Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/6zpqv5KzLs8CUU18smIcS3hk0mc.roa
File: 6zpqv5KzLs8CUU18smIcS3hk0mc.roa (raw, json)
Hash identifier: cHqIXnkGAyLZuQ3saScLYw2X+v3tiFY3vP0pXUlNtxw=
Subject key identifier: EB:3A:6A:BF:92:B3:2E:CF:02:51:4D:7C:B2:62:1C:4B:78:64:D2:67
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E137153474D418E4F2606912174FBFD0
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/6zpqv5KzLs8CUU18smIcS3hk0mc.roa
Signing time: Wed 11 Sep 2024 13:12:49 +0000
ROA not before: Wed 11 Sep 2024 13:12:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5593
IP address blocks: 212.110.128.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:37:15:34:74:d4:18:e4:f2:60:69:12:17:4f:bf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:12:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3a6abf92b32ecf02514d7cb2621c4b7864d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:52:2a:4e:56:e1:86:25:39:f6:50:4b:79:
0e:36:aa:2b:f1:39:f4:f3:41:56:88:a9:75:d0:19:
51:71:a9:42:e9:5a:5a:9f:03:52:34:a8:3f:db:1d:
25:2e:30:e7:cf:83:7d:2d:d8:59:eb:5a:d9:3e:d8:
b5:6d:0e:81:c9:ff:77:e3:95:e0:25:43:26:0e:d2:
e5:f9:93:10:27:69:a1:2e:9e:6e:aa:f9:46:7d:15:
57:2d:2a:4e:b6:0c:87:ad:98:ca:c3:77:83:73:85:
71:35:1d:ff:84:69:82:50:d6:7b:38:c9:14:ee:8b:
81:18:82:ea:61:52:b9:f2:a2:e2:a4:dc:33:3f:c5:
5a:55:53:e8:60:b7:c7:8f:f8:c9:47:81:0a:17:60:
a3:00:8c:37:7b:e5:6f:df:f2:3a:e3:c3:17:21:3d:
b5:6a:13:15:84:1b:70:25:b0:3c:00:60:4b:9c:d5:
80:a6:cd:04:a6:3a:8b:31:bf:c7:be:9e:e8:80:a0:
af:9f:46:0d:3f:a1:ad:b7:03:fe:ee:2b:18:a2:3d:
97:43:04:21:1c:ee:f2:84:b9:e3:50:c8:a4:ee:13:
03:00:4d:a8:fc:a7:df:7f:84:4c:d7:b1:9b:e2:c4:
9b:0e:fa:31:3b:81:c7:86:ed:e4:6d:a5:fc:ce:64:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:6A:BF:92:B3:2E:CF:02:51:4D:7C:B2:62:1C:4B:78:64:D2:67
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/6zpqv5KzLs8CUU18smIcS3hk0mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.128.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5d:25:8e:81:ee:ef:9f:8a:fa:10:f9:95:13:2f:e6:a3:dd:
0a:e1:a2:1b:41:3a:68:ac:c3:ec:db:ab:ce:7c:45:ae:69:36:
c2:42:c3:e0:86:15:6b:30:0b:c4:5e:ca:3d:8d:54:1c:bc:f8:
ce:7a:97:40:c0:ce:29:d2:13:3e:29:9b:67:c2:33:ae:1f:4d:
e0:c5:d2:ba:b3:6c:c9:bd:b2:34:1d:5c:fb:17:0c:c1:da:85:
a8:a4:5e:70:ee:8b:01:2e:83:45:99:06:e5:34:82:af:83:50:
c8:ca:cf:e9:de:12:e3:3c:6c:7c:e3:6f:2d:b0:b7:22:6e:c9:
2e:a1:c0:da:6b:80:b4:1a:9f:c0:39:e3:c7:49:90:19:37:52:
4b:13:e8:4e:a7:39:19:3a:e4:2e:7a:fd:19:43:06:f9:44:17:
0d:ed:67:b6:29:e5:bb:b4:65:00:9c:dc:cf:41:88:d1:51:cb:
7f:c2:0d:a1:67:44:c4:75:b1:f4:7d:65:f9:2e:49:bf:f7:11:
05:b2:93:be:84:6b:9c:37:9a:fd:1d:52:5b:ee:63:0d:04:41:
41:e1:cb:71:10:f7:fd:90:dc:4d:3d:1d:c5:e5:96:08:a6:b1:
fb:0a:e2:5d:0a:79:e1:6d:6c:ca:68:9d:6c:64:df:10:bf:e6:
1d:96:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:25:33 2024 by rpki-client on console-ams.rpki-client.org