Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/S5uh0vV0tbS1xEVtgT6g2Tf-vEY.roa
File: S5uh0vV0tbS1xEVtgT6g2Tf-vEY.roa (raw, json)
Hash identifier: /KYe9RH0QrsS5IKS3UI7elkSgJi7+mjIBzegQZ8nWZw=
Subject key identifier: 4B:9B:A1:D2:F5:74:B5:B4:B5:C4:45:6D:81:3E:A0:D9:37:FE:BC:46
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7956681306FDB653BB5226F4D3CF4C0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/S5uh0vV0tbS1xEVtgT6g2Tf-vEY.roa
Signing time: Tue 02 Jan 2024 00:31:46 +0000
ROA not before: Tue 02 Jan 2024 00:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204156
IP address blocks: 31.14.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:66:81:30:6f:db:65:3b:b5:22:6f:4d:3c:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b9ba1d2f574b5b4b5c4456d813ea0d937febc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2f:f1:2b:0d:b0:09:fd:ab:ed:2c:d2:e2:d5:
9f:cf:e1:ed:ad:53:6f:d9:87:50:6a:16:c8:ef:d8:
7e:55:8f:d2:ee:73:d5:54:4f:70:8b:c3:b9:15:5d:
05:1e:3a:cb:49:a1:01:13:74:59:17:5f:28:86:db:
4c:18:3a:c1:0c:9d:ab:47:13:61:56:10:68:5c:3b:
9f:5c:12:1b:f7:28:9d:85:ac:94:fb:13:c5:97:9b:
2a:54:44:b8:b0:dc:9d:75:ee:50:12:3e:65:5b:40:
17:79:75:8f:36:61:fc:56:70:bb:14:ec:af:85:53:
51:17:3a:de:0f:08:29:fc:46:de:26:ec:f2:f8:25:
01:92:72:00:bc:97:7f:51:81:c0:cc:2d:86:8f:92:
7c:21:71:96:57:f6:8d:4a:a8:1a:77:8f:c1:45:07:
26:0d:72:bf:a2:e2:8c:7e:f6:38:49:08:69:f9:f6:
be:99:04:61:b9:6f:06:9f:b0:b0:75:cb:2b:f2:82:
d3:eb:c5:c1:26:1c:ad:f2:a4:87:c1:7d:93:ea:6e:
50:c2:bc:b0:a4:07:42:87:0e:33:d1:87:8d:d4:8e:
ab:10:c8:10:ce:a1:d6:2b:3a:d1:c0:5e:cb:04:5c:
3b:81:44:47:ea:96:c6:8b:39:cd:0a:a8:64:3d:98:
fc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:A1:D2:F5:74:B5:B4:B5:C4:45:6D:81:3E:A0:D9:37:FE:BC:46
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/S5uh0vV0tbS1xEVtgT6g2Tf-vEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d8:46:dc:4d:4e:7d:e7:fd:08:42:11:fd:3e:de:0b:b2:05:
52:b3:ab:9f:62:e6:b2:01:50:8f:f6:52:f6:9b:c5:f9:fd:ce:
87:a4:d9:e1:08:e3:1b:4a:ee:de:58:8e:14:15:68:70:8a:c8:
6c:22:99:77:96:90:c3:78:16:aa:cd:ae:2f:32:7b:3f:cc:d8:
68:b9:6a:20:81:6d:0f:34:12:87:cc:45:39:b5:36:b8:01:aa:
d6:b9:07:a7:01:30:2f:66:c7:70:1e:c7:68:d6:8a:93:1b:81:
36:b8:4b:10:4e:4b:89:e3:d4:ed:76:9f:8c:0c:55:62:a1:5e:
df:78:d5:95:54:40:1d:ad:8d:0e:c7:75:e8:7e:be:36:4c:6a:
53:7d:7e:6d:98:07:42:97:27:54:cc:d3:aa:fd:d3:b4:b6:ad:
29:4f:2b:9f:20:ed:27:a2:e5:00:d1:4d:d5:3e:2c:f9:ec:1c:
22:92:88:1b:ef:f2:09:4f:53:9c:25:c1:26:37:5f:d0:0c:65:
fc:8b:cb:39:2b:2d:b8:e8:3e:a8:03:1e:19:d3:4d:0a:9b:92:
86:9e:cf:c4:f0:6d:9a:34:3c:5e:30:79:e4:90:07:4b:60:e9:
96:54:62:ec:b7:98:11:1e:67:96:23:0e:0d:40:90:4c:27:7c:
d0:df:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:56:37 2024 by rpki-client on console-ams.rpki-client.org