Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ptjcTu-tESn60qZfjZd0JPaNT10.roa
File: ptjcTu-tESn60qZfjZd0JPaNT10.roa (raw, json)
Hash identifier: 6frVPWpXXwH/q9Xn3ZOGQutTluKtn6+nd/mAb1rvx08=
Subject key identifier: A6:D8:DC:4E:EF:AD:11:29:FA:D2:A6:5F:8D:97:74:24:F6:8D:4F:5D
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 018CC56EEFE8559909FBD1DBD9C933E7A1B9
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ptjcTu-tESn60qZfjZd0JPaNT10.roa
Signing time: Mon 01 Jan 2024 14:30:31 +0000
ROA not before: Mon 01 Jan 2024 14:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210992
IP address blocks: 5.104.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ef:e8:55:99:09:fb:d1:db:d9:c9:33:e7:a1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 14:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6d8dc4eefad1129fad2a65f8d977424f68d4f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:bf:11:a8:92:54:73:26:59:80:84:85:a5:
92:f8:c0:cc:cb:ea:09:ef:9c:bd:6d:2e:7f:28:a9:
89:a2:c0:28:71:a0:50:97:a2:3b:96:b6:1b:e0:d6:
d6:c6:08:38:5a:eb:c8:cb:c9:97:06:25:ec:fb:c8:
c3:be:52:29:cd:c5:aa:03:82:e7:a7:3f:8c:e4:07:
a0:5d:19:e7:db:4e:04:08:da:41:bb:f7:8e:d8:97:
4a:ae:8e:66:75:c0:77:35:9c:59:35:50:13:bb:71:
17:05:a8:f9:00:74:a5:30:35:38:bc:8f:ef:f9:38:
a9:ab:c6:5d:55:11:03:23:63:06:c3:aa:88:bf:ff:
9f:aa:59:32:86:f5:c7:72:87:cb:61:8f:5a:1c:3e:
16:4f:b4:2f:06:f1:52:40:2b:c0:83:a5:5b:76:1d:
26:7d:78:cd:81:38:d0:83:75:81:ff:27:d0:a3:77:
b7:3c:c5:b4:14:55:10:cf:d8:18:1e:a9:63:27:14:
ad:45:7a:00:1d:3c:67:96:22:5c:3c:59:de:36:4a:
0f:85:3c:f3:a9:ea:98:50:62:9b:82:3a:10:5a:5f:
fd:e3:0f:48:62:4f:f7:1c:98:6e:bb:6d:94:65:2b:
7a:13:7c:82:3d:25:2d:6a:51:bf:6c:20:7f:08:27:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:DC:4E:EF:AD:11:29:FA:D2:A6:5F:8D:97:74:24:F6:8D:4F:5D
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/ptjcTu-tESn60qZfjZd0JPaNT10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.182.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:92:75:b6:29:44:96:c6:af:97:32:71:3d:ac:c2:d9:77:07:
5a:c5:af:47:d7:55:81:71:65:38:dd:54:59:f7:91:3d:6e:ff:
0b:55:64:4e:d9:66:69:05:e5:d3:af:55:5a:1c:6c:16:74:00:
77:61:9b:bb:12:ef:12:86:5e:0a:46:d1:9b:ec:00:f4:e3:08:
94:8f:8a:32:e2:fa:f6:b0:aa:c6:49:14:2c:09:f5:67:99:89:
ca:42:7f:59:2d:6c:23:76:36:21:32:57:e3:68:17:f6:93:a0:
72:ba:3e:73:cd:f8:8a:e1:33:62:7b:91:fc:df:bf:e6:98:e1:
d0:9b:6c:85:e7:d7:6b:00:3a:5c:90:b8:db:7b:9b:53:42:14:
92:95:3c:f1:9e:29:59:b1:60:05:88:97:ee:8e:a6:a8:bc:cb:
dd:f6:0c:ef:03:5e:ca:6d:a3:9e:1f:87:ec:98:11:b5:2b:d9:
bc:ce:ef:c4:62:b4:b7:5a:14:06:7f:bc:7a:11:1c:bd:71:86:
65:2e:12:0a:98:90:3d:67:0a:c9:61:06:65:cd:5b:5e:23:f3:
4f:f2:fa:40:c3:93:00:78:16:62:3c:e8:cd:26:51:29:58:e4:
fa:a6:0d:a5:05:44:5b:99:7d:65:31:fb:df:06:92:0c:5d:1b:
f4:cf:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:40:39 2024 by rpki-client on console-fra.rpki-client.org