Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/2Z81qMy_Xy7ngXZcJwzvRSlCSCY.roa
File: 2Z81qMy_Xy7ngXZcJwzvRSlCSCY.roa (raw, json)
Hash identifier: h94HSiN4MPeIbAFaac+GdLJJ3tecHumM3Ar97wE2AO0=
Subject key identifier: D9:9F:35:A8:CC:BF:5F:2E:E7:81:76:5C:27:0C:EF:45:29:42:48:26
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 018CCA29F0F139EBD0ED7F9AC4A78F2D3395
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/2Z81qMy_Xy7ngXZcJwzvRSlCSCY.roa
Signing time: Tue 02 Jan 2024 12:33:15 +0000
ROA not before: Tue 02 Jan 2024 12:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8455
IP address blocks: 31.14.45.0/24 maxlen: 24
45.82.104.0/23 maxlen: 23
185.194.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f0:f1:39:eb:d0:ed:7f:9a:c4:a7:8f:2d:33:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99f35a8ccbf5f2ee781765c270cef4529424826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:40:af:70:ac:d9:73:88:41:d6:a7:cb:dc:
01:46:a2:f7:f7:7c:bc:8d:16:72:2c:c0:4f:c5:e6:
d0:0c:76:b1:60:0f:86:9e:36:aa:ca:45:56:b2:fe:
f9:1b:b6:77:15:77:de:a7:df:ff:da:6b:a8:d8:e4:
aa:f0:f4:fd:c4:9c:72:60:5e:2d:f8:c0:a8:2b:26:
3f:72:13:76:d7:93:53:94:db:ec:a5:44:37:10:c1:
96:0b:b6:e1:41:13:e3:d3:ca:84:d4:25:1c:a4:d1:
31:4e:95:9f:40:6b:fc:d9:cd:7c:6d:b4:20:c2:7a:
79:5e:d8:a9:79:31:e0:4a:5f:4c:16:16:3e:62:46:
98:d6:ee:96:16:c6:6b:27:b6:f9:69:4b:12:ed:15:
97:50:11:1f:6a:46:60:4d:bf:e1:a5:ef:89:68:1e:
f0:fd:d5:36:8a:92:70:39:d1:02:3c:98:bc:73:bd:
63:6f:d6:23:12:a0:66:41:83:11:b6:19:2d:46:4a:
22:29:9f:61:c5:5a:db:0d:d4:be:10:98:49:8d:f7:
99:26:34:43:87:82:1a:b7:c7:2d:28:8e:9c:a5:ed:
5b:a2:4a:54:91:2e:d3:17:6f:53:b1:b5:06:6f:f3:
1d:f6:b0:7f:89:aa:43:f8:8a:15:9e:67:e0:fb:18:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:35:A8:CC:BF:5F:2E:E7:81:76:5C:27:0C:EF:45:29:42:48:26
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/2Z81qMy_Xy7ngXZcJwzvRSlCSCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.45.0/24
45.82.104.0/23
185.194.0.0/22
Signature Algorithm: sha256WithRSAEncryption
08:2e:19:a8:72:15:79:f4:34:1d:1a:49:f0:69:f0:62:e0:c6:
42:7b:0f:80:82:2c:71:09:3a:1e:31:f5:7c:7a:a2:13:61:70:
f6:00:87:9e:fc:da:8c:30:cd:f5:1c:f9:6d:8e:e0:cf:37:a7:
ff:0f:9f:a7:f9:10:a0:3b:d5:27:49:ab:7c:b9:93:4c:80:29:
2f:5e:ea:26:86:1d:51:b7:ea:fc:34:54:2d:e8:f3:d7:fd:b2:
b1:8d:93:72:87:10:ad:14:ab:24:be:c2:eb:45:90:ee:dd:ca:
70:50:3b:8e:e4:e3:d5:be:8d:03:4d:f6:3f:42:84:81:7d:6a:
ff:df:b6:26:20:e1:7d:d8:8c:c1:c6:1f:3d:41:92:bb:83:9e:
d0:77:a1:cd:35:c8:2c:a4:86:32:0c:ef:bc:5e:03:ee:3d:63:
b4:e7:98:8d:49:82:ab:3a:0a:44:3a:5d:0f:8e:d7:c2:5c:56:
5b:f5:6d:8d:cf:4b:ab:8f:dc:18:2c:fe:aa:f5:75:48:7b:ac:
a9:85:5d:5f:79:47:42:99:4c:83:a7:cc:26:2f:83:cc:31:f0:
03:25:c9:70:e3:28:7f:af:d9:39:26:7b:f5:d7:c4:04:8b:bb:
b7:8f:d6:2c:3b:66:de:93:de:eb:eb:03:ae:72:de:72:59:24:
7a:cf:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:14:31 2024 by rpki-client on console-ams.rpki-client.org