Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/rY8xYg-mXoZRFYBqGnASULXRSb0.roa
File: rY8xYg-mXoZRFYBqGnASULXRSb0.roa (raw, json)
Hash identifier: hTwfY1rG0xINtU011Cjpk16FEL/k9FkqdMUFGRmJ/O8=
Subject key identifier: AD:8F:31:62:0F:A6:5E:86:51:15:80:6A:1A:70:12:50:B5:D1:49:BD
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 018CC6B8FDD98570DC501613107945623035
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/rY8xYg-mXoZRFYBqGnASULXRSb0.roa
Signing time: Mon 01 Jan 2024 20:31:01 +0000
ROA not before: Mon 01 Jan 2024 20:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60798
IP address blocks: 5.181.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:fd:d9:85:70:dc:50:16:13:10:79:45:62:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 20:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad8f31620fa65e865115806a1a701250b5d149bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:f8:04:b3:c2:53:a9:09:e3:dd:0a:74:23:
e1:43:35:f0:22:1c:f8:85:a5:d5:9d:48:b3:f9:08:
f3:70:42:84:3b:95:f9:24:01:72:5a:08:5f:30:e9:
c9:9c:9a:25:f2:73:d1:82:d0:22:3d:a5:59:9f:6e:
ff:31:80:00:16:bf:20:1a:6a:24:97:2a:a2:ba:dd:
b7:d3:87:c8:0b:c2:7f:57:67:45:02:ea:50:cf:3b:
68:99:e9:58:38:d5:3b:8e:67:27:22:5a:ad:58:82:
a0:9f:6d:51:70:b7:54:40:13:01:f9:d3:b0:af:2b:
aa:29:dc:16:05:47:fd:8e:a0:7e:58:00:ac:51:cd:
49:90:f9:67:de:da:80:28:6c:03:55:5c:35:b4:40:
fc:b9:c4:07:99:be:97:5e:05:39:50:8c:04:c4:94:
28:2e:7b:dd:53:15:72:a8:ab:15:9b:67:d0:61:dc:
8e:d6:78:15:10:27:b5:cb:25:4c:10:28:14:37:01:
f1:40:2f:f6:65:84:dd:4c:73:ba:ef:d4:38:f9:90:
2f:3b:ee:e5:d5:7b:c8:a2:a9:65:be:9b:a6:ef:c1:
8f:08:3d:5d:77:b3:72:4c:d3:ef:1a:fc:85:05:a6:
a5:ad:1d:7a:85:7e:f8:51:fe:dc:8b:d4:c3:12:1b:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:31:62:0F:A6:5E:86:51:15:80:6A:1A:70:12:50:B5:D1:49:BD
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/rY8xYg-mXoZRFYBqGnASULXRSb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:50:58:0d:d9:6b:7f:9c:ee:6f:08:ce:2c:49:c0:61:f0:ee:
d2:69:47:1c:ae:a1:43:fa:e1:07:7d:16:a5:50:1f:39:dc:25:
8b:68:6e:38:09:0a:d9:a6:5c:d8:48:56:f0:d4:bd:1f:f6:8b:
d7:d2:28:0c:de:cf:8c:fa:e5:11:5b:d0:2c:89:e2:ab:21:fa:
5a:3a:dd:55:ac:26:67:bb:b5:80:92:1c:0b:69:4a:68:3a:ef:
23:e2:df:6a:1b:89:cf:b6:ba:2a:49:97:77:cc:ad:55:69:18:
f4:fb:51:dc:c0:11:ab:73:d5:dc:9c:3e:60:a7:44:8d:90:64:
39:0e:a0:c1:73:9c:04:67:8f:75:67:f0:bb:2a:ad:58:13:37:
ec:8c:0c:3a:bb:b4:eb:8e:2d:3f:08:9c:3c:96:cd:3b:70:42:
3e:b5:3a:79:05:cf:07:92:d4:c5:97:33:db:18:9d:bc:49:e1:
fb:2b:b4:36:b7:1b:a3:46:3f:45:5a:40:74:4f:a7:3b:1d:e0:
80:79:22:df:7e:07:28:07:62:15:05:32:3b:04:7b:76:28:7d:
89:13:af:4d:ab:32:9d:15:f3:38:f3:5f:74:51:2f:ef:04:4d:
0d:b6:9b:43:17:24:a4:82:53:75:4d:07:36:fc:0e:19:82:cf:
c1:a9:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:55 2024 by rpki-client on console-ams.rpki-client.org