Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C77eo8rVlRUrU9Ew0gSqXSaMBHs.roa
File: C77eo8rVlRUrU9Ew0gSqXSaMBHs.roa (raw, json)
Hash identifier: R9UEiuhom2Pe7h9B21NEIfLiuGCpG9kvRd+hVCaCvH4=
Subject key identifier: 0B:BE:DE:A3:CA:D5:95:15:2B:53:D1:30:D2:04:AA:5D:26:8C:04:7B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B930FD6B22429AADF1683EE0D75DD3
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C77eo8rVlRUrU9Ew0gSqXSaMBHs.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33830
IP address blocks: 62.244.244.0/24 maxlen: 24
31.145.171.0/24 maxlen: 24
31.145.72.0/24 maxlen: 24
213.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:30:fd:6b:22:42:9a:ad:f1:68:3e:e0:d7:5d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bbedea3cad595152b53d130d204aa5d268c047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:85:de:1f:57:8d:26:79:ba:e1:7e:26:7b:
1d:59:a8:eb:40:4a:c4:93:59:de:04:1d:f1:d0:3c:
bf:f0:78:af:5d:82:dc:04:b5:34:e1:65:21:10:10:
86:f0:d6:ea:fd:26:c7:b3:5d:82:50:be:45:62:42:
6f:d9:6c:55:ff:61:5e:df:6b:98:af:df:23:34:09:
5f:c7:47:14:44:ae:05:a5:6a:29:f9:47:51:a1:20:
3a:37:e9:ea:72:37:d2:f1:22:54:c5:53:bc:54:eb:
55:2d:f9:75:6c:cb:d4:b2:f3:6d:17:89:8d:42:13:
a4:99:22:1f:6c:0c:c1:7d:9c:76:5f:1a:a2:b5:ec:
bd:4e:9b:7c:5f:1a:77:d9:e7:ea:55:78:a2:07:80:
7b:d7:c4:2f:55:90:d5:29:28:e2:3f:69:cb:51:db:
e1:ae:de:b7:f3:44:12:58:b0:dc:7d:77:45:79:80:
4b:d9:ba:9d:90:2e:dd:ea:1b:fd:5a:a6:f3:d4:d7:
4c:c8:42:1d:5c:0f:60:ba:72:f8:9f:a1:6e:d4:aa:
b5:5f:cc:73:a3:6b:ea:ea:ff:b4:e3:69:1b:17:77:
35:c1:4b:e0:a3:5b:20:9e:7e:50:f4:26:41:cb:e2:
63:e3:71:70:83:ba:52:f2:e5:b3:a4:e4:30:e2:ea:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BE:DE:A3:CA:D5:95:15:2B:53:D1:30:D2:04:AA:5D:26:8C:04:7B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C77eo8rVlRUrU9Ew0gSqXSaMBHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.72.0/24
31.145.171.0/24
62.244.244.0/24
213.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:98:25:02:36:c8:2b:94:b1:69:4e:30:8e:fb:f6:17:77:84:
a6:b4:db:7c:2b:28:84:0f:c1:03:e9:29:68:d4:60:51:31:48:
42:e4:37:e7:f9:45:c6:36:ce:a2:1e:14:32:1b:70:7f:d6:c3:
1b:cd:a3:77:33:fa:a6:9a:5e:ce:c8:b1:7c:64:f9:7f:50:ed:
bc:2e:1b:81:2c:30:44:c6:85:b9:ad:e6:27:f3:66:20:2d:5a:
80:60:c2:11:e9:d5:04:15:7a:29:f5:cd:7f:e4:16:8c:80:f1:
28:f2:02:3d:e4:0d:32:e8:3e:b3:80:9a:d5:70:51:13:ef:d9:
ed:a5:c6:8b:c2:33:3e:15:31:59:da:aa:79:84:d2:b3:32:e8:
68:a4:d9:25:7b:d3:5c:2a:0a:82:6f:2b:13:9b:e1:bf:dd:24:
57:f6:1d:40:32:6f:e3:71:bb:f3:1d:b1:62:48:f3:40:76:4e:
58:77:56:8d:7e:b1:f7:a6:d0:7e:9f:71:97:c8:80:d7:f9:6c:
fb:c2:b5:e3:50:37:09:09:51:10:c9:ff:52:a7:84:f8:f7:e4:
c5:42:0a:80:68:a8:eb:6f:b1:5e:b6:5e:f1:01:76:4e:b9:e9:
d1:81:2e:bd:cc:d6:b1:49:25:ca:12:68:09:53:83:9c:96:aa:
99:fa:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:49:24 2024 by rpki-client on console-ams.rpki-client.org