Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/DXR6a5Y3GFyJ1T1XDq_3cdWkrmU.roa
File: DXR6a5Y3GFyJ1T1XDq_3cdWkrmU.roa (raw, json)
Hash identifier: xjsi7O/uetg2B4kIJ4YTotVMPaXqd3blOjKLuDFVhNE=
Subject key identifier: 0D:74:7A:6B:96:37:18:5C:89:D5:3D:57:0E:AF:F7:71:D5:A4:AE:65
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018EBF2B57E35B379247927A93D93563A4CA
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/DXR6a5Y3GFyJ1T1XDq_3cdWkrmU.roa
Signing time: Mon 08 Apr 2024 19:24:32 +0000
ROA not before: Mon 08 Apr 2024 19:24:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203324
IP address blocks: 5.59.118.0/23 maxlen: 24
5.59.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bf:2b:57:e3:5b:37:92:47:92:7a:93:d9:35:63:a4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Apr 8 19:24:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d747a6b9637185c89d53d570eaff771d5a4ae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:df:90:32:86:53:bc:62:a9:b2:aa:3f:2c:
15:21:bd:c5:a7:94:48:ad:3a:94:e9:0b:fe:2e:07:
24:07:aa:89:34:a1:2b:ad:66:2c:af:dd:69:98:0f:
b5:82:ac:69:7f:c3:b3:fc:62:ab:8b:5a:c5:c5:56:
e8:29:29:cb:c4:72:8f:fe:98:a9:f2:1c:90:da:42:
31:21:e9:87:b5:71:ad:a6:fa:4a:43:26:93:85:e2:
32:9b:5c:cd:4a:b9:3e:ba:1a:1f:42:10:42:f9:78:
b8:fe:59:9e:9b:62:f4:46:6d:38:e4:17:6a:e5:d2:
79:15:b8:89:4b:aa:8f:b2:4c:47:d6:d4:e7:49:56:
46:b8:7f:d0:18:d2:06:3e:d8:fb:92:48:ff:2f:a5:
19:46:3b:6f:ff:32:09:a6:6e:f0:3a:f3:2c:a2:ce:
05:1a:a6:87:3f:ac:54:de:f8:e0:d7:17:8b:e4:c8:
a9:f0:37:91:ed:5f:d6:1b:19:91:b2:5d:d2:da:29:
bd:58:15:69:24:08:99:84:51:69:8e:37:1a:27:11:
94:15:0c:03:a7:ca:a5:32:9c:dc:9f:f4:be:95:17:
f6:fe:fe:fa:bd:f8:88:3b:1b:a2:42:38:04:66:b9:
f2:69:d1:23:00:1f:76:25:be:73:83:02:7c:6d:1e:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:7A:6B:96:37:18:5C:89:D5:3D:57:0E:AF:F7:71:D5:A4:AE:65
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/DXR6a5Y3GFyJ1T1XDq_3cdWkrmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.118.0/23
5.59.238.0/23
Signature Algorithm: sha256WithRSAEncryption
17:72:a0:99:e6:2c:0d:07:cc:4b:65:92:87:ae:f3:c2:65:ae:
8a:b1:5f:a0:b9:ea:d9:86:30:8e:f3:a2:a6:e2:32:5b:ec:8d:
17:be:c3:2e:e5:a3:ff:d6:c3:85:93:c1:fe:c0:45:5d:75:e4:
2e:c0:dc:c3:98:dd:37:c8:13:6b:2a:4d:e8:e0:f1:4e:6c:8b:
56:c6:c5:62:52:f5:86:8a:09:56:e6:d5:e6:41:1d:b7:b1:dd:
61:2f:78:41:08:6e:ec:a0:b7:97:a3:74:b2:6c:af:33:f9:c7:
96:39:aa:6c:3f:5a:71:74:f6:ca:71:29:b5:a9:a1:66:07:9c:
b4:29:1b:6e:05:da:47:4c:dd:c9:de:dd:79:1c:d8:44:64:67:
88:28:b2:17:ba:50:36:aa:19:8a:f5:c5:5e:74:37:af:53:3f:
bb:f6:d8:e4:84:5f:c9:00:46:11:66:7b:b9:f2:f1:02:65:c2:
03:16:3a:c1:50:40:65:ba:b5:ac:c1:4a:e7:83:8c:58:88:64:
1a:3f:b8:82:dd:d9:f4:83:1d:06:08:1f:be:55:6c:f9:4a:2f:
a1:c5:67:dc:08:2d:a1:76:5a:eb:9a:65:60:23:70:db:61:f7:
4d:44:a2:eb:26:e8:2f:5c:2a:c3:e7:a2:09:30:ac:1e:14:f6:
50:11:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:42:00 2024 by rpki-client on console-ams.rpki-client.org