Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xQG_mab0Fm66JGwYFsY1UlAD0b0.roa
File: xQG_mab0Fm66JGwYFsY1UlAD0b0.roa (raw, json)
Hash identifier: S90pO7ZH7veKouW2ZNtA/76W0PV5+ELBR/vlJkr7Uls=
Subject key identifier: C5:01:BF:99:A6:F4:16:6E:BA:24:6C:18:16:C6:35:52:50:03:D1:BD
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01926375AAC6DF481BA2998B411CA98C30AC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xQG_mab0Fm66JGwYFsY1UlAD0b0.roa
Signing time: Sun 06 Oct 2024 20:11:48 +0000
ROA not before: Sun 06 Oct 2024 20:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214382
IP address blocks: 5.180.104.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:63:75:aa:c6:df:48:1b:a2:99:8b:41:1c:a9:8c:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 6 20:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c501bf99a6f4166eba246c1816c635525003d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:33:49:72:78:65:4c:99:6a:7e:79:80:2c:
fa:b3:27:6d:3e:18:1e:2a:ae:5c:73:c8:16:2c:f5:
d7:90:2e:6c:93:d7:29:7d:43:c6:31:96:fe:15:d6:
7b:df:43:1b:0c:fe:1f:45:c3:de:90:9c:9e:69:c3:
3d:c1:3d:bd:df:e1:3a:a2:cc:ae:62:f9:f6:44:46:
f2:36:c7:75:cf:1f:31:a5:5f:79:3f:3f:5f:9b:6f:
4d:ed:f4:2b:98:4f:52:70:9d:44:98:46:21:e3:9a:
38:14:45:87:cf:d9:8b:e4:07:e8:eb:dd:18:8d:a1:
69:72:8e:2a:4b:b1:8d:16:72:14:98:38:97:5e:96:
eb:b5:64:5b:39:ad:5b:bb:28:b4:b5:62:71:11:74:
46:5c:46:ec:8c:00:39:e6:e4:c6:b2:4a:2d:b9:36:
41:65:6a:a9:ce:62:96:3f:21:b3:c1:2c:1b:be:1b:
9e:ed:73:01:c4:c8:12:cc:46:50:8b:a6:0d:05:df:
c8:22:58:69:e9:ab:07:5f:f0:a7:8b:ae:68:ab:3f:
b5:60:bc:d9:bc:c9:a3:33:75:92:78:ea:a8:94:47:
d0:f3:02:69:d7:fa:03:c7:9a:18:07:4f:74:b5:ff:
46:ad:c8:10:b3:c8:76:da:a8:86:ba:5f:e2:95:e5:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:BF:99:A6:F4:16:6E:BA:24:6C:18:16:C6:35:52:50:03:D1:BD
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/xQG_mab0Fm66JGwYFsY1UlAD0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.141.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:78:36:fb:e9:e3:0d:18:00:5c:f5:c3:a7:f7:df:1d:fe:64:
4a:91:5c:99:e7:56:e6:df:da:96:78:57:99:33:8d:cc:27:85:
2c:a0:b5:d3:db:e9:dc:9a:9d:95:0e:c3:80:69:47:48:b2:47:
fe:08:40:25:af:b7:88:f8:c4:7b:f7:90:46:fe:fd:3b:42:50:
f3:66:12:95:42:76:b3:ed:3b:dd:59:63:d5:7d:86:11:8d:7d:
c9:be:96:34:c5:d5:11:1e:f3:df:00:fa:94:b3:2c:bb:7a:5d:
5d:23:cf:97:69:c1:b2:8a:f3:33:ad:6d:9b:b8:85:e8:28:22:
24:66:3e:f0:1c:5b:69:72:f0:fb:eb:11:e8:14:9e:20:48:1e:
a4:68:0c:8d:74:7d:4d:ff:b7:53:f1:e5:32:77:7f:66:0e:d2:
87:95:7f:f8:18:c7:59:52:35:7c:a8:6b:cb:14:27:fb:23:cb:
46:15:01:b9:e3:0c:71:14:c4:3a:ec:15:4a:dd:20:01:fd:f3:
fd:7c:46:76:c1:dd:1a:06:23:b4:27:79:d6:66:9c:87:7d:24:
16:7f:ee:3d:86:0c:5c:9f:f4:46:63:ca:c4:6c:8f:bc:3c:cc:
85:7e:ff:4e:d9:d4:33:69:74:b1:90:eb:50:70:d9:52:8b:b0:
5c:db:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:27 2024 by rpki-client on console-ams.rpki-client.org