Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/9Snq6-4xNKmLPpXqg3N3ovYmmio.roa
File: 9Snq6-4xNKmLPpXqg3N3ovYmmio.roa (raw, json)
Hash identifier: xma5k0YZR6xFQOKLAUKPIQ8DhDA0V1MxWaH0VmKUHYg=
Subject key identifier: F5:29:EA:EB:EE:31:34:A9:8B:3E:95:EA:83:73:77:A2:F6:26:9A:2A
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 018CF39E676BAAC1B181BCE9B549F755C440
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/9Snq6-4xNKmLPpXqg3N3ovYmmio.roa
Signing time: Wed 10 Jan 2024 13:44:53 +0000
ROA not before: Wed 10 Jan 2024 13:44:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 31.131.188.0/23 maxlen: 23
195.69.224.0/24 maxlen: 24
91.232.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:9e:67:6b:aa:c1:b1:81:bc:e9:b5:49:f7:55:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Jan 10 13:44:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f529eaebee3134a98b3e95ea837377a2f6269a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:3a:8a:b8:16:26:36:14:5f:1b:67:ec:82:
21:ac:28:8c:6f:b4:00:c1:32:a5:b7:0d:8f:b0:50:
6b:1e:09:dd:c0:70:78:31:ab:b4:19:50:84:06:c3:
8f:dc:8c:c1:f7:5c:49:c3:86:b5:a6:d3:7c:60:bf:
2a:6f:6c:4d:97:95:11:76:9b:e6:09:ba:a9:39:c1:
4b:57:1a:3d:70:fb:96:ab:cb:80:e5:c5:a6:62:0d:
00:ed:6c:84:f6:1a:a5:9b:f9:70:f8:92:13:10:27:
5a:c2:b4:94:92:cb:b9:17:f7:51:f7:f9:9d:ce:35:
ad:03:72:0a:e1:37:80:9a:ca:25:56:f0:42:5e:33:
aa:36:22:74:d0:93:4c:35:a0:5b:f6:ac:3a:9b:a7:
a4:14:a8:81:00:7f:d0:41:c5:29:52:b3:2c:cc:12:
19:88:63:b6:9a:62:dd:74:fe:79:a6:01:48:94:4c:
ed:1c:c2:27:67:80:65:26:ce:a5:e6:10:84:84:8b:
3c:68:b8:d1:e4:5e:24:a4:26:a6:11:e7:58:d2:82:
2f:04:68:bf:d9:9e:30:2a:9f:ed:34:03:e0:14:11:
0e:ca:bc:98:07:bd:37:5d:1c:af:e2:0c:d5:44:a0:
dc:a0:db:63:38:10:22:a5:54:00:4f:6c:09:d9:37:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:EA:EB:EE:31:34:A9:8B:3E:95:EA:83:73:77:A2:F6:26:9A:2A
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/9Snq6-4xNKmLPpXqg3N3ovYmmio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.188.0/23
91.232.248.0/24
195.69.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:42:b3:d4:85:00:90:fc:f7:58:e1:81:f0:ad:b6:45:70:f5:
bf:68:f0:7d:7d:35:d3:f3:ea:c5:54:04:1f:a6:21:27:9f:37:
0e:68:d6:8e:8d:42:c1:68:9d:82:b1:50:2c:6a:fe:b3:2c:f0:
c3:4c:95:01:6b:fb:f7:c5:2b:63:dc:be:4d:47:43:48:ae:99:
a4:4e:99:37:1a:41:05:16:f5:b7:30:f3:92:e4:02:73:93:39:
c9:40:8e:39:24:8f:4d:e5:66:ed:8d:14:96:19:40:5f:4c:d8:
74:8c:87:cd:0b:21:aa:be:60:6a:84:09:46:38:b5:40:ea:b9:
2a:2f:5b:37:a2:10:da:2c:04:8e:03:fe:4f:7a:e6:d0:25:e8:
2d:25:6b:d6:83:99:e1:60:81:e0:70:53:ef:06:6b:8c:10:0c:
af:b2:13:f2:77:57:c9:da:cc:54:b1:4d:25:ce:bf:76:c9:8a:
65:20:d8:71:3c:20:8c:7a:78:62:d8:fc:32:12:1d:bb:c3:a9:
b7:b1:26:f1:b7:83:e2:9b:3c:28:0c:95:87:a3:bb:d6:78:2b:
3a:ab:43:83:65:d9:3a:12:7c:39:c5:65:65:ec:96:e3:d0:e0:
91:05:43:5e:a0:d5:e5:7c:89:17:b1:0b:46:bc:fb:c5:8b:07:
ea:bb:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:50:52 2024 by rpki-client on console-fra.rpki-client.org