Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6imRRScwjK7sjHzkICYDOLVzuk.roa
File: C6imRRScwjK7sjHzkICYDOLVzuk.roa (raw, json)
Hash identifier: BrU28yVAYkgHl3sutEdkh3VNmNlukuxo1WCmDiXNoHE=
Subject key identifier: 0B:A8:A6:45:14:9C:C2:32:BB:B2:31:F3:90:80:98:0C:E2:D5:CE:E9
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019343C11E839D0F1AD30939C743B10BEBFA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6imRRScwjK7sjHzkICYDOLVzuk.roa
Signing time: Tue 19 Nov 2024 09:29:09 +0000
ROA not before: Tue 19 Nov 2024 09:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213889
IP address blocks: 5.180.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:43:c1:1e:83:9d:0f:1a:d3:09:39:c7:43:b1:0b:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 19 09:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ba8a645149cc232bbb231f39080980ce2d5cee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:1a:fe:0c:55:2b:0f:9e:80:67:df:26:14:
23:b3:4e:ec:2a:47:5d:5c:d6:12:50:54:00:d3:d9:
b3:c8:0c:01:57:74:cb:d8:e6:b8:e2:75:d4:4d:b6:
c4:1a:75:a0:77:73:53:cc:ef:6e:3e:a0:3e:a1:d6:
e4:83:9e:7c:ce:ba:ec:1d:4d:fa:bc:99:44:2e:c2:
e1:7d:9b:b7:bb:a7:95:e8:49:5f:35:9a:b8:6d:a9:
35:81:67:96:28:79:df:45:a0:0a:9d:5c:76:f3:f5:
7f:f5:18:c5:b2:5b:ea:25:f5:df:3f:2d:6c:84:78:
f9:9c:bb:4f:cb:7b:3f:58:69:f2:2e:1b:81:0f:bf:
22:20:df:a5:0b:03:13:6e:f3:b0:d2:2f:33:f3:ed:
1f:87:99:a6:90:74:8d:e9:a2:0c:b4:31:80:e6:71:
fb:3a:b1:42:bb:68:8d:d9:63:1d:9f:1f:8f:72:b6:
3a:d4:43:6b:29:79:5e:60:e7:6f:3e:03:1a:f5:fe:
79:52:85:57:f4:c4:b6:fc:a5:9c:e1:7e:50:37:6a:
8b:5d:5f:8d:75:aa:ee:c2:99:fa:00:e1:b0:bb:97:
e2:94:a7:e4:8e:4d:36:03:77:8f:12:89:66:50:ff:
7c:f5:8b:b3:5e:5d:79:71:37:cf:94:19:cb:7c:1a:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:A6:45:14:9C:C2:32:BB:B2:31:F3:90:80:98:0C:E2:D5:CE:E9
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/C6imRRScwjK7sjHzkICYDOLVzuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
Signature Algorithm: sha256WithRSAEncryption
87:33:68:9c:c0:5b:f9:ee:1f:4a:bf:5a:43:e1:7f:d6:1f:48:
24:6f:8d:2b:cd:0d:1b:9d:ce:2a:e8:a0:90:da:92:9c:a7:1e:
5f:c1:9d:8d:74:0c:eb:af:84:7c:a3:a5:41:ff:47:e6:e9:fe:
61:3a:86:d5:67:06:9b:d8:c5:4d:de:8d:4f:d4:74:ab:5b:a5:
16:16:32:ba:90:23:14:58:4d:c2:c5:25:ba:a9:77:b5:b1:16:
28:9a:25:ab:9f:fa:ea:15:52:b5:f0:85:4b:64:a3:f4:0a:49:
04:a0:e3:76:0f:70:bc:65:80:46:97:da:de:88:4b:55:10:55:
fe:e1:f9:be:e0:12:b8:a4:16:b2:39:11:70:3d:7d:96:f0:38:
9d:73:16:42:41:db:b0:b4:b1:e2:58:ae:6a:24:ba:0a:94:d5:
7c:2d:f2:fc:3b:72:f6:f2:26:50:f1:5c:15:75:81:95:e3:f2:
a8:40:60:ae:f6:90:ac:e6:e7:2b:5b:8c:cc:65:3d:f6:86:f1:
db:da:3d:c2:a5:8c:d3:cd:a6:01:d0:77:d3:4c:bd:8f:6c:c9:
cf:63:32:08:62:df:4e:20:01:85:fb:9c:2e:db:6d:fe:5f:ff:
21:f8:a7:e7:c3:49:7a:5c:e5:50:f2:d8:af:50:4c:d8:5c:0f:
f6:e8:3d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:27 2024 by rpki-client on console-ams.rpki-client.org