:dd:
05:41:83:c1:3f:cb:de:7c:63:d0:14:71:63:03:cf:
6c:c6:71:25:44:8b:71:78:39:a6:bc:44:d1:b6:2c:
8f:d9:37:ee:52:e2:6c:f0:c5:28:d2:98:9e:21:95:
fd:f9:c6:d1:fc:ff:b9:9d:f4:44:43:db:11:a1:8c:
df:e5:c5:9d:c6:a7:6d:ed:1d:c2:be:7d:6d:a2:7b:
7f:61:13:d6:5d:11:6d:ba:cd:e8:b1:6c:ad:ef:63:
14:b3:f9:3f:7b:e5:1b:42:ba:47:79:0c:d1:cb:01:
ae:8d:a5:dd:7b:a6:9e:19:69:06:86:dc:53:1f:40:
44:5e:e9:05:98:30:c3:4f:a6:74:21:b9:1b:67:53:
0c:df:23:d5:2e:10:0f:a0:26:8d:9e:b1:be:57:5e:
b7:2b:5c:20:74:3b:03:b2:d1:c0:34:4d:41:66:c3:
c2:6c:94:39:ec:a3:05:62:1f:72:0c:fd:e2:ec:c7:
fb:c2:45:51:7b:68:2b:eb:55:5a:67:68:6a:a4:50:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:43:65:06:2F:61:D5:91:E6:3E:88:A2:E7:7F:E4:5D:AD:66:AC:0C
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/6kNlBi9h1ZHmPoii53_kXa1mrAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/24
5.252.34.0/23
Signature Algorithm: sha256WithRSAEncryption
05:e3:7d:3f:3e:22:4a:8e:1b:db:ac:42:bb:de:06:79:e8:f0:
e3:a3:4a:21:b8:88:d6:82:d5:f6:e8:c5:e1:06:aa:d5:2e:a9:
d8:47:5f:6b:1d:87:a0:87:90:0d:32:62:d4:c1:3a:ef:0a:dd:
d9:4f:7b:cc:b6:87:4c:b5:fb:c3:cf:8c:b8:f8:fb:bf:e1:6c:
aa:85:47:b3:59:06:a6:ab:00:c9:df:6a:d1:0c:54:7c:9e:ef:
90:59:d4:69:20:e5:18:01:c9:9b:05:43:61:37:ea:6c:e4:38:
2a:d3:c9:0a:72:15:75:43:71:28:b2:ad:c4:1d:40:04:15:40:
ae:76:b3:1a:f5:22:c9:ee:da:a3:64:d8:11:ab:72:d1:52:f3:
b8:05:c6:f5:3e:bf:29:a7:6a:be:e9:89:69:3c:6a:fd:41:f7:
26:96:a2:f1:3d:90:3b:a9:f8:7f:b2:fd:66:cf:19:ef:15:03:
35:34:82:3b:ca:e6:e8:e6:4b:a5:98:ca:e4:0f:3c:d9:ad:41:
8c:17:90:dc:36:b9:ed:82:91:ec:cb:b0:14:cf:b3:88:22:26:
d1:27:24:0f:2f:bc:e1:4c:40:00:ab:c0:52:03:3b:ff:e3:38:
00:f0:c1:c7:ee:fa:32:ab:3f:fb:cc:b6:23:48:cf:97:01:33:
92:c0:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:10:13 2024 by rpki-client on console-ams.rpki-client.org