Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/X3-6V0LawDB53I1EZS79NYW6bOY.roa
File: X3-6V0LawDB53I1EZS79NYW6bOY.roa (raw, json)
Hash identifier: 4ZngwnaMRMnL4sTKFE7pSU62kkMgFNgDLYQFQl6+Scw=
Subject key identifier: 5F:7F:BA:57:42:DA:C0:30:79:DC:8D:44:65:2E:FD:35:85:BA:6C:E6
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 018CC9B883FEED681A956308A87C66B9D041
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/X3-6V0LawDB53I1EZS79NYW6bOY.roa
Signing time: Tue 02 Jan 2024 10:29:22 +0000
ROA not before: Tue 02 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200467
IP address blocks: 31.135.179.0/24 maxlen: 24
31.135.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:83:fe:ed:68:1a:95:63:08:a8:7c:66:b9:d0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 2 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f7fba5742dac03079dc8d44652efd3585ba6ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:d9:87:f8:1d:89:1c:86:19:f2:ca:1c:cb:
76:c6:a3:75:cd:44:5d:c5:37:0e:b5:02:36:88:47:
44:52:8f:ea:c2:9f:96:ef:1c:04:1a:4b:b9:89:6a:
cd:6f:e7:fa:ad:1b:c1:07:f2:ca:64:22:e9:1b:56:
62:d6:c8:bd:4e:0c:f1:74:8d:f4:a1:e2:2f:03:bf:
0f:e1:22:62:29:23:da:d6:21:5f:96:11:dd:4a:80:
b6:fa:ec:e5:2f:a5:f7:39:31:be:35:de:bb:a4:86:
b1:dd:be:e5:c7:69:d0:c7:80:b5:d1:4c:8e:6e:67:
83:e1:a6:68:1c:5f:40:63:6b:3a:db:3e:f1:17:24:
b1:92:ec:65:7b:e0:0c:77:ec:af:04:e1:db:5e:40:
3d:b1:14:f2:b2:dd:f8:a3:b7:7b:86:54:6c:0a:7d:
c5:d1:b9:c2:28:e5:e9:3f:11:01:ea:82:9a:d7:c4:
9b:fe:bc:3c:c2:e0:a6:f8:6e:c1:a8:b8:5a:8b:35:
4b:9a:1b:38:6c:2f:75:92:17:bc:e7:fd:ea:11:7d:
77:9b:1c:fb:b5:ab:4a:6e:87:00:dd:64:3c:e2:4d:
e5:c9:52:7b:e4:ca:5e:ea:e6:c0:75:7e:67:35:95:
39:d8:8b:52:de:9c:5a:4e:74:81:e3:9f:dc:bb:87:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:BA:57:42:DA:C0:30:79:DC:8D:44:65:2E:FD:35:85:BA:6C:E6
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/X3-6V0LawDB53I1EZS79NYW6bOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.177.0/24
31.135.179.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f5:5b:10:a6:d7:c7:d9:1f:71:95:b9:24:cb:0a:b6:f3:74:
f3:3d:71:0e:ec:2d:42:7c:39:60:de:f4:b3:0f:85:0f:68:87:
aa:9a:0b:a8:48:60:14:35:90:ba:cd:8b:32:96:96:c6:9b:26:
a8:83:85:5c:b5:a2:b2:5d:5c:38:8e:e5:94:57:c3:6d:29:b9:
b8:53:72:c1:62:e4:ed:0e:2c:cd:25:17:02:ca:6e:36:f1:fc:
7f:b2:28:14:54:d0:38:36:22:67:a6:99:bd:d1:07:27:24:99:
33:a7:3b:35:4c:ba:10:0f:f9:e6:24:f8:a5:a7:3b:5e:8a:ab:
d9:89:8e:c7:02:fc:ab:39:82:6f:b8:bf:d4:0c:6a:8c:a2:dc:
79:63:17:b3:33:27:d1:c8:ce:a7:91:05:c3:ed:ed:54:94:b5:
b4:15:23:8f:d3:41:c2:94:33:b4:fb:01:34:e4:8d:e5:95:a6:
b5:ae:93:3b:21:3c:e8:7e:88:c4:a6:02:16:9b:e7:0a:35:f4:
16:8f:61:e4:aa:87:3c:1d:13:4b:c0:56:f5:05:43:9f:4a:69:
b6:7f:77:73:0e:e1:ac:c3:c7:2d:4b:e4:b1:d0:c3:cb:0c:86:
ff:1d:4f:3b:25:f6:99:43:db:1f:e1:31:2d:46:61:47:bf:89:
ec:ea:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:21:51 2024 by rpki-client on console-ams.rpki-client.org