Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/Tw4E2vviyjWonwpfNoqDoiFEGb0.roa
File: Tw4E2vviyjWonwpfNoqDoiFEGb0.roa (raw, json)
Hash identifier: 2kTIQP1xQCv2fnI1r7uqD0BptcWcA28GyZLjmY6eBxI=
Subject key identifier: 4F:0E:04:DA:FB:E2:CA:35:A8:9F:0A:5F:36:8A:83:A2:21:44:19:BD
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018CC6B8B119BB91855F7CB6009A9D98E274
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/Tw4E2vviyjWonwpfNoqDoiFEGb0.roa
Signing time: Mon 01 Jan 2024 20:30:41 +0000
ROA not before: Mon 01 Jan 2024 20:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50187
IP address blocks: 31.44.245.0/24 maxlen: 24
31.44.244.0/24 maxlen: 24
31.44.244.0/23 maxlen: 23
31.44.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b1:19:bb:91:85:5f:7c:b6:00:9a:9d:98:e2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 1 20:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f0e04dafbe2ca35a89f0a5f368a83a2214419bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:e8:24:db:ad:31:29:63:5f:b0:22:36:c5:
94:0c:bc:57:3b:2e:3f:36:b2:20:7f:61:4f:08:12:
d3:e2:74:5d:e0:ee:62:b4:a6:ea:3d:9a:9a:dc:c0:
ad:5c:1e:60:cf:fd:f7:da:e4:30:a1:73:be:d4:3a:
96:ec:b6:6c:83:00:d8:c6:e7:0a:08:37:b3:86:88:
fb:3e:9b:b5:bd:72:e8:12:26:5d:cf:5f:e4:c6:68:
32:41:9b:15:90:b6:5e:dc:80:09:96:98:6f:96:ba:
3c:60:1f:29:59:c7:f1:ce:3d:f9:a4:fa:7f:b3:25:
df:01:2a:21:b1:7e:73:e0:0d:65:7b:5a:c7:5b:eb:
94:a9:d4:54:78:61:8d:14:d9:dc:62:ce:22:18:92:
f2:4c:e0:5b:f7:b7:d2:be:13:af:16:b0:0e:45:84:
3b:78:33:ed:a0:b5:4c:52:c2:4c:a8:2d:97:e7:e8:
72:2e:61:33:65:92:4f:43:c4:ba:04:c3:53:18:09:
52:f3:d3:b1:bd:9f:82:cd:a8:1e:1a:a6:06:a0:22:
c3:a5:fe:64:03:84:01:b1:23:bf:fe:ac:bc:48:0d:
83:5b:39:9a:84:16:52:db:32:de:4b:95:5b:07:26:
06:6e:9e:1f:fd:07:b9:95:d6:59:ef:b6:1d:41:5d:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:04:DA:FB:E2:CA:35:A8:9F:0A:5F:36:8A:83:A2:21:44:19:BD
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/Tw4E2vviyjWonwpfNoqDoiFEGb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.244.0/23
31.44.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:40:47:30:3a:ff:6a:f1:e4:6e:ef:1f:1e:a2:cc:c7:11:02:
25:7e:00:00:c6:0f:72:c3:1f:d0:92:c8:48:8b:4f:73:7c:7c:
1d:47:61:d3:21:18:5b:ad:30:e1:ec:c8:a9:b9:a4:cc:93:12:
58:c3:48:89:09:e9:3c:cc:35:e1:e5:3c:f0:04:cc:79:c5:f7:
a2:51:04:43:ad:50:0a:3b:b8:98:4d:d1:6c:2b:a1:0a:68:0e:
5d:98:f2:1d:71:6f:14:44:35:ea:40:f8:b6:03:91:9b:27:7a:
43:aa:5e:a2:af:90:d9:2c:cb:6e:3a:9d:c9:ce:6b:18:f9:7b:
22:6a:91:9e:f8:55:ee:12:0f:65:25:33:05:81:b6:e8:72:a9:
d9:5a:b7:ef:35:fb:5f:b1:db:4c:5a:b3:b9:f6:c5:6a:99:fd:
24:fe:02:c7:b9:7f:1f:08:7a:74:0c:fb:4a:f1:ec:3a:f2:39:
f1:a0:64:12:38:67:33:ad:e9:7a:01:41:06:7c:98:ed:76:18:
ad:8b:cb:07:99:93:94:26:88:8e:50:a9:07:5a:73:6a:29:45:
62:77:37:e7:bc:7d:b2:9a:e0:5e:f4:36:e9:8c:2b:85:d4:a3:
be:f4:f9:33:36:33:a5:70:d0:19:54:0f:bd:88:39:0f:f4:18:
70:4f:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:10:44 2024 by rpki-client on console-fra.rpki-client.org