Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/9zC1TH8TF16a8IgZJ4hNhzcasJo.roa
File: 9zC1TH8TF16a8IgZJ4hNhzcasJo.roa (raw, json)
Hash identifier: pxk247tv8aUh/Isf2wvsMw/ZHbs8OU4kZgwrlLkXbzU=
Subject key identifier: F7:30:B5:4C:7F:13:17:5E:9A:F0:88:19:27:88:4D:87:37:1A:B0:9A
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01930651259BEA3165DD9E39FD540FDD0489
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/9zC1TH8TF16a8IgZJ4hNhzcasJo.roa
Signing time: Thu 07 Nov 2024 11:10:01 +0000
ROA not before: Thu 07 Nov 2024 11:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 31.171.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:51:25:9b:ea:31:65:dd:9e:39:fd:54:0f:dd:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Nov 7 11:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f730b54c7f13175e9af0881927884d87371ab09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:06:92:56:92:69:9d:2c:39:13:1c:3f:d5:
95:6d:43:4d:0b:8e:10:58:0e:3f:d5:bb:0a:41:dc:
41:72:c6:78:c8:b8:1d:6c:ef:8d:8b:61:6d:7c:e9:
ec:c5:29:a5:4c:da:83:ab:04:87:1b:68:f7:8a:67:
d2:94:56:52:40:1d:e7:ff:c7:dd:05:85:a4:7d:d9:
ed:d6:cf:18:3a:96:f3:d9:52:0a:bc:0b:aa:8f:b9:
e3:d3:32:dc:a0:f2:e9:0d:d8:6c:18:b6:89:6e:44:
2f:b0:ec:39:9e:aa:e4:28:08:13:48:c4:86:76:f7:
3c:38:62:9a:65:22:96:0a:99:a7:d0:ce:6f:33:99:
a9:9d:1e:da:74:a7:ac:48:98:4f:78:bc:a6:5c:5c:
f4:de:ab:90:79:c7:fb:5d:32:08:59:b2:00:12:ad:
08:26:fe:2d:5a:9c:02:d2:69:e8:90:54:b2:3a:09:
30:d5:4d:0c:c3:e8:2b:01:15:f1:4b:ef:6b:aa:9a:
fc:57:c7:98:6d:8c:91:94:c7:55:ac:de:7f:41:9a:
ec:41:07:3f:b2:71:19:81:3c:22:87:e8:70:c6:a7:
76:00:3f:45:cd:b5:45:0a:6f:d5:2a:3a:fb:49:82:
a1:0d:87:43:67:bb:04:3c:50:66:65:0f:70:e3:e9:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:B5:4C:7F:13:17:5E:9A:F0:88:19:27:88:4D:87:37:1A:B0:9A
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/9zC1TH8TF16a8IgZJ4hNhzcasJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.130.0/24
Signature Algorithm: sha256WithRSAEncryption
07:14:aa:fa:b0:c7:d1:86:16:bd:d8:95:71:6b:c4:c9:36:84:
fe:53:5b:97:41:50:8a:11:dc:85:ac:f8:d8:fe:c3:49:e9:2d:
00:99:00:48:f6:b1:81:19:72:55:4f:9a:0f:46:0b:61:ae:88:
40:95:fd:58:32:51:e1:cd:b7:d2:59:09:f6:a7:d1:a9:cc:41:
d3:6e:6c:2e:7c:32:ef:e3:22:3b:1a:6f:c1:10:7b:a2:f7:81:
aa:7c:f7:64:df:55:89:06:48:96:36:0f:57:57:3f:4d:46:39:
27:92:6b:f9:a8:fd:a8:08:d1:4d:e9:23:a9:c7:d4:fd:9a:4c:
36:b8:12:48:04:54:12:4a:96:e6:ff:4e:d1:2c:89:fb:af:3c:
17:42:99:4a:1e:5d:3b:e4:c9:83:ee:61:e6:d5:cd:15:f7:6e:
3e:58:00:ec:15:e5:ec:35:70:84:ae:79:04:28:c3:1d:76:dd:
d3:23:b9:8e:c8:f8:4a:6b:6d:5d:40:c3:a7:71:de:a6:24:9a:
ec:6f:ce:80:ac:84:6c:e3:84:8a:35:3b:ff:38:24:9b:77:15:
77:0c:6e:34:e6:c4:eb:6f:68:bb:a3:45:86:aa:8b:82:05:17:
ed:5b:40:18:24:b7:91:da:dd:b0:5d:ee:c2:35:d7:a4:26:70:
33:ce:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:37 2024 by rpki-client on console-ams.rpki-client.org