Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5OTwBMFkrOH8jEajcoxl1tEHuVU.roa
File: 5OTwBMFkrOH8jEajcoxl1tEHuVU.roa (raw, json)
Hash identifier: 3IosFFhbjgxihpkVvAEWpyRbhQNB8Al6CKr9xh1JjjU=
Subject key identifier: E4:E4:F0:04:C1:64:AC:E1:FC:8C:46:A3:72:8C:65:D6:D1:07:B9:55
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018CC4255BB562E57C27657B60D50A37EAAC
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5OTwBMFkrOH8jEajcoxl1tEHuVU.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136744
IP address blocks: 103.35.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:b5:62:e5:7c:27:65:7b:60:d5:0a:37:ea:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4e4f004c164ace1fc8c46a3728c65d6d107b955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:9d:df:d7:ea:23:28:b9:64:44:57:e3:ba:
93:e8:05:e2:67:5c:0c:34:f2:b0:1b:69:85:24:bc:
37:94:07:78:c5:14:64:03:7a:61:ab:7b:97:4b:dc:
17:d4:f1:3f:fa:0e:00:b3:96:6d:cb:16:36:a3:66:
be:8b:a1:27:00:6c:91:38:c9:11:78:63:0d:bc:24:
a2:6f:0a:fa:22:2a:cf:2c:4f:78:a7:61:06:1f:f9:
bd:1d:72:19:b7:8d:fa:d6:66:17:a5:a8:22:f6:af:
8f:02:1d:9c:38:48:f9:27:6a:ed:cf:f2:c7:9c:31:
de:e1:ff:d2:56:e4:82:ee:b2:80:8b:49:ed:d7:bb:
78:c5:1c:18:06:ba:6f:9b:9c:9e:d6:4b:9a:fd:bc:
29:9b:30:ba:e6:80:bc:83:cc:c2:55:bf:e5:1f:29:
28:29:16:d7:0a:83:0e:8b:3e:9f:34:8e:f4:8a:61:
d8:fe:51:26:6e:43:59:26:c0:9a:90:9b:69:ec:ab:
ba:d2:39:0a:20:76:41:85:4d:fc:15:7c:3a:1f:69:
57:b0:29:7b:17:95:c0:28:46:db:af:4d:c5:08:94:
a9:60:6c:52:ef:76:6d:be:6b:c1:50:b9:92:50:68:
90:c0:1e:37:11:23:5d:4c:41:3e:89:70:c2:90:29:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E4:F0:04:C1:64:AC:E1:FC:8C:46:A3:72:8C:65:D6:D1:07:B9:55
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5OTwBMFkrOH8jEajcoxl1tEHuVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
20:ca:01:fa:43:4d:48:55:15:93:83:85:54:36:7d:8b:56:d6:
c9:10:29:9c:46:c1:ff:56:d7:a4:dc:e0:ac:71:78:20:04:66:
aa:a8:fa:1d:60:ad:57:ed:51:8f:a0:cf:61:98:9a:f4:1c:1f:
a9:3d:ad:45:2a:aa:b3:08:7d:37:c4:40:d0:1d:dd:cd:c0:a4:
d1:aa:83:4d:6c:20:9e:34:aa:3d:8d:bc:dd:e6:54:45:74:35:
84:16:d5:22:f5:7b:b9:43:c2:5e:2b:b0:59:0f:d7:b5:33:07:
5a:f4:69:19:8b:1c:29:61:f6:81:64:11:e8:40:fb:af:3a:22:
fb:50:8b:79:16:49:1f:8b:5c:f2:6b:5d:8f:2f:76:80:25:c2:
a6:37:58:d3:53:25:0b:b3:e1:b8:68:3c:d5:af:b6:7f:da:84:
73:91:a3:d6:dc:63:8b:e9:e6:bb:ba:a6:12:7d:97:f3:c8:e6:
63:ef:c3:ef:e1:eb:45:75:59:cd:c7:10:ef:7f:79:c0:e7:d2:
ee:6f:cd:4b:78:02:5f:ec:a5:3d:fa:fa:ef:8a:0a:a6:39:f1:
58:4f:90:62:b9:47:00:75:0f:c0:8a:a1:c0:b0:ea:5a:de:ff:
79:28:89:72:9e:d2:c2:c2:4f:23:aa:76:43:13:45:ef:8c:dd:
b8:cd:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:05:35 2024 by rpki-client on console-fra.rpki-client.org