Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/cAVyKHVUMFdk98vXgEkbTYLILAo.roa
File: cAVyKHVUMFdk98vXgEkbTYLILAo.roa (raw, json)
Hash identifier: +jnwA/kh4tU2tHi/OatNhoQV/Iyp0xrkvKxwxxHrHyg=
Subject key identifier: 70:05:72:28:75:54:30:57:64:F7:CB:D7:80:49:1B:4D:82:C8:2C:0A
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 018CC2DACB6695A93D379B8AF9F6243EF071
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/cAVyKHVUMFdk98vXgEkbTYLILAo.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52011
IP address blocks: 103.81.142.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.87.0/24 maxlen: 24
2a03:b000:b00::/40 maxlen: 40
2a00:16d8:52::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:cb:66:95:a9:3d:37:9b:8a:f9:f6:24:3e:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=700572287554305764f7cbd780491b4d82c82c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:23:7e:7a:d2:80:f2:9b:65:02:2b:c2:f3:
d4:07:a1:0b:de:65:9a:58:b6:75:ce:f1:c6:6e:20:
b8:6e:9d:33:2a:03:93:a6:c3:4f:48:19:28:42:a5:
95:e7:a0:3f:d7:6a:f5:aa:01:bb:bd:7d:17:c8:d1:
b9:f0:b0:d1:93:05:2c:c7:df:80:3f:dd:ca:b2:42:
0e:28:3e:e8:a4:86:7d:a0:e9:cb:b5:44:6a:b9:81:
1c:db:f9:e6:cf:c9:d0:e4:1a:55:af:eb:13:77:04:
92:cb:04:d9:62:97:03:43:b8:e1:4a:d0:8f:fe:cc:
7d:cf:9c:06:76:9a:1a:1f:b4:44:2e:41:00:99:3f:
52:73:4a:86:21:77:c1:f2:f8:44:29:9a:90:25:5e:
8d:ce:a8:7b:8b:15:60:60:bb:eb:61:0a:b4:88:ae:
4e:3f:1b:e4:ba:7a:2e:4b:16:7b:68:92:b8:f8:79:
55:38:a7:0d:44:23:60:ca:0d:a8:af:90:90:a6:90:
40:16:3d:55:f7:ff:00:af:ec:f1:37:7c:53:bd:12:
a3:e7:65:20:06:5b:1c:37:5e:87:b9:e7:cc:29:90:
63:b4:64:fd:6b:bd:6e:62:09:e6:5e:61:83:ca:a4:
a0:db:53:07:ed:c0:12:49:78:aa:c5:06:14:55:42:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:72:28:75:54:30:57:64:F7:CB:D7:80:49:1B:4D:82:C8:2C:0A
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/cAVyKHVUMFdk98vXgEkbTYLILAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.56.0/23
89.46.84.0/23
89.46.87.0/24
103.81.142.0/24
IPv6:
2a00:16d8:52::/48
2a03:b000:b00::/40
Signature Algorithm: sha256WithRSAEncryption
53:4a:1e:e8:41:4d:d7:bf:b5:aa:9e:a2:b9:a6:4f:4a:06:0e:
d0:b3:0a:aa:cd:f1:60:e9:a7:a0:9c:6c:64:be:aa:1b:b5:09:
58:11:eb:75:ad:33:60:fa:c0:2b:31:fe:9b:80:2b:df:14:bb:
0e:df:9c:0e:d5:17:5d:68:60:d5:63:51:3e:06:43:d1:5b:6b:
df:0d:b2:0d:da:8e:73:7d:72:1d:c3:6d:4b:d4:a0:78:7c:94:
00:e5:21:08:9b:d1:45:a7:26:ec:07:b8:c0:e9:47:70:df:2d:
02:17:ec:bc:d7:29:b3:5b:3a:49:c3:8a:b8:75:e7:d0:5a:93:
11:2e:b4:18:14:87:db:bc:60:d5:8e:b3:23:76:68:9d:a7:39:
61:39:56:87:2c:62:9d:1a:0c:be:78:a3:7a:dd:ba:0c:c2:20:
8b:7a:d6:81:81:35:f9:d5:24:2e:52:a5:3f:03:63:f2:5f:a0:
cb:bf:32:3d:b9:bf:ed:95:c1:f7:94:e6:c3:be:f4:ea:a6:6e:
bc:93:44:d0:7e:ea:84:1a:2f:18:d4:1e:d0:57:5d:2c:2b:35:
89:eb:fd:23:df:a1:b6:69:26:50:b3:a6:7b:80:a4:c7:1b:67:
c1:ae:32:8a:73:92:75:0f:3b:65:54:1a:aa:12:80:c7:ae:9f:
01:bc:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:10:29 2024 by rpki-client on console-fra.rpki-client.org