Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qCl3bUChG6tO703ra2xEy0Nevds.roa
File: qCl3bUChG6tO703ra2xEy0Nevds.roa (raw, json)
Hash identifier: T/eRtOYgqf1ewfiimGc3hsB6lQd81r/xqZqo8WifHBk=
Subject key identifier: A8:29:77:6D:40:A1:1B:AB:4E:EF:4D:EB:6B:6C:44:CB:43:5E:BD:DB
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 018EF1BA0DE998C599D828C2AEC72F9FB7E4
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qCl3bUChG6tO703ra2xEy0Nevds.roa
Signing time: Thu 18 Apr 2024 15:01:25 +0000
ROA not before: Thu 18 Apr 2024 15:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 103.102.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:ba:0d:e9:98:c5:99:d8:28:c2:ae:c7:2f:9f:b7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Apr 18 15:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a829776d40a11bab4eef4deb6b6c44cb435ebddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:3c:65:14:ff:41:45:98:8e:da:e0:44:32:
1d:33:65:92:46:13:e0:d5:e9:ae:3f:1f:7d:05:07:
ff:4c:5b:dd:bf:76:21:2a:9b:b1:f5:b1:2d:69:f3:
81:7c:d3:dd:1a:75:df:e3:8e:04:a3:89:23:91:cc:
9a:1e:9c:16:19:8e:e7:9f:a9:8b:e8:dd:2f:55:f9:
d8:a8:81:8d:1c:e3:08:d0:7f:9f:2a:56:d8:57:a5:
91:b4:b8:79:3a:c7:01:c3:30:86:58:5a:22:19:5f:
2b:d6:86:c4:cb:9e:fd:07:98:91:f7:e0:aa:d0:83:
d9:98:a8:bd:51:64:d9:d2:20:6e:9f:ea:52:cf:57:
4d:73:e3:e1:d3:26:e5:4d:59:67:4b:5b:42:2d:02:
c2:10:6c:6a:88:6b:d0:a9:ec:5c:f5:4b:f9:aa:9f:
f2:d2:f4:46:90:1e:92:44:5b:3f:55:f5:42:d7:66:
ca:37:c1:a4:90:0e:4f:5e:33:3e:89:33:38:1a:d8:
cc:e9:82:9d:d7:1c:04:55:8a:77:42:0e:fe:9f:83:
39:6b:ba:fb:dc:43:96:78:27:d5:3f:a1:71:5f:02:
59:7e:e2:cc:aa:27:31:87:40:39:fe:fb:f7:31:04:
9d:25:34:74:b5:5a:4b:10:89:e3:57:06:ed:c7:24:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:77:6D:40:A1:1B:AB:4E:EF:4D:EB:6B:6C:44:CB:43:5E:BD:DB
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/qCl3bUChG6tO703ra2xEy0Nevds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.229.0/24
Signature Algorithm: sha256WithRSAEncryption
21:3d:9d:8e:f7:ab:1a:2c:81:d8:1d:39:a5:fb:90:cf:72:a4:
65:95:5f:34:3c:a4:2a:60:f0:24:0b:c9:6f:4e:68:92:d0:c6:
93:0d:46:ae:5f:70:c9:fa:ce:ef:79:b6:92:f1:38:1c:9f:66:
f5:5a:27:3a:0a:c5:44:9b:f3:ec:f0:ff:a4:a7:dc:88:a4:7f:
65:2c:a5:ca:f9:01:23:c9:0e:7a:3d:c5:93:5e:b7:0b:e6:30:
07:58:fa:96:c2:df:cc:13:9e:be:59:aa:3f:9d:d9:f8:d6:84:
d1:7d:19:f3:81:03:06:2d:cf:42:c4:5e:34:4c:4f:0c:ed:a4:
32:a7:fb:3b:36:32:98:76:56:b8:99:40:ab:59:2c:f3:16:ea:
67:af:4f:b0:99:b7:ee:c8:75:ff:d1:08:42:41:de:e4:fa:6b:
5d:f8:64:09:c4:ed:39:8c:fb:b6:2c:83:1a:f9:5f:2c:e4:0b:
ad:0a:72:7b:ea:a5:fc:ad:d8:0f:91:b0:a4:b5:8c:d9:ec:39:
eb:b2:e9:3b:95:c9:b8:ff:00:91:f5:04:d5:72:cf:69:e6:a5:
1f:a4:bb:eb:b3:c3:13:6f:b4:7d:72:e4:7f:82:87:30:c0:f0:
17:e9:0c:ee:1e:6a:85:29:e0:68:99:65:19:2d:24:cd:43:83:
d6:5b:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:02:30 2024 by rpki-client on console-ams.rpki-client.org