Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/cB-ZaPx-cxmxQNRS2p43GnuH_Ec.roa
File: cB-ZaPx-cxmxQNRS2p43GnuH_Ec.roa (raw, json)
Hash identifier: Ge1fRx+3rAfLLPTwqjOz3ylmcK4mzkIAIj4irqWS330=
Subject key identifier: 70:1F:99:68:FC:7E:73:19:B1:40:D4:52:DA:9E:37:1A:7B:87:FC:47
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 018CC86F104905E24E7DA430BE45F6FEC488
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/cB-ZaPx-cxmxQNRS2p43GnuH_Ec.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21277
IP address blocks: 5.11.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:10:49:05:e2:4e:7d:a4:30:be:45:f6:fe:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=701f9968fc7e7319b140d452da9e371a7b87fc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:95:8c:3a:aa:09:fd:ea:f7:63:f9:ae:3f:
84:35:df:f1:08:58:8c:35:db:d1:ec:e9:74:fb:ec:
53:0e:02:e0:a4:45:7b:33:b9:86:38:1c:d0:02:66:
1c:5d:6b:76:4d:1a:91:7c:c8:1b:42:50:0d:34:c2:
6d:b5:e6:23:cd:cc:c4:fe:c5:a7:53:a5:2a:16:f1:
5e:15:2b:19:d0:80:3b:c7:93:73:2a:95:4c:68:19:
9c:ce:53:ea:57:9c:05:b3:7f:a6:3e:77:97:66:dc:
a0:56:b1:55:ef:2d:5e:9c:d6:d7:57:84:34:16:cf:
75:7c:89:8d:49:f3:68:a5:00:6e:83:ba:87:09:ba:
99:a5:88:d8:f0:c7:63:12:7f:ef:c8:9e:4a:eb:71:
07:52:56:8a:b5:b1:e3:73:4a:f9:61:4a:73:00:78:
e2:ca:2f:9a:75:66:51:2d:95:39:5c:0a:7e:7b:2c:
12:ad:ff:13:01:d2:78:3a:c6:a5:22:d4:96:a1:2f:
f9:6c:ca:e2:f7:1b:e1:a7:fc:dd:96:bd:40:0f:15:
cb:7c:5c:90:ce:a9:7d:a3:3b:e3:20:27:88:57:ac:
74:a7:22:ea:ca:ff:52:46:32:4f:ed:4f:82:b3:5d:
39:8a:e4:30:ad:5e:71:2f:6e:7e:ed:36:c8:ef:4f:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:99:68:FC:7E:73:19:B1:40:D4:52:DA:9E:37:1A:7B:87:FC:47
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/cB-ZaPx-cxmxQNRS2p43GnuH_Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.19.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0d:80:8f:67:1e:79:de:ec:03:93:03:8c:ec:5e:4d:a2:c9:
26:f9:87:5b:e6:b2:ba:e7:85:f5:a5:1a:de:cd:e0:91:59:50:
f6:14:a5:e8:19:d4:bb:db:e2:4a:f5:23:cc:80:a0:6b:c8:3c:
b8:8c:46:b9:18:fb:ae:d8:39:10:d2:72:51:3d:0c:86:c6:a7:
6f:3f:dd:62:01:80:15:20:85:a4:c9:44:b4:23:03:fe:2e:e7:
73:b7:d3:3d:99:71:62:a8:fd:1e:8b:f5:d6:97:69:08:0d:15:
be:cb:a5:02:2a:f1:cc:4a:84:c8:e3:9e:b8:26:d6:3d:9f:d0:
7f:fc:91:eb:f9:af:36:a0:06:54:1a:a5:d8:66:e2:90:3d:99:
35:43:99:b7:4b:ef:2c:6c:0f:ba:f3:0e:dc:15:8b:61:5a:e7:
1d:e7:8b:75:fa:4e:e1:76:16:93:39:91:e8:71:7a:e9:df:cb:
8b:0b:d5:e0:66:38:eb:fb:b3:33:2e:3c:9e:c4:67:e8:7d:80:
9e:b0:da:be:22:9a:98:82:42:12:d0:c3:6b:24:58:42:4e:50:
6f:53:37:89:d5:a7:11:d6:04:ec:c1:78:bb:49:9c:de:80:1f:
cf:3d:0a:b6:29:e0:01:b6:e5:b8:eb:0d:0e:13:f0:90:10:52:
7e:4b:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:37 2024 by rpki-client on console-ams.rpki-client.org