Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/vDy1qcDOy-PybpzzJpYZdNOsabM.roa
File: vDy1qcDOy-PybpzzJpYZdNOsabM.roa (raw, json)
Hash identifier: L0kWoNtO9IKTC+PEy3RDm05ayp5vb+v/8oxLflTYYEw=
Subject key identifier: BC:3C:B5:A9:C0:CE:CB:E3:F2:6E:9C:F3:26:96:19:74:D3:AC:69:B3
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018F066DC7E7C6776DA1F64A22FCCDF40D19
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/vDy1qcDOy-PybpzzJpYZdNOsabM.roa
Signing time: Mon 22 Apr 2024 15:30:08 +0000
ROA not before: Mon 22 Apr 2024 15:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
85.202.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:6d:c7:e7:c6:77:6d:a1:f6:4a:22:fc:cd:f4:0d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Apr 22 15:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3cb5a9c0cecbe3f26e9cf326961974d3ac69b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:25:1a:d0:4d:a0:18:36:55:74:8d:e0:97:
6b:57:d1:7a:2a:6d:f3:c5:6b:4e:8b:b7:de:f0:c0:
bd:0d:1f:78:19:4a:13:32:8d:0e:a2:30:04:b6:20:
81:22:e3:a9:c0:6b:53:2f:d2:57:e4:63:95:57:bc:
69:76:46:4b:28:e1:24:b2:d7:af:83:b7:31:e7:15:
2c:52:c9:ce:74:96:ed:53:d6:1d:02:c1:b1:17:97:
5e:a7:f4:7f:3a:25:5e:bf:d0:7c:90:1d:9b:32:f4:
25:ff:25:c2:66:8b:34:96:e8:bf:77:0b:a2:f6:84:
65:53:eb:2d:f2:27:f6:39:9e:f7:a1:ed:8e:42:c1:
a2:aa:a7:8f:7a:76:68:7c:b3:e8:bf:34:a3:05:95:
0c:1b:6d:41:1c:85:43:2e:43:ca:de:d7:f6:20:5d:
2e:fe:48:a1:1c:43:64:a9:da:ad:b8:6d:44:67:19:
81:dc:5c:51:40:10:01:c4:5e:ec:72:2f:f8:29:3e:
62:77:e6:a6:73:18:88:ac:0c:60:31:80:96:3b:23:
ea:2c:97:ac:f8:ee:0e:34:0f:d6:fe:0c:75:ae:82:
1a:7c:3e:49:2c:34:61:2d:e2:fb:d5:85:f0:89:7f:
3b:25:75:43:d9:83:19:28:0f:ed:3d:df:6c:21:32:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:B5:A9:C0:CE:CB:E3:F2:6E:9C:F3:26:96:19:74:D3:AC:69:B3
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/vDy1qcDOy-PybpzzJpYZdNOsabM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
85.202.192.0/24
Signature Algorithm: sha256WithRSAEncryption
26:80:51:cf:54:d2:10:1c:15:dd:0a:5e:ff:47:22:d7:85:55:
7a:92:fb:ac:df:34:38:37:c2:5d:84:41:94:30:5a:6c:ad:0c:
d6:39:1a:74:ec:b3:9b:e5:9d:61:1b:46:32:6c:4d:42:b1:c5:
aa:69:8a:70:cc:6b:f0:98:1e:57:b7:3b:d2:32:f3:9f:01:59:
e8:68:60:b4:f6:2e:89:ff:8f:9c:84:19:0c:c5:0b:2b:51:f9:
a2:6d:a1:b8:60:6c:b0:47:49:65:08:64:0c:58:02:6c:c8:43:
0c:cc:ba:63:37:f8:2d:65:3a:c6:dc:ec:f7:50:67:7e:b6:13:
71:0d:87:5e:96:0f:cb:fb:23:59:5c:36:74:14:52:3d:51:9c:
d0:bd:c5:99:ba:df:89:52:a5:7b:4e:7b:3e:66:78:83:30:67:
b6:6d:57:75:b7:a8:e5:8a:90:ee:a6:ef:53:9b:00:17:7a:a5:
1b:84:89:81:b2:ff:2a:2a:18:c0:f0:93:2d:05:1f:3f:fe:30:
b3:da:fd:1a:6e:1a:09:af:6d:41:79:ab:71:8c:cc:98:c3:91:
e5:02:71:d6:0d:23:34:ec:45:11:ed:36:f0:9c:12:1b:02:cf:
22:32:91:35:77:3f:53:15:cb:7b:a6:0a:17:c5:5e:b9:e2:b5:
85:8b:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:56:27 2024 by rpki-client on console-fra.rpki-client.org