Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzoJhcgt3f8je0uLzMotJmTp0Qk.roa
File: vzoJhcgt3f8je0uLzMotJmTp0Qk.roa (raw, json)
Hash identifier: IrsNKdFwUFjuWoy2RwH8y7pyQHPQgGJhsYMKKdTyHTc=
Subject key identifier: BF:3A:09:85:C8:2D:DD:FF:23:7B:4B:8B:CC:CA:2D:26:64:E9:D1:09
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCDF54969134B48FD1097DA11ADD0A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzoJhcgt3f8je0uLzMotJmTp0Qk.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42794
IP address blocks: 31.13.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:df:54:96:91:34:b4:8f:d1:09:7d:a1:1a:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf3a0985c82dddff237b4b8bccca2d2664e9d109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:a7:29:09:77:3a:ec:62:3c:f8:74:e8:c7:
5e:e7:28:a2:7b:ae:66:b2:f4:1b:1e:72:62:2f:5b:
7e:5a:54:46:73:fd:df:10:ec:72:41:83:d6:eb:51:
2f:2d:1e:d3:af:fe:3c:1d:0c:b1:3b:df:58:df:a4:
89:55:d7:34:95:8b:9d:0a:91:54:ff:ca:ae:26:25:
db:d9:64:ed:79:70:1c:81:2d:94:66:12:15:e1:27:
7e:14:b5:d6:6c:05:ea:63:cb:74:76:8e:c5:85:6b:
17:7b:26:5c:0a:da:57:d8:82:f3:23:8c:92:98:13:
a2:2e:f4:39:af:2f:12:02:3c:11:5e:64:07:b4:cf:
1b:bd:8f:ae:06:05:45:65:04:ca:e8:3e:fa:ca:f7:
17:d6:8d:ef:95:5f:4b:28:13:2a:6e:63:b3:2d:60:
15:f2:5b:87:ac:48:b6:3c:ba:f0:65:81:b8:5e:57:
44:c7:af:0d:e4:50:ea:cf:86:50:b8:28:94:56:1c:
a3:0e:2a:2c:98:d6:b7:c2:f2:54:ae:bb:e3:85:0d:
ad:18:cd:9a:33:11:00:a2:b6:54:50:e3:85:6d:07:
8f:06:93:d1:ce:89:a7:f8:98:3b:19:ad:96:63:26:
50:d2:c9:0a:de:d7:36:6b:53:d5:46:0c:1f:a7:05:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3A:09:85:C8:2D:DD:FF:23:7B:4B:8B:CC:CA:2D:26:64:E9:D1:09
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vzoJhcgt3f8je0uLzMotJmTp0Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.198.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d4:af:41:45:6c:85:51:62:08:1e:72:e0:8b:f0:ad:e0:c6:
7b:7e:5e:c4:ef:67:3e:e5:a6:77:2d:90:fe:01:62:41:0d:c8:
fb:0d:04:6f:60:b9:6f:6a:51:ea:33:46:4d:69:77:e6:8c:8e:
aa:d7:31:65:fc:8b:03:b3:af:93:cf:39:bd:35:cb:ce:3f:cf:
b5:88:57:c2:7f:c9:31:18:45:c2:0a:f9:da:bf:18:10:c6:df:
12:0e:91:b1:6a:90:8c:59:7c:f8:ff:57:87:f7:01:20:ee:78:
90:bc:89:e6:30:df:04:c9:83:66:2c:e6:80:bc:f3:96:9f:49:
a4:00:b0:ad:fa:a9:10:38:33:37:d2:e5:c1:22:c3:a9:cf:10:
9c:b3:ef:ef:95:03:7e:cb:67:fc:fd:ee:43:41:8a:90:71:05:
bb:65:30:a4:8e:ff:b5:75:26:2a:cc:7a:cb:bc:0a:f7:6b:da:
c7:c7:3c:df:db:8b:77:08:6f:bd:5d:b6:d9:56:a3:ad:0b:a8:
03:ec:01:3e:b8:63:96:cb:d9:b0:3a:c0:d6:a3:fe:ea:74:0c:
15:ed:8c:a0:1c:f5:55:13:e8:2f:87:05:96:90:dc:57:59:c4:
6f:51:ef:ee:2d:87:b7:28:71:85:40:47:70:55:1c:38:98:26:
94:fc:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:44:41 2024 by rpki-client on console-ams.rpki-client.org