Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X3C6LAK-QE0is9X8n4Dl2RErIUM.roa
File: X3C6LAK-QE0is9X8n4Dl2RErIUM.roa (raw, json)
Hash identifier: ZqE0hmGRT04RF6I9/LcTNcEZ/sB++9JPc2l3swOoswE=
Subject key identifier: 5F:70:BA:2C:02:BE:40:4D:22:B3:D5:FC:9F:80:E5:D9:11:2B:21:43
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BFA0145CDD7EE9C3613677DC9B24
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X3C6LAK-QE0is9X8n4Dl2RErIUM.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203084
IP address blocks: 5.180.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bf:a0:14:5c:dd:7e:e9:c3:61:36:77:dc:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f70ba2c02be404d22b3d5fc9f80e5d9112b2143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:28:7e:df:ca:ee:53:03:4b:8a:66:ca:1d:
6f:08:74:11:5a:dc:47:00:4c:49:bd:30:c7:68:92:
c8:65:7c:d8:51:58:4d:72:98:d2:4f:ec:c7:ff:83:
fd:ec:8c:55:fa:04:19:49:e4:d8:cf:80:78:73:a2:
df:8d:66:2c:1e:27:17:9b:88:35:9e:7a:0a:7c:a6:
a3:3f:37:d2:a1:0b:95:67:69:a4:b5:7e:cb:f6:9c:
40:5c:d6:40:63:14:99:7a:30:51:c6:f4:56:bd:36:
1a:5a:5f:06:ce:6b:09:7c:78:c7:52:b7:8d:5a:6a:
e7:6a:f1:3f:eb:ff:ae:1d:e7:96:ec:22:99:ae:55:
e5:39:3a:b0:32:f6:f2:25:9e:52:e2:f6:71:4b:ce:
eb:e0:ea:a7:93:f2:f7:ee:0d:f0:6b:b9:2c:50:bc:
d1:b8:fa:ba:bf:34:a3:d9:c0:f4:82:e2:31:62:05:
ba:9f:5b:c1:13:38:4a:ac:ae:5c:8c:e0:d7:35:5c:
b2:e3:06:ae:8e:34:09:f8:59:19:6f:91:08:c9:c1:
01:98:28:00:53:11:d5:22:d4:2a:40:3d:cb:ee:07:
c7:8b:1b:a3:7b:4e:e2:60:40:c5:77:09:24:f4:f3:
62:6d:af:e3:fc:7f:9c:9a:69:3a:87:cb:18:b3:be:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:70:BA:2C:02:BE:40:4D:22:B3:D5:FC:9F:80:E5:D9:11:2B:21:43
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/X3C6LAK-QE0is9X8n4Dl2RErIUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.122.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c6:6d:8d:31:89:e3:c4:04:90:ad:9e:cd:47:51:f5:b3:c0:
9b:32:a3:3f:00:64:4e:4c:b5:79:57:f1:b5:04:b7:a0:f8:41:
8a:2f:22:1f:b9:80:cc:40:1b:b9:78:82:28:08:7c:c6:07:46:
67:b2:1a:57:38:60:39:30:fe:74:30:3b:82:be:20:cd:fb:aa:
84:07:2d:52:05:12:26:80:71:53:14:16:60:1f:bb:a7:09:4e:
19:d4:15:98:94:95:a5:b9:32:f8:96:ce:8f:e8:f2:85:e3:2b:
91:e7:32:9a:8b:73:97:f1:7e:31:8e:c7:4c:a1:f8:0f:86:bb:
cf:47:75:fd:23:94:a8:41:c9:c5:af:ae:70:d1:a9:2a:61:76:
06:a4:7b:c2:29:d5:25:13:20:1e:7b:a4:d2:04:af:56:f7:cb:
e2:82:da:64:09:2e:60:02:09:2f:6a:63:07:63:30:80:08:e8:
0e:4c:8a:a0:10:a5:58:cd:e0:a2:ce:41:0f:c0:b3:d5:75:1e:
fe:5a:55:3b:57:04:cc:6d:13:b7:14:93:67:c6:c7:0a:21:50:
5b:fe:ad:7c:a5:21:ce:86:21:71:6c:13:98:bb:3c:5b:d1:e6:
24:29:63:73:18:0b:62:b7:57:81:ca:e1:74:a0:ab:84:01:e3:
6f:37:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:41:00 2024 by rpki-client on console-fra.rpki-client.org