Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5undUTxyfvDMIvlHSHSg5QIwfLU.roa
File: 5undUTxyfvDMIvlHSHSg5QIwfLU.roa (raw, json)
Hash identifier: 9/xGuYL1Qrok9bwgC8XKfwfW36Mslsf8QlEfrCewqmQ=
Subject key identifier: E6:E9:DD:51:3C:72:7E:F0:CC:22:F9:47:48:74:A0:E5:02:30:7C:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE9445B4885021B558BF3D167B356
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5undUTxyfvDMIvlHSHSg5QIwfLU.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48584
IP address blocks: 31.13.224.0/24 maxlen: 24
94.156.166.0/23 maxlen: 23
93.123.109.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e9:44:5b:48:85:02:1b:55:8b:f3:d1:67:b3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e9dd513c727ef0cc22f9474874a0e502307cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:7e:99:18:3f:26:dc:69:8b:56:e0:08:8f:
24:7c:92:d8:ca:0f:ac:bd:71:ab:a4:21:f2:8c:e2:
29:60:5d:4d:2f:32:e9:c6:e5:50:1c:2a:48:9d:ae:
1f:7b:f1:d7:9f:09:d5:5f:db:16:35:af:b7:2b:db:
f7:d1:9c:6c:7b:9b:5e:ff:0f:d8:70:d9:12:8d:b4:
0a:47:92:d3:d4:db:6a:dd:b0:2e:57:98:ff:6f:a8:
58:eb:20:65:2a:c2:1e:11:61:98:13:ed:cd:17:31:
7c:61:db:30:32:61:2e:b1:32:92:3e:e6:b3:1f:ea:
fb:1a:2c:2b:5a:e8:c0:0a:07:44:01:3e:fb:d0:2e:
74:eb:77:57:28:41:fa:14:29:38:1e:f6:76:4c:a2:
16:b1:8c:ae:b4:32:56:9c:24:1f:18:5f:06:c6:5d:
a4:08:4d:b4:5e:6c:4f:f9:5f:e6:0e:d4:14:fc:7d:
ef:23:10:b3:68:83:e2:76:72:cd:99:a1:41:8b:f6:
f1:77:1f:46:aa:83:8e:58:9f:3f:f0:ab:af:2f:ea:
cd:6f:4e:40:c6:26:1a:0d:1d:84:f9:93:fc:bf:18:
76:a2:81:41:36:cd:63:e2:41:46:9c:3d:ae:a9:7d:
3f:13:77:cd:65:45:44:ca:14:7b:b8:a5:a1:e7:15:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E9:DD:51:3C:72:7E:F0:CC:22:F9:47:48:74:A0:E5:02:30:7C:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5undUTxyfvDMIvlHSHSg5QIwfLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
93.123.109.0/24
94.156.104.0/23
94.156.166.0/23
Signature Algorithm: sha256WithRSAEncryption
66:36:7e:0c:a1:94:76:9c:0d:ce:15:f9:d0:8d:0d:a5:5c:17:
ab:52:18:85:39:c6:ef:16:59:2f:81:ad:90:cf:4f:a6:10:78:
1b:f3:fa:cc:f9:4c:7d:ec:e3:01:97:3b:9e:36:ce:ed:12:8d:
fc:85:2d:6c:5b:d0:1c:19:d0:b0:4f:17:f2:85:fb:f7:a9:c9:
12:2f:91:d3:5d:6b:93:d6:0f:32:36:f5:69:4a:f1:9b:af:dd:
ab:12:4f:5a:c8:59:13:78:47:94:ce:c9:fc:aa:4d:7a:3d:24:
99:87:b0:2f:a5:6e:9a:c1:04:fc:19:9b:62:08:7c:20:89:8d:
fd:95:04:e2:e0:7e:2c:33:14:c6:d7:c3:fe:96:13:bd:09:32:
f9:71:6e:40:0b:77:e1:1e:1b:08:75:c1:8b:41:e7:2d:54:de:
be:60:c8:c5:d3:ec:c4:c7:6f:1c:8a:d0:31:66:67:5b:77:f4:
16:20:29:34:5a:35:de:83:51:73:2a:82:21:6a:50:f6:82:46:
07:1c:5e:fe:76:cb:e4:12:ac:98:46:97:90:1d:7d:48:00:be:
df:b5:e7:d8:d8:60:1c:9f:8d:c0:2c:b6:af:ab:a0:73:4e:f7:
c6:25:53:0b:b7:e0:f0:dc:20:ac:0a:05:70:a2:f0:4d:f9:27:
99:75:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:05 2024 by rpki-client on console-ams.rpki-client.org