Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2z1EaeaRDHovyRDHO6rhUuBgbWc.roa
File: 2z1EaeaRDHovyRDHO6rhUuBgbWc.roa (raw, json)
Hash identifier: +B2oGdABM2pTwJ49PZuO/xaxeyl+MNWE/8gWk5AiAg0=
Subject key identifier: DB:3D:44:69:E6:91:0C:7A:2F:C9:10:C7:3B:AA:E1:52:E0:60:6D:67
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018FB88EE1B5729C24A21E3148ADD17D9FCC
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2z1EaeaRDHovyRDHO6rhUuBgbWc.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 31.210.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e1:b5:72:9c:24:a2:1e:31:48:ad:d1:7d:9f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db3d4469e6910c7a2fc910c73baae152e0606d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:dd:8f:f8:b1:b0:2b:9a:69:69:43:f2:49:
41:b9:3a:90:03:7d:9b:44:22:ab:be:af:3f:be:ad:
91:64:80:15:06:0c:8c:6a:15:96:44:c6:8a:47:89:
13:89:7c:57:e0:e2:95:f0:b2:a6:b1:a3:2e:33:a4:
54:55:f4:c7:20:75:90:31:44:87:f7:76:56:cd:6c:
b8:06:a0:ae:21:64:9d:a9:07:aa:2e:49:4d:c3:f6:
b0:46:20:17:b8:fe:38:7d:a4:fe:c2:ab:46:20:73:
9b:57:67:c8:d3:fa:30:0a:c7:ef:8d:5c:4b:8f:ba:
b1:be:32:14:79:1e:5f:1b:78:a2:07:41:71:ab:44:
75:c1:a6:8e:fd:bd:20:92:8f:b4:5a:ce:9f:d2:0e:
a5:bc:6f:25:c2:8c:53:76:b5:a1:2c:50:a4:be:2c:
32:c7:58:a7:49:e9:5e:77:83:79:2f:cd:52:fe:f9:
f0:8a:5a:6f:d2:69:bc:a3:ae:65:61:95:83:eb:e1:
46:13:6d:16:51:b7:03:bf:e4:7f:42:62:d2:3f:5c:
e4:52:98:62:cf:0d:fd:99:52:62:15:aa:a6:6d:fe:
a2:a2:c3:55:0c:45:18:0d:32:38:eb:48:0a:7a:31:
84:11:b7:37:68:72:22:32:91:c2:81:fa:ea:6f:95:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:44:69:E6:91:0C:7A:2F:C9:10:C7:3B:AA:E1:52:E0:60:6D:67
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/2z1EaeaRDHovyRDHO6rhUuBgbWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.22.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:23:9e:fd:6a:f2:fd:b0:74:44:19:60:a8:a3:c1:8b:e1:96:
ad:2c:39:fc:ba:33:75:9e:54:12:8c:31:df:d3:ee:06:c9:65:
4f:6a:4d:a2:ee:1b:4b:41:b8:dd:45:c8:f1:a1:b5:da:77:54:
54:16:d4:02:7c:b7:ad:ad:56:cb:c0:2c:d9:5d:56:e8:85:38:
b1:9e:62:af:71:7a:bf:8c:34:bf:1b:75:17:3d:96:3a:48:28:
2e:e9:35:23:12:0d:ef:7a:84:a3:e7:ea:44:83:9f:51:f3:36:
b4:f1:0d:11:b4:ef:ce:c8:b2:39:c8:56:2f:bc:eb:ce:b0:b0:
07:b3:6f:35:01:5f:bc:10:ea:37:2d:c8:95:1b:13:96:f7:a6:
d8:44:d4:eb:c4:31:52:8f:a5:a2:b6:65:db:8a:a8:01:7a:88:
b5:64:17:d6:8b:01:d3:f0:07:50:1d:f8:d1:98:3c:0c:34:36:
14:10:34:f7:2c:02:a4:9a:d4:31:76:61:7f:9a:9a:64:f2:e4:
ed:68:9f:d1:99:5d:35:41:7d:cb:37:8d:58:9d:1e:b4:9b:d5:
62:cf:e3:a3:e5:2c:3d:ba:33:f2:4d:bb:56:b8:5c:7e:9d:dc:
4e:ce:92:85:4f:43:0a:c9:0b:40:c2:74:07:09:aa:6c:da:a8:
a1:67:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:53:23 2024 by rpki-client on console-ams.rpki-client.org