Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LT8nYtChr1fzaDttMqqzHuWw9C8.roa
File: LT8nYtChr1fzaDttMqqzHuWw9C8.roa (raw, json)
Hash identifier: moV63LgoAN6M4kyShAhJywasxfqpv/UvpDmlAimvaWs=
Subject key identifier: 2D:3F:27:62:D0:A1:AF:57:F3:68:3B:6D:32:AA:B3:1E:E5:B0:F4:2F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01934403F52C7659D8DC973A730046156E5E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LT8nYtChr1fzaDttMqqzHuWw9C8.roa
Signing time: Tue 19 Nov 2024 10:42:10 +0000
ROA not before: Tue 19 Nov 2024 10:42:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59253
IP address blocks: 103.145.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:03:f5:2c:76:59:d8:dc:97:3a:73:00:46:15:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 19 10:42:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d3f2762d0a1af57f3683b6d32aab31ee5b0f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:09:7f:cc:e8:73:4c:46:e3:5b:ae:30:7c:
f4:ea:67:69:5e:2b:a2:22:1f:86:dd:68:ac:11:38:
d7:11:0c:96:d3:24:38:7c:0a:60:a9:67:fb:de:4f:
56:a1:e3:52:b0:92:6a:c6:5f:32:43:81:c6:0b:e9:
c6:b7:5e:d6:20:6b:c7:76:87:cf:1b:9a:df:75:b5:
e8:75:42:67:3e:ff:7d:0b:dd:06:45:c5:52:c2:36:
e1:46:ae:da:6b:f9:dc:18:ad:5b:75:2f:fc:19:e5:
78:27:4c:5d:57:03:b8:9a:61:c8:2f:e3:70:2b:31:
e3:d0:be:c1:d8:a5:b9:46:6a:e2:76:cf:b1:f7:96:
f6:cb:49:c0:3b:0b:f6:6e:47:d8:12:a2:09:d3:15:
09:86:30:83:ce:b6:29:70:25:cd:f0:31:79:76:5a:
52:10:9e:64:65:5d:07:a1:05:f5:b1:72:2e:92:77:
09:89:de:d0:a0:11:02:02:5e:94:66:ec:9d:fd:0a:
8f:f5:f5:da:4e:40:77:d6:8d:4c:4e:ef:d0:20:07:
5a:04:b5:c3:87:0a:75:4a:25:c8:90:d5:67:63:53:
15:84:b0:53:c6:00:5b:dc:6c:7b:a3:42:da:fc:56:
81:4c:f5:0f:58:66:f7:06:77:35:19:47:83:c2:4d:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3F:27:62:D0:A1:AF:57:F3:68:3B:6D:32:AA:B3:1E:E5:B0:F4:2F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/LT8nYtChr1fzaDttMqqzHuWw9C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e7:7f:f2:19:6f:8a:36:12:ee:f0:17:8a:08:9b:71:9a:ee:
a5:73:d6:22:96:25:51:1c:5c:50:f6:ab:e3:fb:3b:10:d6:53:
de:07:c0:e2:90:33:45:85:72:a9:79:fc:53:d8:44:a0:da:38:
58:9d:bf:94:c2:75:69:ee:c7:ea:9f:df:9b:0f:8c:14:ce:49:
c1:d4:c1:1b:2e:f5:11:8b:d3:d0:82:a7:8e:9f:64:ac:ac:a4:
8b:f8:4a:b1:44:d3:f8:b5:05:a8:54:be:5a:e4:03:c2:75:6d:
bc:81:06:45:5b:7a:bd:57:af:a4:aa:49:31:16:d8:17:af:02:
7d:c5:18:65:88:ff:ee:c1:1a:b1:d8:d4:f6:39:bd:0a:0f:97:
aa:26:69:c5:6b:db:73:6a:38:57:4c:24:ad:eb:6b:a7:d0:53:
79:8a:42:07:00:50:9e:fa:ce:3c:59:79:b5:00:08:c4:af:15:
f2:ad:ea:1f:6f:fd:fb:39:cc:9b:f6:07:87:dc:d1:f0:69:1b:
b0:6b:dc:a9:88:51:e3:2a:66:0c:bf:03:f8:12:30:86:9e:18:
9a:2e:37:bd:12:4f:7a:96:23:4b:d0:85:06:52:fc:3a:52:36:
40:b6:2c:b0:aa:55:22:f7:f0:33:e3:48:4c:b7:db:53:b7:4c:
4d:5a:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:00:56 2024 by rpki-client on console-ams.rpki-client.org