Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cbIOVShj_6-13CZsT8g7YWN4tIA.roa
File: cbIOVShj_6-13CZsT8g7YWN4tIA.roa (raw, json)
Hash identifier: cYCnUIpHhRqd130B+J7O9Uj50mzWt2Kwrw01lIz1kg0=
Subject key identifier: 71:B2:0E:55:28:63:FF:AF:B5:DC:26:6C:4F:C8:3B:61:63:78:B4:80
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01931AFA6D9BE1E6EFA2A7BA45D1463ECFDF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cbIOVShj_6-13CZsT8g7YWN4tIA.roa
Signing time: Mon 11 Nov 2024 11:27:19 +0000
ROA not before: Mon 11 Nov 2024 11:27:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62068
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:fa:6d:9b:e1:e6:ef:a2:a7:ba:45:d1:46:3e:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Nov 11 11:27:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71b20e552863ffafb5dc266c4fc83b616378b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:8b:f9:b6:ea:ad:62:e5:a4:b7:20:d5:4d:
55:13:8d:82:1d:f6:3c:06:7c:7d:05:0b:8a:15:67:
ad:50:45:48:cd:a0:d1:ca:aa:58:c9:e4:bb:64:6f:
fa:81:9a:a5:16:60:46:84:d9:7e:b2:c2:a9:87:83:
52:ff:27:54:0b:5e:e3:05:58:d5:32:78:c0:3d:00:
90:6f:42:54:60:97:72:14:46:0b:20:86:8d:ea:b2:
27:b4:8c:33:a2:16:39:ed:2a:09:23:57:e5:f3:04:
51:76:3a:08:db:7f:c5:07:8b:68:82:fd:24:7b:98:
54:34:6d:90:53:db:ef:14:d8:5d:35:f3:80:1c:dd:
5a:4c:04:43:b3:9a:e6:f3:b7:e7:f7:d4:31:c4:6d:
73:02:b3:58:57:68:22:22:85:af:dd:f4:3a:c3:53:
1c:61:09:d4:e2:fe:42:b2:db:bf:bb:ed:2f:22:1d:
e2:e8:35:b6:60:01:9c:98:26:71:da:75:e7:14:a9:
54:2a:f4:14:70:59:6b:d8:d9:14:4b:f7:8f:ef:1f:
e0:1e:c0:a2:83:e1:cf:9b:dd:49:5e:f2:df:63:e3:
f0:03:0a:fd:fc:cc:5b:a8:fa:c7:36:e3:09:3a:96:
a4:af:74:93:f9:ad:9a:63:95:6e:db:e3:99:8c:0f:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B2:0E:55:28:63:FF:AF:B5:DC:26:6C:4F:C8:3B:61:63:78:B4:80
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cbIOVShj_6-13CZsT8g7YWN4tIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ef:0e:6f:2f:f2:df:a6:c7:e1:40:fb:f0:26:57:a3:bf:c9:
53:0b:9f:d1:2d:8d:80:3a:e4:2a:28:ad:c8:e6:1f:4b:6a:ef:
4c:40:ff:26:bd:e7:d2:88:8e:5c:03:50:fe:11:71:bf:8d:55:
fe:8d:39:e5:9e:29:b7:4b:ec:73:df:f7:88:4e:f6:fd:6e:df:
c7:a6:94:3b:d6:02:22:1e:f0:98:41:b2:c4:d5:83:26:5f:55:
cf:b8:fe:7c:81:91:e9:f9:9a:df:d6:0e:a9:31:ad:e1:96:a3:
4b:b5:66:6c:bf:24:f6:f3:bd:78:67:67:45:28:05:27:86:da:
85:d1:05:51:e9:08:62:2e:f4:7a:fd:8b:ad:e4:87:53:15:af:
e4:7b:3d:73:36:a8:23:0a:d5:5c:4d:da:a3:fb:55:ff:bf:63:
07:5b:dd:44:9c:ec:e3:ba:9f:cc:2b:fd:07:c3:f0:0a:b6:4c:
5d:49:46:f9:f3:3c:63:fe:10:1a:35:3b:7e:f4:c4:33:24:45:
33:b4:73:5a:24:d8:12:73:13:7d:fc:6e:76:9d:60:cd:31:f7:
d3:d2:1d:1e:36:b7:dc:42:5b:b4:2a:18:b0:ce:d3:ec:04:cb:
1d:8d:65:14:5a:9b:3b:94:90:42:6d:e1:65:39:27:7f:29:3a:
23:3c:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:44:29 2024 by rpki-client on console-fra.rpki-client.org