Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JJsT7PYQZzVwAeHKIKwAvOyp5S0.roa
File: JJsT7PYQZzVwAeHKIKwAvOyp5S0.roa (raw, json)
Hash identifier: GQ0wJKuM4jyh94bSH0+x6mxuRDfb72AE6LZOmTIHipY=
Subject key identifier: 24:9B:13:EC:F6:10:67:35:70:01:E1:CA:20:AC:00:BC:EC:A9:E5:2D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193328707C97FAE988D6698C8EA0F939592
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JJsT7PYQZzVwAeHKIKwAvOyp5S0.roa
Signing time: Sat 16 Nov 2024 01:12:10 +0000
ROA not before: Sat 16 Nov 2024 01:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213850
IP address blocks: 5.231.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:32:87:07:c9:7f:ae:98:8d:66:98:c8:ea:0f:93:95:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 16 01:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249b13ecf61067357001e1ca20ac00bceca9e52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:0b:01:97:28:71:ed:ad:5b:09:0e:95:89:
ac:bf:8b:d7:db:5e:ec:4c:73:85:b4:7b:72:1c:9d:
8d:68:c5:34:90:04:65:ca:1a:1e:c0:1a:9c:23:77:
ab:6f:55:44:ba:8c:ba:13:44:64:95:fe:c7:87:99:
56:34:77:6d:0e:30:0a:d5:a8:25:5d:c2:99:1f:15:
8b:3d:ab:b7:cb:ea:e4:03:11:33:ee:10:18:97:d7:
27:60:07:af:dc:d9:a4:e9:9b:2c:3f:a2:9a:d2:ae:
83:64:7c:29:de:73:b1:89:71:35:11:0c:da:91:5d:
4e:c5:dd:87:59:2c:64:13:07:69:46:2e:67:93:f1:
64:2d:5f:3e:24:5a:ad:3a:d0:db:f2:89:bc:88:8f:
6e:6e:19:9d:49:01:96:af:21:65:36:fc:ac:b3:24:
ef:0e:4e:9f:87:ce:f8:7f:a2:08:bd:e6:a9:e4:95:
64:db:e8:19:0d:20:ae:c0:dd:72:72:7e:60:b1:f6:
f1:60:5e:36:0e:9a:73:ea:86:55:a8:56:0b:1c:57:
f6:b6:8c:31:a7:5a:b6:03:04:c3:85:ba:9b:f2:55:
49:c3:ee:2c:64:84:aa:9c:7a:f2:0f:5f:23:57:23:
48:f2:dd:a4:82:41:e8:f0:e3:df:bc:b9:2a:d8:54:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:13:EC:F6:10:67:35:70:01:E1:CA:20:AC:00:BC:EC:A9:E5:2D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JJsT7PYQZzVwAeHKIKwAvOyp5S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5a:46:f6:f3:c9:2b:cb:56:fd:6a:f4:79:ac:1f:fd:2b:ed:
a8:8f:8a:a4:ad:29:7e:4b:cc:b2:27:0c:f3:b8:63:3a:49:d6:
f9:d9:64:00:f3:92:1c:40:3a:9f:e8:91:87:a6:8f:19:97:54:
64:7e:4c:d2:ad:4e:e7:73:3a:7d:46:20:1d:14:fe:bc:76:ac:
99:42:52:e9:60:5a:de:6e:01:3c:e6:f7:23:43:8a:e1:60:1a:
22:bd:bb:58:82:58:8c:4a:53:44:42:74:56:83:aa:34:a9:b7:
75:9a:2f:7a:bb:bf:1c:d7:1c:cb:a9:df:e3:f8:91:d9:8c:a5:
b4:85:da:c2:b0:09:df:30:bf:85:e7:02:20:ea:37:3d:8e:43:
68:07:78:01:75:57:5e:f4:ed:5e:4a:04:c1:13:46:bd:10:ef:
1c:cc:ea:50:4e:95:ed:f0:05:17:f7:c7:60:6c:7f:94:17:37:
1e:3f:ad:66:58:f0:6e:76:93:87:f5:07:90:f7:36:75:10:78:
ae:35:d1:6b:17:07:98:09:23:bc:6a:a2:56:35:85:e5:38:3a:
d5:f9:d8:6c:97:64:01:38:20:4e:da:19:32:3e:b4:e3:34:db:
a0:30:ac:40:c4:a1:42:17:74:dd:cc:ea:71:f5:c1:83:73:77:
a4:32:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:44:44 2024 by rpki-client on console-ams.rpki-client.org