Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38362e302f32342d3234203d3e203432343237.roa
File: 3138352e35382e38362e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier: qindWiIsCfDu7eQ8hv5SxqA2v8bYu7zIWQVVCYIaVTQ=
Subject key identifier: D5:E9:E2:8D:FD:27:FF:46:2F:62:CD:D0:19:74:79:50:9D:1C:94:CA
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 7BEB1EC0E57E1DAB75962B79F3FE1E27E85D9F3C
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38362e302f32342d3234203d3e203432343237.roa
Signing time: Fri 01 Sep 2023 11:14:33 +0000
ROA not before: Fri 01 Sep 2023 11:09:33 +0000
ROA not after: Fri 30 Aug 2024 11:14:33 +0000
asID: 42427
IP address blocks: 185.58.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:eb:1e:c0:e5:7e:1d:ab:75:96:2b:79:f3:fe:1e:27:e8:5d:9f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Sep 1 11:09:33 2023 GMT
Not After : Aug 30 11:14:33 2024 GMT
Subject: CN=D5E9E28DFD27FF462F62CDD0197479509D1C94CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:17:a4:aa:1f:aa:0d:03:c7:af:0c:fd:d8:
6f:51:8e:33:90:53:19:3c:e4:59:13:aa:54:da:9f:
88:6e:9c:75:c3:e0:75:f9:0d:8c:a8:0a:13:a2:d4:
27:58:5c:50:0f:51:c3:f9:bf:18:6e:5c:f2:78:a0:
24:88:a3:03:8a:aa:9f:8d:5a:3c:8c:72:83:93:ba:
a3:f5:9e:86:4d:fd:4e:e1:31:73:2e:c6:bd:be:0c:
38:8a:4a:cd:b4:2b:d4:92:1c:55:a7:79:5c:33:ca:
ee:e3:d6:11:c8:11:b3:94:5e:81:40:54:2f:01:b6:
8b:63:29:d9:e8:ad:6b:2c:94:b7:b6:68:d9:f6:0a:
85:88:e0:00:9b:c2:0a:7c:cc:a2:a4:0b:14:10:be:
97:5f:0f:a4:d8:61:f0:8b:d9:4e:5d:b7:c4:47:5f:
88:f6:ec:68:23:7d:32:de:8e:3b:94:0e:d9:d5:5c:
08:2a:7d:c2:bf:88:10:e9:b8:e4:a3:5e:91:b4:53:
c1:98:54:be:60:b7:5a:a4:4c:3f:e3:44:73:ad:7d:
c4:6d:e3:47:a2:b3:31:f4:e6:53:4b:2c:8c:47:98:
bd:d6:c1:b3:5e:92:dd:49:20:5d:49:6c:8e:38:23:
f7:90:54:b4:f3:df:7b:81:03:17:86:d1:82:d3:e0:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:E2:8D:FD:27:FF:46:2F:62:CD:D0:19:74:79:50:9D:1C:94:CA
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/3138352e35382e38362e302f32342d3234203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.86.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:85:76:2b:f7:78:c6:c2:5e:82:0c:d1:4d:3a:d7:22:46:c9:
a0:9a:df:47:e0:2f:ab:5f:56:59:31:78:90:da:40:2e:c7:d7:
bf:ba:62:2d:25:ac:9e:55:cb:fe:80:25:a8:cd:94:74:f2:31:
3c:fc:41:ea:70:bc:50:a9:07:f3:3a:2c:5e:32:72:16:c7:29:
b6:c3:cb:67:f3:16:0a:8f:b3:6d:70:47:f0:85:4e:50:2d:fe:
0d:19:af:d2:e4:3b:55:bb:9d:95:a6:f1:05:20:4d:2b:6a:2d:
8f:82:71:9f:da:0c:23:f3:68:b7:89:92:6e:1c:c6:b2:89:40:
c0:8d:72:1a:5e:41:d1:e3:72:6c:5c:3f:1a:88:d0:e8:5c:34:
8b:c2:e9:b1:aa:a6:81:27:c0:95:97:53:4f:49:3d:7d:7f:b0:
ac:09:8c:09:6a:61:c0:c4:42:bc:88:77:2e:e2:87:9c:83:5a:
5a:60:f5:b6:35:fe:ac:ed:b3:a8:7e:31:a5:d7:81:99:2d:21:
64:7b:6f:77:9d:32:5d:cb:0f:39:a1:16:a6:8b:74:51:ba:a6:
9e:d5:3b:0c:2d:43:bf:46:f2:b8:fe:ee:1a:c0:89:85:63:3b:
4b:5d:26:7e:dd:cf:7d:8e:72:a3:9a:38:17:1d:57:a7:03:50:
d7:d6:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 04:53:23 2024 by rpki-client on console-fra.rpki-client.org