Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/8-wiJ4cv27IEwfhojqNDYcV9RVQ.roa
File: 8-wiJ4cv27IEwfhojqNDYcV9RVQ.roa (raw, json)
Hash identifier: ENuZDi+7ETPv/YHUAV/Z/uuuL9BGMoH8bxeQXZQOPP8=
Subject key identifier: F3:EC:22:27:87:2F:DB:B2:04:C1:F8:68:8E:A3:43:61:C5:7D:45:54
Certificate issuer: /CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Certificate serial: 018CCA2991FB66E7CDA8786DE897CE73EFDB
Authority key identifier: 2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/8-wiJ4cv27IEwfhojqNDYcV9RVQ.roa
Signing time: Tue 02 Jan 2024 12:32:51 +0000
ROA not before: Tue 02 Jan 2024 12:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50056
IP address blocks: 94.126.43.0/24 maxlen: 24
94.126.47.0/24 maxlen: 24
31.28.67.0/24 maxlen: 24
31.28.68.0/24 maxlen: 24
31.28.80.0/22 maxlen: 22
31.28.84.0/23 maxlen: 23
31.28.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:91:fb:66:e7:cd:a8:78:6d:e8:97:ce:73:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d119754fc14ffe7968a6516bd49bdb25633b887
Validity
Not Before: Jan 2 12:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3ec2227872fdbb204c1f8688ea34361c57d4554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:a7:39:9d:3f:e5:5e:2f:19:07:4c:c4:cf:
7a:47:47:6d:fc:15:a3:b9:c2:d2:ab:d6:45:d6:1f:
68:1c:f4:e6:87:5e:62:7d:d0:40:d0:ab:00:1c:5d:
b4:54:64:77:bb:8e:53:13:8d:e8:ae:23:7f:3e:08:
5a:de:ab:7b:72:6b:23:c7:62:40:04:36:56:97:d4:
37:84:b8:1a:5a:19:35:f6:e8:d8:c7:08:82:53:79:
9f:2e:47:33:4c:d4:6b:15:74:15:97:99:0d:94:3c:
49:a1:07:7c:50:a9:c0:cf:24:bc:a5:b2:ce:71:08:
59:47:a1:0a:b1:f1:18:6c:05:93:0c:cc:34:a6:52:
a9:94:46:82:a3:2f:ee:fa:1b:91:c4:34:bd:02:44:
69:df:8a:47:d2:07:d8:78:b5:2a:3c:27:40:cf:40:
e0:08:68:62:6f:39:b9:13:bb:67:26:c2:b2:1d:9a:
72:59:44:ff:50:75:ad:a4:18:be:b9:42:5b:ea:b7:
7b:72:a3:ed:24:de:84:60:75:4f:33:ae:76:a8:c0:
65:8c:a8:43:ac:76:a3:1e:88:f0:39:08:4f:6c:1d:
1b:8c:ee:14:0c:3e:7c:cf:ca:85:a4:3d:95:46:24:
30:64:0d:c4:22:e3:d3:bc:5c:67:36:49:b4:b4:9a:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:22:27:87:2F:DB:B2:04:C1:F8:68:8E:A3:43:61:C5:7D:45:54
X509v3 Authority Key Identifier:
keyid:2D:11:97:54:FC:14:FF:E7:96:8A:65:16:BD:49:BD:B2:56:33:B8:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRGXVPwU_-eWimUWvUm9slYzuIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/8-wiJ4cv27IEwfhojqNDYcV9RVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0771e1-39af-4353-947f-01facc747c24/1/LRGXVPwU_-eWimUWvUm9slYzuIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.67.0-31.28.68.255
31.28.80.0-31.28.86.255
94.126.43.0/24
94.126.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:f2:73:fa:e7:0e:af:a4:b8:bc:de:63:9c:6d:98:a5:aa:
15:db:1e:96:ea:2b:a9:6f:7b:3a:60:5e:98:0b:04:e1:b0:95:
86:81:43:a9:a6:52:83:8e:9b:fb:74:8b:11:a8:15:c5:f1:a0:
ed:56:44:05:72:c1:4a:6a:9f:25:19:40:25:5c:96:c4:32:bb:
6a:18:6b:6d:2f:14:1e:ff:f3:6c:c1:4d:f6:1c:4a:59:74:ff:
31:35:d2:91:42:46:df:38:60:92:cc:c1:08:c9:8a:07:cc:a2:
77:24:e1:39:e3:3c:65:7f:41:1d:f4:59:6f:74:88:42:f0:53:
5b:d4:4d:ad:16:67:c1:41:69:12:4b:00:63:3d:3b:b8:ca:4d:
d2:70:ad:2c:4f:f5:1d:0e:db:d6:57:b0:d7:90:99:01:d7:c4:
87:01:22:ac:58:91:d1:c2:07:a3:59:ea:ab:3c:0a:1c:f2:de:
71:bc:75:ec:7b:d9:dd:3e:2b:58:87:3f:8f:2c:fc:71:52:8c:
75:a8:14:39:9f:4d:9c:82:99:2e:d6:2d:01:c9:17:8c:a8:e1:
78:5f:1b:c7:4e:27:f2:08:a0:2a:a2:09:e4:dc:57:49:c2:81:
29:09:32:d8:9d:73:06:a0:b4:e8:21:df:7d:f4:39:0b:95:b4:
f7:4a:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 17:16:43 2024 by rpki-client on console-fra.rpki-client.org