Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4FBRu-NgPiZzMU58DF5i4tNpFyY.roa
File: 4FBRu-NgPiZzMU58DF5i4tNpFyY.roa (raw, json)
Hash identifier: lH0///ELMh/B6JJWYIzTqi6yozo9TggG2Mv90c8eY7U=
Subject key identifier: E0:50:51:BB:E3:60:3E:26:73:31:4E:7C:0C:5E:62:E2:D3:69:17:26
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01903BB5E5201AC6123E7DAD4D3D98309A66
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4FBRu-NgPiZzMU58DF5i4tNpFyY.roa
Signing time: Fri 21 Jun 2024 16:51:34 +0000
ROA not before: Fri 21 Jun 2024 16:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36352
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:b5:e5:20:1a:c6:12:3e:7d:ad:4d:3d:98:30:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 21 16:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05051bbe3603e2673314e7c0c5e62e2d3691726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:2c:a9:b6:37:d3:ad:4e:50:38:32:59:21:
f5:76:e5:0f:16:76:bf:1a:7e:5b:7d:4d:7a:32:89:
36:f3:74:b9:99:f5:7b:0c:22:17:f1:34:f8:15:2e:
b6:67:77:51:d3:7e:42:81:a1:7d:88:8e:b9:de:0b:
a5:17:2b:db:42:f5:e3:ce:74:02:1a:b1:82:9d:06:
2b:ca:0c:b7:c3:91:e7:4d:7c:d2:3c:8c:24:f1:66:
55:71:5c:b5:76:a9:a6:4b:df:fc:f2:ed:97:df:a7:
4e:e6:da:c9:6a:a1:85:8f:01:ff:f0:ef:c9:13:85:
6d:39:dd:07:36:d8:bc:4a:a7:26:2b:8f:db:b7:a5:
44:b3:33:18:ba:8d:f5:4d:4b:8f:ff:4f:b9:58:f3:
6f:71:4d:a8:66:77:3b:36:c7:0e:4f:7e:4d:0f:c2:
76:7e:69:81:a2:68:81:63:bf:e0:1a:d3:7d:f8:1d:
65:2a:20:dd:43:6c:3f:8a:47:96:ae:64:62:7c:cc:
f0:b7:49:99:77:d8:46:b7:c2:b6:6f:ec:18:37:be:
f3:88:3f:b7:7c:c6:15:e3:ae:f7:59:51:c3:12:ed:
34:95:6e:d8:15:10:f2:01:ab:2d:34:49:b7:c0:5c:
de:fe:17:2a:80:ae:e9:7f:b1:83:46:5f:0f:91:8e:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:51:BB:E3:60:3E:26:73:31:4E:7C:0C:5E:62:E2:D3:69:17:26
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4FBRu-NgPiZzMU58DF5i4tNpFyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4b:1e:15:21:45:4a:91:1e:e0:ed:ea:f4:34:1f:98:44:93:
bf:31:99:ba:86:a4:82:03:5a:52:3a:3b:f2:bc:78:95:e2:cb:
f4:8c:91:a6:50:4c:4e:19:b6:9f:e7:51:56:b0:3c:e1:ff:a7:
df:62:36:8b:8b:3b:66:01:27:b3:7c:44:22:90:16:7c:8c:d0:
30:84:1b:ed:04:3d:93:05:d5:a2:91:91:02:50:87:df:ea:e9:
43:12:43:7e:bf:4b:b0:c3:cb:e0:95:1d:8f:eb:b5:bb:db:4d:
e5:83:80:a8:1f:bc:a2:f1:8b:1f:51:b3:6f:c9:82:d6:2d:71:
f7:6c:21:d7:b2:bd:00:5c:89:97:48:dd:c1:43:32:5b:9f:ce:
77:f5:27:56:65:92:40:b7:18:33:5a:13:24:d5:33:eb:b0:b7:
60:98:dc:30:c1:49:51:e9:3a:a7:4b:98:fc:68:29:d6:8c:49:
80:7e:31:3c:7e:95:e1:dd:f2:c4:49:79:04:d5:b3:cc:41:71:
b1:d1:2c:d9:fa:e0:c7:e5:95:36:57:f7:8a:91:e2:a9:64:9e:
d7:c5:69:19:86:bb:59:70:a3:b7:c4:ca:ed:33:eb:5b:b6:fb:
87:5e:ad:63:c7:90:86:67:a6:da:53:d5:15:74:70:09:da:50:
e3:89:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:16 2024 by rpki-client on console-ams.rpki-client.org