Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/diKq0232VdCU4uQl6CwTCKCa3Bs.roa
File: diKq0232VdCU4uQl6CwTCKCa3Bs.roa (raw, json)
Hash identifier: iHx+uTiM2GrFMXIx3gZufCe8RO3PHpHAFyRd/NnWWxE=
Subject key identifier: 76:22:AA:D3:6D:F6:55:D0:94:E2:E4:25:E8:2C:13:08:A0:9A:DC:1B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9926FC4BDF79D4B21D67FEE57A34
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/diKq0232VdCU4uQl6CwTCKCa3Bs.roa
Signing time: Mon 01 Jan 2024 18:31:32 +0000
ROA not before: Mon 01 Jan 2024 18:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208807
IP address blocks: 85.31.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:99:26:fc:4b:df:79:d4:b2:1d:67:fe:e5:7a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7622aad36df655d094e2e425e82c1308a09adc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:6c:af:c1:86:68:85:8a:6a:67:4a:c4:15:
d1:64:81:d8:dd:20:30:f5:60:12:7f:ea:3c:74:ae:
50:5d:94:7f:61:28:cf:f8:2c:e3:42:68:11:87:a8:
f5:68:ca:53:b6:6a:38:b8:fb:56:bf:9d:97:5b:53:
d3:a8:93:be:89:f5:08:0f:89:80:42:62:da:5b:13:
84:2c:a6:84:67:a0:e9:dd:0a:d9:b2:a0:b5:c9:ac:
40:02:1b:94:fe:9f:6f:bd:3e:4e:f1:a2:37:6f:c2:
5c:6b:2a:80:da:dc:14:f8:3c:5d:d6:f5:ce:d8:c2:
2e:6c:fa:98:b3:c2:38:66:a4:eb:3e:06:78:90:6b:
ee:d1:5f:ce:d3:e3:4c:40:ec:f2:2a:e7:a2:87:d1:
63:99:39:d5:0b:c9:75:ab:c6:aa:cc:59:0a:a6:de:
4b:23:10:2c:a9:b9:97:4b:4e:d1:c1:4e:40:39:69:
63:2d:c5:77:3f:28:29:98:c0:2d:26:51:f7:73:a3:
8c:58:10:e4:82:30:21:2f:dc:19:69:6c:0c:1f:d9:
e9:48:1c:b5:84:af:a2:5d:a6:57:40:55:12:0a:bc:
34:e6:9d:ee:b3:79:f6:fe:9c:03:31:7b:a9:b8:5a:
29:d6:05:88:ed:a5:76:08:f6:67:b8:80:86:a1:9e:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:22:AA:D3:6D:F6:55:D0:94:E2:E4:25:E8:2C:13:08:A0:9A:DC:1B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/diKq0232VdCU4uQl6CwTCKCa3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.246.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c3:2b:94:2a:6b:59:0f:44:98:9b:b0:da:45:1c:2a:6e:61:
85:8e:11:a2:fe:f9:3f:34:22:18:29:58:3e:0d:8d:99:db:5a:
ae:b9:2d:5d:77:24:0d:9c:5d:80:b7:a2:a0:ef:bc:99:e1:09:
26:58:34:6f:e5:e3:77:e5:97:03:88:66:1e:0c:56:dd:a5:79:
52:4d:cb:e8:99:f3:21:d8:1c:4b:cd:a7:cf:52:47:43:0c:24:
de:a5:fc:74:48:72:0f:97:57:0f:c3:23:a9:a3:b2:fa:64:6f:
64:ff:24:34:ce:16:19:a1:54:dd:cf:00:d4:8b:96:a0:3e:a6:
bd:01:82:58:b4:94:15:3c:56:d6:22:cc:db:90:80:16:a7:e2:
03:8b:81:46:5a:24:12:07:85:1a:37:ee:52:50:8b:d2:85:05:
84:d8:70:85:a9:67:40:a2:f3:a1:c4:e3:d0:6f:a6:48:96:4a:
0d:06:9b:f9:63:5d:fb:2b:43:b1:d5:50:54:db:d8:88:3a:21:
70:ca:b6:f7:f8:6f:1e:2b:be:4d:e4:58:fa:e8:21:65:5f:a0:
67:b6:f7:3f:3f:10:0a:82:15:a2:db:ae:5b:75:24:93:87:c7:
9f:ec:40:06:48:58:07:86:36:3e:f8:bb:7b:06:57:6a:d6:e0:
57:1c:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org