Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/L1EzgPbvO0DRc29OQnSCvlUyb8Q.roa
File: L1EzgPbvO0DRc29OQnSCvlUyb8Q.roa (raw, json)
Hash identifier: Jzk/VhqNDv4kizWaYd73tTWpmSWMUgKIdIxx0T7/s6A=
Subject key identifier: 2F:51:33:80:F6:EF:3B:40:D1:73:6F:4E:42:74:82:BE:55:32:6F:C4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0192EC045C9EE62F3210CA3F0D513CD4855B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/L1EzgPbvO0DRc29OQnSCvlUyb8Q.roa
Signing time: Sat 02 Nov 2024 08:36:01 +0000
ROA not before: Sat 02 Nov 2024 08:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 5.180.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ec:04:5c:9e:e6:2f:32:10:ca:3f:0d:51:3c:d4:85:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 2 08:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f513380f6ef3b40d1736f4e427482be55326fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ad:76:59:82:c9:7b:49:6d:a8:fa:4d:0e:05:
a8:a7:e5:b2:21:74:2a:3d:91:23:d8:a9:0d:df:d5:
15:e5:1b:b0:27:a5:bf:a1:96:e2:e7:19:6f:d2:f5:
63:10:e8:48:9a:91:07:11:44:5c:4f:eb:a8:dc:54:
f7:43:67:5d:34:4b:1f:dc:e8:88:94:2e:68:10:40:
1e:c5:f6:43:8f:2b:a7:11:22:cb:a6:26:ac:ea:9f:
86:de:27:d3:71:fe:39:0a:1d:f6:90:21:94:25:d9:
cc:6c:54:68:f3:e9:73:47:02:12:2b:47:8e:5e:e9:
2b:e4:19:a0:17:51:1c:32:3e:82:67:77:a7:17:c3:
b5:ee:53:2f:2a:40:6d:76:e4:31:87:5b:10:b0:e4:
2d:59:9d:d2:9c:7d:64:73:c1:af:03:f8:c5:97:65:
45:ac:68:01:6c:c6:ec:19:69:da:55:1e:32:9a:6b:
82:1e:bc:32:01:56:25:14:59:c5:fb:a8:73:89:af:
dc:61:f5:a1:5f:1e:44:de:a1:02:de:21:f3:67:73:
71:d3:00:29:37:6d:77:af:f6:44:4d:03:f8:44:89:
90:31:1e:17:52:b3:83:c0:4f:e7:3b:4f:40:4d:3c:
d9:86:ee:88:2b:b1:79:6e:08:ca:5d:58:1a:a8:c3:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:33:80:F6:EF:3B:40:D1:73:6F:4E:42:74:82:BE:55:32:6F:C4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/L1EzgPbvO0DRc29OQnSCvlUyb8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.233.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6e:31:8a:00:d0:d6:34:75:39:dd:55:77:a4:a0:53:08:c8:
4b:5c:71:76:14:81:57:7d:a5:03:fa:7e:0a:35:6f:39:67:3a:
6f:e9:74:e2:70:d7:24:1a:59:bd:39:c6:c3:fb:41:ed:34:0a:
54:29:7c:e0:47:43:01:d9:c9:03:2c:01:61:c8:a3:4d:aa:39:
e4:49:ef:3d:2b:da:54:77:57:b7:34:d8:df:16:ac:3d:75:93:
d3:4e:9e:aa:51:ad:a8:87:f8:84:e7:23:f4:f3:d1:d3:e0:d0:
f3:79:a2:b3:b5:05:33:a2:de:a5:b0:fd:88:ef:10:31:17:4c:
41:25:cc:b4:90:42:4d:61:46:58:39:d5:42:7d:b7:34:35:4f:
9f:3c:45:2a:81:8f:d1:45:b6:b9:b7:b2:e5:99:c8:c7:2e:68:
e8:68:4e:28:33:ae:76:8f:2e:2a:20:f9:0f:f6:f9:b8:78:e7:
9f:0d:38:6e:b8:66:2a:3b:f9:ca:43:95:88:c1:00:b9:41:9e:
9b:db:e7:b8:b3:72:10:a2:63:be:59:c1:0d:31:7a:43:54:69:
42:ae:96:9d:50:b3:1a:ed:8a:e4:53:b8:26:e9:81:5c:03:93:
50:79:98:ea:05:a1:39:da:09:0f:85:88:49:3a:f2:99:9f:96:
44:b4:b4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:56 2024 by rpki-client on console-fra.rpki-client.org