Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pIbBqbiQDTBynabOdmuhuSOUeVM.roa
File: pIbBqbiQDTBynabOdmuhuSOUeVM.roa (raw, json)
Hash identifier: kwIH3zbm4+1/kn1A1NazKNUJ325KMrjiy4Jbty/G6b8=
Subject key identifier: A4:86:C1:A9:B8:90:0D:30:72:9D:A6:CE:76:6B:A1:B9:23:94:79:53
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019300CCFB396CABEAA05744EF35DEF34AE2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pIbBqbiQDTBynabOdmuhuSOUeVM.roa
Signing time: Wed 06 Nov 2024 09:27:33 +0000
ROA not before: Wed 06 Nov 2024 09:27:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59598
IP address blocks: 31.25.88.0/23 maxlen: 24
185.215.247.0/24 maxlen: 24
185.217.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:cc:fb:39:6c:ab:ea:a0:57:44:ef:35:de:f3:4a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 6 09:27:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a486c1a9b8900d30729da6ce766ba1b923947953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:73:ed:45:96:27:2f:b7:f6:01:46:1f:47:
de:ed:9c:1f:18:48:85:4b:36:23:97:40:46:f2:10:
da:3d:26:8c:bf:27:28:41:d7:62:24:59:f3:73:ab:
e3:34:70:af:f1:3b:1d:a8:21:a8:ce:27:ea:05:87:
34:cf:8a:6f:e5:24:9b:40:0e:2c:ba:a4:c9:c1:aa:
a0:1f:a5:3c:a7:d0:06:b2:55:31:cd:8d:01:52:7d:
96:28:33:73:4d:93:ee:1d:06:40:42:37:13:10:12:
da:3b:fd:88:5f:1f:d7:4b:60:b1:71:56:3d:e9:3a:
a4:7e:49:31:b7:96:b3:96:1a:8a:14:8d:a8:c0:13:
92:48:a6:df:e0:c9:ae:2c:2e:12:d6:d9:fe:a7:dd:
70:54:53:61:11:56:20:5e:04:0d:e1:2d:56:de:5c:
1a:12:ff:d4:ee:e5:e7:7b:8e:e9:21:1d:d6:f2:da:
e6:e7:3e:81:a7:47:c7:17:40:77:61:5a:42:b8:e2:
94:0a:b3:a1:28:b2:98:da:e0:02:12:42:15:45:bf:
eb:5d:40:a3:07:8b:dc:05:92:21:ed:39:59:64:8b:
5d:cd:17:d7:a5:70:6b:ab:d2:cf:ac:53:31:bb:a7:
cc:22:e9:e3:bf:e5:98:d5:81:4e:5a:e2:e0:c0:9d:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:86:C1:A9:B8:90:0D:30:72:9D:A6:CE:76:6B:A1:B9:23:94:79:53
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pIbBqbiQDTBynabOdmuhuSOUeVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/23
185.215.247.0/24
185.217.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:e7:76:0c:d7:f0:aa:b8:5f:39:b2:e7:74:35:35:d5:e6:d8:
83:71:5c:19:cd:17:25:32:ac:69:2a:40:97:5b:46:8a:29:6c:
df:40:7d:3d:a2:fe:02:ca:3e:84:83:cb:2c:ea:f1:0b:d7:34:
dc:af:0b:15:27:9b:b2:7d:d5:c3:9b:c3:c6:f5:75:d1:bf:c8:
1c:e5:5a:74:a3:25:ae:a1:eb:60:5a:f1:b8:2b:41:74:dd:0a:
fa:22:52:36:1d:91:4f:8d:93:4e:d2:cd:08:ed:fb:b7:7f:1b:
f7:58:aa:86:65:80:ee:d1:ed:f8:ca:20:df:a0:5e:70:ef:24:
86:58:dd:50:8e:57:3b:31:f1:04:85:44:5e:dc:97:2d:4c:44:
7a:92:54:6d:30:26:86:6e:b6:8b:85:68:8e:9f:50:37:81:92:
92:8c:f7:b4:17:1f:bb:ee:eb:ac:fd:cf:3e:fc:ff:3a:bd:7a:
70:c7:79:a6:95:03:41:98:36:8d:42:79:af:ed:6d:ab:f2:85:
b0:3e:83:1e:d3:53:89:e3:98:0e:b5:21:93:1c:24:8b:9b:29:
56:30:be:ec:71:5b:4c:a2:64:2f:66:e5:21:97:79:06:bf:28:
9f:b4:3b:88:17:b0:13:6e:fb:34:6a:a4:3d:a5:6d:13:cd:48:
4b:0a:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:28:10 2024 by rpki-client on console-ams.rpki-client.org