Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/oDtDqYBnZOQndYkNinRiVTNjCPY.roa
File: oDtDqYBnZOQndYkNinRiVTNjCPY.roa (raw, json)
Hash identifier: fJUXTLU8AeX3x+H0B4omtbAnaondZ5CKNZIsGcjLEEI=
Subject key identifier: A0:3B:43:A9:80:67:64:E4:27:75:89:0D:8A:74:62:55:33:63:08:F6
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 018CC5DC3D91D3D8E5325B227D1551A1CEC3
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/oDtDqYBnZOQndYkNinRiVTNjCPY.roa
Signing time: Mon 01 Jan 2024 16:29:54 +0000
ROA not before: Mon 01 Jan 2024 16:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 5.180.184.0/24 maxlen: 24
5.180.185.0/24 maxlen: 24
5.180.186.0/24 maxlen: 24
5.180.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3d:91:d3:d8:e5:32:5b:22:7d:15:51:a1:ce:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jan 1 16:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a03b43a9806764e42775890d8a746255336308f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:ec:75:ae:65:f4:99:e3:d8:da:98:28:7e:
67:17:39:36:56:3c:a9:bf:4d:3f:18:f6:06:92:5c:
b6:ba:25:1d:a1:43:1d:8b:6d:c4:49:e5:88:69:81:
09:4b:91:57:74:eb:26:75:4b:90:ab:c0:7f:4c:09:
80:3d:2a:02:77:e1:8a:d5:8f:91:5a:46:40:54:1e:
77:1d:d8:db:79:3e:9f:39:e6:11:1c:f2:6a:c4:38:
a7:7c:5d:0f:ea:ca:86:0b:fe:71:55:e1:85:ae:0d:
0a:e8:9b:36:73:96:63:f0:20:cf:b8:d5:04:20:d4:
43:ac:11:ca:15:c5:fc:ef:6d:3e:e6:c3:fa:aa:1b:
c8:c0:7a:25:21:26:16:f6:c8:ba:09:aa:23:36:5a:
b1:6c:63:4d:6e:05:ec:71:c3:30:a2:89:cb:75:94:
c6:ca:b0:18:23:da:2a:1d:68:30:42:62:16:e1:b2:
99:04:20:38:cb:27:59:8f:f2:c1:0c:ce:cd:6b:a6:
8c:5f:7a:e1:33:22:01:fd:58:69:c0:86:4f:97:67:
de:d8:6d:d1:6f:3a:35:ff:e0:34:7e:63:94:6b:bc:
4c:dc:66:f5:ad:8e:31:50:98:ba:a2:9f:cd:88:53:
f5:a7:e2:89:73:dd:68:41:5a:e4:15:36:79:1b:cf:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:43:A9:80:67:64:E4:27:75:89:0D:8A:74:62:55:33:63:08:F6
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/oDtDqYBnZOQndYkNinRiVTNjCPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.184.0/22
Signature Algorithm: sha256WithRSAEncryption
77:46:38:3d:c4:74:30:ed:bf:89:94:19:f5:87:4a:94:9a:c7:
72:87:74:23:ed:db:aa:96:1b:ae:b3:a0:64:1a:bb:b9:7d:28:
14:29:e1:4a:c8:79:78:1e:27:7a:a4:db:d1:f4:17:7f:55:12:
70:88:d9:5e:cd:11:86:72:9f:a6:e4:9b:01:49:dc:b9:f4:6d:
a1:a9:47:e6:a1:60:e8:6f:68:b4:e4:17:32:18:c1:51:45:94:
d7:0e:56:9e:98:27:90:e8:43:52:da:75:73:79:b6:c6:65:b3:
c4:58:95:00:85:b1:84:76:32:49:d0:7c:01:31:5b:6c:bd:07:
65:ee:00:29:c5:a9:5e:9e:3a:18:8c:ca:ec:d8:b2:75:50:98:
3a:2c:47:e6:55:ed:e8:4b:5f:2d:d7:59:cd:a1:6d:a1:a2:e3:
ed:b2:55:88:6a:32:0a:3e:d5:a4:69:fc:92:a9:ad:05:6e:f5:
29:fa:24:e2:35:9a:4e:4a:77:8f:01:3e:59:5b:a9:cf:58:0e:
e1:fa:2f:a0:eb:52:e0:a8:e2:99:b1:63:f2:66:42:52:67:b7:
f4:22:e3:91:c5:4e:f9:8d:8e:bf:b0:de:57:92:19:a7:d0:74:
5d:4e:c5:3a:c9:7e:00:0a:1c:48:f9:dd:db:b8:89:92:41:8f:
3e:9c:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:12:07 2024 by rpki-client on console-ams.rpki-client.org