Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/LQa43l2kUXysY3Zwt4uUmUyqvww.roa
File: LQa43l2kUXysY3Zwt4uUmUyqvww.roa (raw, json)
Hash identifier: 2J/pUA7BpGSM4LyNPg8apfc6ospFCy7Zw4Ns+dyOe0A=
Subject key identifier: 2D:06:B8:DE:5D:A4:51:7C:AC:63:76:70:B7:8B:94:99:4C:AA:BF:0C
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018EC2BFC933220206FD9E1FC907B2C5E2E5
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/LQa43l2kUXysY3Zwt4uUmUyqvww.roa
Signing time: Tue 09 Apr 2024 12:05:32 +0000
ROA not before: Tue 09 Apr 2024 12:05:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 5.42.192.0/24 maxlen: 24
194.55.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:bf:c9:33:22:02:06:fd:9e:1f:c9:07:b2:c5:e2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Apr 9 12:05:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d06b8de5da4517cac637670b78b94994caabf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:be:1e:82:b9:1a:2a:a3:f6:93:7e:1e:c9:
ce:c2:a4:d2:61:50:22:61:e3:f9:e5:f6:b8:47:e3:
90:8e:7a:cb:80:6f:b6:68:ef:30:a8:94:bb:e5:fc:
cd:d5:54:1e:66:fb:74:1d:1f:cd:09:5c:14:f7:ef:
5d:51:63:61:e5:f4:29:64:1d:2a:f0:95:16:45:18:
22:a3:99:73:14:1e:bf:51:4d:ee:c4:71:4a:24:2d:
ad:63:1b:87:3e:50:09:36:54:df:aa:fe:21:2f:7c:
0b:37:ed:12:e2:c1:e1:71:50:a1:b6:dc:52:87:c7:
7a:6f:01:96:73:54:c0:da:4f:83:92:fa:ce:20:c3:
83:3b:64:fa:72:fc:82:6e:ad:a9:4e:1c:00:5d:95:
a1:d3:c8:8b:a7:95:1b:8a:73:f2:a6:32:5d:6a:74:
23:42:07:12:f4:58:53:a0:fe:b7:68:25:43:fa:63:
d6:ae:58:cb:fe:0e:c3:a2:23:8c:dc:fe:f9:79:02:
b7:55:8e:ba:86:fd:1a:00:14:3e:ff:b5:fb:80:c6:
d9:38:07:45:8d:c0:ba:58:c8:a3:cc:77:a5:78:7b:
4d:04:64:c9:56:ce:87:61:dd:be:42:c0:4e:01:3a:
97:01:a0:9b:5a:9e:35:f2:24:10:93:ae:ec:ab:d3:
c3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:06:B8:DE:5D:A4:51:7C:AC:63:76:70:B7:8B:94:99:4C:AA:BF:0C
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/LQa43l2kUXysY3Zwt4uUmUyqvww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
194.55.170.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6d:b5:be:26:56:71:d6:a9:11:51:bb:0a:07:dc:b2:d5:ae:
86:45:60:88:e8:6b:6b:ba:10:b8:29:c1:50:a6:c8:e2:3d:85:
32:8e:94:4f:f9:cd:d3:08:0e:f0:81:c6:63:9d:8b:97:98:a4:
78:8c:7e:ef:d6:a1:fa:c1:c0:3a:29:67:9c:ed:9f:fb:d8:43:
48:55:d2:38:4d:e3:f0:32:52:10:e6:99:82:1e:44:04:33:c6:
d3:ec:5a:ac:b6:1d:34:03:9e:38:f8:d0:3a:d7:c2:fb:82:f4:
02:c7:e6:34:ad:4b:a7:81:62:49:1b:e6:f0:94:75:bc:2c:70:
53:9e:1b:9b:18:a0:66:a3:50:bc:6f:ef:53:ef:96:4f:11:59:
fb:4d:8e:95:b8:80:c5:02:be:99:16:70:fc:b8:d2:97:0c:ac:
41:ea:54:48:6d:b1:a9:73:48:db:03:03:20:0a:c2:7f:92:a2:
30:6c:21:de:78:13:43:52:b6:c3:4a:e0:f6:8f:b7:10:df:5c:
55:e7:ca:12:e3:e9:35:50:74:46:83:3c:05:b7:fb:fc:fb:a2:
37:da:e2:aa:dc:65:cf:27:48:eb:6b:61:c2:39:74:e4:55:ac:
6c:6b:66:d6:bb:fa:26:7f:13:bd:92:0a:22:50:8c:38:23:ea:
2c:a7:72:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:59:37 2024 by rpki-client on console-ams.rpki-client.org