Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pmJI_s6dlPx1mdTY36qUfH3Sdxk.roa
File: pmJI_s6dlPx1mdTY36qUfH3Sdxk.roa (raw, json)
Hash identifier: LdkrrroozmUvmK12GXv3bxpLNX0IpC/vYYq4Ld39A5Y=
Subject key identifier: A6:62:48:FE:CE:9D:94:FC:75:99:D4:D8:DF:AA:94:7C:7D:D2:77:19
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019275D42B5DA3387AFDA2E441AB6B356945
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pmJI_s6dlPx1mdTY36qUfH3Sdxk.roa
Signing time: Thu 10 Oct 2024 09:48:11 +0000
ROA not before: Thu 10 Oct 2024 09:48:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 5.133.40.0/21 maxlen: 24
185.173.8.0/22 maxlen: 24
194.163.224.0/20 maxlen: 24
2a04:ed00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:d4:2b:5d:a3:38:7a:fd:a2:e4:41:ab:6b:35:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Oct 10 09:48:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a66248fece9d94fc7599d4d8dfaa947c7dd27719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:8f:e8:1e:84:66:22:8f:a9:f3:3e:a8:d8:
9a:5e:d4:86:94:a3:fa:60:f3:ca:38:52:d6:12:31:
e4:d5:cb:cc:41:b0:79:59:8f:ea:91:e3:e5:ab:19:
a5:a5:69:a5:aa:fd:ff:79:d1:7b:3f:c8:bd:71:88:
0b:3a:d3:11:9b:4e:e1:4f:ce:27:22:92:4a:db:b6:
a5:b9:cc:0c:30:dc:07:ed:8c:74:43:a8:a0:aa:9e:
fd:46:1a:3b:6c:c1:0a:5b:c3:ce:e4:5d:e8:40:2f:
62:33:1e:1a:e3:3c:95:b3:38:b9:82:46:27:72:ff:
f9:37:58:63:11:af:46:f0:04:99:71:dd:d2:33:75:
8b:6e:6f:85:82:49:a8:87:79:64:0b:7c:d9:26:75:
b8:b2:9b:f3:68:00:64:59:d6:51:23:91:75:69:dc:
db:dd:32:18:ae:de:88:90:c6:af:25:a9:4f:32:f2:
ee:25:46:67:a1:50:64:77:a6:23:06:26:11:2b:d5:
fe:5b:49:92:8b:6e:a2:bf:9c:b8:08:58:63:9b:40:
8c:2f:20:fa:c0:cf:31:13:6f:1b:ce:4e:d9:e1:31:
1f:7c:89:db:3c:af:48:69:93:4b:5a:5e:8c:8e:00:
6c:05:0d:36:8f:eb:d6:cc:51:d8:38:fd:62:1c:0b:
e4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:48:FE:CE:9D:94:FC:75:99:D4:D8:DF:AA:94:7C:7D:D2:77:19
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/pmJI_s6dlPx1mdTY36qUfH3Sdxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.40.0/21
185.173.8.0/22
194.163.224.0/20
IPv6:
2a04:ed00::/29
Signature Algorithm: sha256WithRSAEncryption
0c:cd:c0:e8:a8:89:47:ef:c9:0c:8e:29:83:4b:24:47:2b:d0:
88:2a:1f:41:eb:3f:71:8c:4c:e4:98:5c:cb:76:31:a2:64:17:
df:bc:f7:ae:22:c9:81:72:e5:0c:32:5e:27:c7:da:32:1d:3b:
a5:4d:29:fe:9e:84:16:0d:ac:be:0e:64:15:0d:a0:2e:9b:dc:
28:29:c4:a2:89:98:cb:70:ce:c0:be:0c:9e:b4:f1:76:98:d6:
d7:de:48:0d:07:9f:38:22:48:33:73:8c:7b:22:2f:aa:e9:fa:
c9:65:7c:11:ea:cd:ef:11:b7:18:e6:89:02:49:f6:c7:de:44:
92:a9:25:c9:2b:ed:b0:51:04:0e:42:f2:97:38:98:b2:34:30:
d9:c1:50:f6:d0:e5:99:de:06:d5:3d:56:71:8d:ca:df:a3:92:
6e:c3:c0:28:78:43:64:9b:c8:c3:19:e3:de:a5:5e:64:6c:24:
6e:96:46:c9:fd:1d:46:6f:bd:de:69:82:d0:00:6a:4a:c7:da:
a0:4a:05:93:fd:d4:9d:b6:b8:96:5d:41:cd:d2:d2:d0:23:c8:
e6:a6:d7:8b:1d:0a:5b:3a:82:50:08:ea:4b:05:a7:9f:3a:17:
ea:89:c2:55:6e:38:60:84:e9:97:59:02:8a:f6:da:62:55:bd:
43:6f:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:32:11 2024 by rpki-client on console-ams.rpki-client.org