Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/T4JVsgLWCO3AQ1jzGeT3EcE6cD0.roa
File: T4JVsgLWCO3AQ1jzGeT3EcE6cD0.roa (raw, json)
Hash identifier: XrES5P+1bbGtpbr6CiQRi0L/3cwrQLcgY6jLw3UFgSs=
Subject key identifier: 4F:82:55:B2:02:D6:08:ED:C0:43:58:F3:19:E4:F7:11:C1:3A:70:3D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9337314B63EE538B0FF49EC891CD0
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/T4JVsgLWCO3AQ1jzGeT3EcE6cD0.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47185
IP address blocks: 31.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:33:73:14:b6:3e:e5:38:b0:ff:49:ec:89:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f8255b202d608edc04358f319e4f711c13a703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:c4:67:69:a7:f9:7d:e8:32:f4:33:e4:0f:
be:a2:3a:83:dd:10:a5:f8:7f:e0:54:96:d1:99:4e:
20:3f:ec:1c:81:06:0b:5e:99:54:af:50:31:ec:78:
e4:5f:e9:15:77:47:f4:68:f9:3f:b8:7c:19:b1:69:
55:9c:cf:a7:37:3c:5d:9e:5c:b0:f0:3f:16:d4:01:
36:30:fd:bb:1b:2b:35:9c:7d:d7:d8:ad:c0:3e:30:
df:6e:f9:46:d0:22:e1:73:37:1f:f3:48:d8:ea:e2:
8c:1f:ee:62:8c:d0:1e:3b:b3:47:57:2e:5a:80:77:
12:f6:64:76:85:0c:ac:55:d0:cf:e8:36:ae:1e:43:
c8:3f:bb:a7:85:60:ea:2c:89:0e:fd:06:19:8f:d4:
78:76:14:9c:2d:8e:7b:f0:cb:6b:16:b0:4a:97:13:
da:ac:0d:31:19:6b:f5:da:8e:36:08:82:00:36:c2:
25:0e:84:55:54:96:ad:d4:03:fb:5e:0b:98:98:4e:
10:b6:50:d7:13:1f:0f:0a:1d:c0:f2:7f:15:b4:cb:
b2:4b:cb:d7:61:ea:a2:f6:04:56:9e:1c:76:71:d4:
82:65:a0:04:18:c5:ee:bc:12:1d:c0:0f:cd:1c:0a:
40:cb:eb:df:5f:8d:93:b0:33:11:57:b9:9e:d7:c1:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:55:B2:02:D6:08:ED:C0:43:58:F3:19:E4:F7:11:C1:3A:70:3D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/T4JVsgLWCO3AQ1jzGeT3EcE6cD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1c:b7:f3:49:b6:e9:1a:4b:d0:fa:06:a2:d3:1a:a5:ce:00:
dc:cb:0b:88:30:e7:80:66:64:26:e7:0c:5f:92:6c:cf:2e:d1:
52:c5:6c:f4:ed:99:53:51:7c:56:7b:a8:11:a6:96:82:58:f3:
b7:a8:74:66:d0:ee:aa:1b:39:07:08:0d:cc:d9:c4:4b:ba:25:
05:0b:2c:ca:0e:2a:38:45:5e:8d:ee:b5:f5:f9:bf:02:04:1e:
02:c8:e9:b8:c4:b8:cc:0d:36:e5:6c:fb:84:75:a9:da:18:03:
4e:a4:84:74:39:22:03:df:73:64:75:6d:ef:90:15:a1:cb:fa:
41:8e:8c:ca:39:cf:76:e6:f0:b2:a7:15:18:5f:16:a2:31:f2:
48:73:81:d0:e2:c6:f1:0e:b6:50:1a:ed:d7:b3:76:21:a5:2d:
68:ce:6a:db:a1:60:9e:58:5f:f0:b9:fc:36:cd:04:37:fd:6f:
19:2b:c2:17:c6:9c:b7:6f:1c:91:5e:e1:9d:50:ac:43:19:88:
70:7d:b6:40:22:a1:db:18:cb:fc:9c:e9:32:e7:87:c5:6e:73:
10:5d:d3:ac:82:16:6c:97:15:41:76:ad:fb:5d:cd:90:cd:c6:
1f:5f:0c:de:cc:a1:ee:e1:0c:65:39:70:57:92:87:19:a5:0c:
bd:5d:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:03:49 2024 by rpki-client on console-ams.rpki-client.org