Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAx0KOgHltdlt2sZ5r8Egebn-yg.roa
File: sAx0KOgHltdlt2sZ5r8Egebn-yg.roa (raw, json)
Hash identifier: k83ejMu2fDNc+A8RmoW86iLzp6zEPfTyTHezz6zXG+E=
Subject key identifier: B0:0C:74:28:E8:07:96:D7:65:B7:6B:19:E6:BF:04:81:E6:E7:FB:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DAAB9D6B8F7B3E6AFF2FC19940073776D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAx0KOgHltdlt2sZ5r8Egebn-yg.roa
Signing time: Thu 15 Feb 2024 03:05:22 +0000
ROA not before: Thu 15 Feb 2024 03:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215539
IP address blocks: 31.13.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:aa:b9:d6:b8:f7:b3:e6:af:f2:fc:19:94:00:73:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 15 03:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b00c7428e80796d765b76b19e6bf0481e6e7fb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:2b:77:a6:f3:dd:97:b5:35:5a:5d:ce:1c:
e0:9f:06:89:f7:63:46:0c:7e:d9:a9:97:57:b5:b1:
97:98:c6:da:45:29:3b:a2:39:8e:29:63:8b:bb:59:
6c:db:7a:b8:b6:3d:24:ef:ee:30:4e:c7:b8:91:b8:
c6:5e:53:a3:11:56:fb:c4:11:18:0e:7c:ed:a0:25:
96:d2:f3:e5:3f:d6:3d:e3:bf:41:e4:10:78:8c:ba:
c1:b5:d1:bb:53:f5:d1:c6:f3:2d:e7:ec:b9:56:d9:
88:ea:42:2a:db:4a:d2:6e:7a:92:15:67:28:89:71:
26:e1:f6:ca:29:25:e3:d7:36:99:7a:90:22:82:7c:
ba:a6:59:1d:ae:bf:26:d1:d7:da:c3:5c:9e:11:5c:
6c:d6:e4:5e:52:f9:f4:f7:2e:51:bc:21:f9:d3:c8:
89:c7:57:88:1e:e5:94:44:ba:76:9f:95:3b:a0:59:
2c:b4:36:b2:df:51:a3:7e:6b:51:23:5c:67:b8:f5:
f4:36:c6:70:ec:f1:71:13:fa:cf:4b:71:b2:91:dd:
4c:7a:49:4a:2e:0d:7c:2d:b8:94:74:54:f8:77:63:
1d:44:6c:f7:d9:c2:ca:d5:ec:88:5d:be:8c:3c:f5:
1d:6f:30:3c:de:8b:1a:1b:7f:dd:db:2e:77:5b:6b:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:74:28:E8:07:96:D7:65:B7:6B:19:E6:BF:04:81:E6:E7:FB:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sAx0KOgHltdlt2sZ5r8Egebn-yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3c:33:06:b6:44:92:b1:2e:92:a4:6a:f2:30:65:52:9c:66:
6c:30:e5:98:4e:2f:04:80:4f:ec:8f:d2:c3:ae:f6:fc:38:b3:
eb:bf:d3:1d:18:df:d9:dc:ab:81:f6:47:0d:3a:e7:1f:b4:a6:
b7:15:b0:79:9a:83:f8:0c:84:fb:cf:53:64:82:df:51:1c:04:
d1:10:a2:2a:cf:1e:38:63:3d:f5:6b:3b:fd:1a:ed:60:59:c2:
70:d1:2d:7f:91:ad:40:1c:a5:63:44:7d:7b:c5:4a:a4:63:f5:
29:ac:b7:68:ea:e6:7b:36:8d:c0:f8:a5:5e:49:ee:b3:85:b3:
cf:0b:3e:ce:62:05:18:b7:9a:24:9d:64:61:ad:c3:f3:12:66:
a9:45:ca:1e:90:1d:0d:ed:7d:2d:e0:80:c9:24:92:4a:13:bb:
eb:9d:ec:43:0f:27:b3:92:f7:da:b8:c4:47:e5:e0:97:21:76:
db:a2:c6:9a:55:e9:80:ef:d2:7e:bc:31:bd:fb:92:62:38:90:
ea:01:14:5b:a1:61:6a:bc:59:f5:ba:ee:66:15:74:9d:c9:0f:
b1:5f:55:d3:cc:6d:5c:40:be:20:fe:af:de:cd:83:e5:39:1d:
6c:a4:d5:f1:4a:ff:b2:c3:96:24:c9:e4:e6:c8:19:df:d8:5d:
4c:ba:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:46 2024 by rpki-client on console-ams.rpki-client.org