Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7Y0Psi8-BH-u0fCe38ch1-C-6WE.roa
File: 7Y0Psi8-BH-u0fCe38ch1-C-6WE.roa (raw, json)
Hash identifier: PK4agZEi+ADkYtsYsym77QOcEcwpaLMeY87u8ifeizk=
Subject key identifier: ED:8D:0F:B2:2F:3E:04:7F:AE:D1:F0:9E:DF:C7:21:D7:E0:BE:E9:61
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018CC26D5742E85D00B73B732FA2A860E861
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7Y0Psi8-BH-u0fCe38ch1-C-6WE.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19437
IP address blocks: 103.47.58.0/24 maxlen: 24
14.102.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:57:42:e8:5d:00:b7:3b:73:2f:a2:a8:60:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed8d0fb22f3e047faed1f09edfc721d7e0bee961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:82:8a:44:f7:ca:60:89:f1:23:4a:d1:23:
4d:5e:5a:3e:3a:f1:47:fb:73:00:a7:b2:46:e1:5e:
78:c5:5b:b2:16:0b:76:48:b1:43:95:b7:b3:3b:a5:
8c:db:1f:47:dd:ce:21:31:34:f7:04:cf:da:8e:9d:
23:26:14:83:41:ad:20:5f:3a:30:e0:a9:15:75:cf:
1c:36:0b:15:5e:5f:41:f4:94:dc:09:31:af:e1:b0:
67:16:b2:2f:33:01:4e:c3:39:aa:4e:8e:5d:27:87:
02:4a:57:32:90:13:26:33:ec:45:65:07:d4:1d:95:
06:bd:df:10:30:78:20:bf:41:55:cd:9e:6a:bc:4b:
b1:e3:5d:60:23:2c:d6:36:a1:6d:f6:e8:a5:fd:7d:
6f:e6:4e:74:04:b6:c6:b9:1b:b0:f9:b9:e5:d5:0a:
9c:86:8a:6f:03:fa:a3:34:54:37:78:df:d0:51:a0:
0a:97:a4:6f:a7:93:f2:04:3b:fe:bb:dc:3e:21:c5:
38:93:a2:7f:87:e9:ec:90:95:78:7c:6c:da:27:30:
41:76:50:b4:96:71:8a:19:32:c9:fa:27:21:e1:07:
f5:ba:c9:f4:f6:4e:09:55:0d:92:e3:67:c1:37:6d:
8c:7f:98:73:09:94:e2:ee:2a:f3:67:51:d2:82:5a:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:0F:B2:2F:3E:04:7F:AE:D1:F0:9E:DF:C7:21:D7:E0:BE:E9:61
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7Y0Psi8-BH-u0fCe38ch1-C-6WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.235.0/24
103.47.58.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ba:63:a8:b5:f0:1f:9d:ce:c7:d5:57:7e:89:4d:61:a2:8f:
a3:88:6d:96:b5:9c:94:b0:54:1e:15:8e:96:2e:db:86:15:a0:
41:cf:51:1c:6e:72:22:06:be:1e:12:45:a1:1c:6b:28:53:12:
8f:d9:62:3a:27:5e:be:14:90:ad:ce:b6:86:cc:2d:3c:40:5d:
88:75:d6:d5:4b:0e:bc:99:0c:ba:d0:3f:e0:f2:74:4d:e7:76:
af:42:ea:df:bb:33:cb:e3:16:03:96:d8:15:e7:e4:f9:d8:00:
d7:51:2c:23:2d:5b:6a:0c:cd:cc:8a:94:9c:eb:d9:85:3b:69:
a8:7a:bf:1f:cc:1b:96:f5:7a:3f:b7:fd:43:88:3a:03:1a:75:
ca:2e:8c:54:e8:7f:e5:bf:01:4d:a2:da:48:79:f6:b7:e1:8c:
02:d2:4a:da:21:86:87:c7:8c:ce:d0:26:0a:c2:de:82:5a:82:
69:c2:19:63:90:97:82:04:30:3a:85:01:c7:7d:99:dd:55:9b:
d2:f5:a9:97:c2:ae:cb:d9:ce:ba:9a:5e:07:71:09:bb:a2:b7:
43:5f:ae:d3:f9:98:bd:4e:e8:4e:e3:32:d3:b9:8c:ed:76:67:
be:c3:0c:db:ee:98:c1:b9:5c:cc:bf:24:cb:83:a0:46:93:e8:
db:3a:0e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 20:35:42 2024 by rpki-client on console-ams.rpki-client.org