Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/3ilWmbj21Rn2Fe6QbTFedVruxao.roa
File: 3ilWmbj21Rn2Fe6QbTFedVruxao.roa (raw, json)
Hash identifier: Kh300XJFw4bBHnmjfmzYz8DLdXrJBrOIMUpO3CLF/ZY=
Subject key identifier: DE:29:56:99:B8:F6:D5:19:F6:15:EE:90:6D:31:5E:75:5A:EE:C5:AA
Certificate issuer: /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial: 018CC9BBFD8CB25ECABAC32EB7DB47EEB00B
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/3ilWmbj21Rn2Fe6QbTFedVruxao.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 31.134.1.0/24 maxlen: 24
31.134.0.0/24 maxlen: 24
31.134.4.0/24 maxlen: 24
31.134.3.0/24 maxlen: 24
31.134.2.0/24 maxlen: 24
31.134.8.0/24 maxlen: 24
31.134.7.0/24 maxlen: 24
31.134.6.0/24 maxlen: 24
31.134.5.0/24 maxlen: 24
31.134.11.0/24 maxlen: 24
31.134.10.0/24 maxlen: 24
31.134.9.0/24 maxlen: 24
31.134.15.0/24 maxlen: 24
31.134.14.0/24 maxlen: 24
31.134.13.0/24 maxlen: 24
31.134.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fd:8c:b2:5e:ca:ba:c3:2e:b7:db:47:ee:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de295699b8f6d519f615ee906d315e755aeec5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:05:6d:d8:ae:5b:80:1b:5b:21:5f:d6:3c:
1b:33:09:74:eb:88:64:80:98:ad:0b:6c:66:11:df:
42:fb:17:94:74:a0:3e:d8:af:f5:b8:c4:61:ff:3b:
c9:ed:67:cc:e5:15:47:ad:76:26:4d:34:f6:1a:1e:
9d:f9:b1:ab:84:85:69:e6:ea:92:57:33:98:0a:aa:
a2:43:bd:65:d7:47:3a:46:f9:9c:fa:30:cf:8e:b8:
e3:0b:2b:7c:c0:c5:0c:ed:b0:e7:57:b7:f4:a9:76:
6c:3f:4d:32:8a:6e:8c:36:d4:10:df:fc:28:f2:19:
6a:a5:df:19:a1:01:e9:a8:bb:dc:e1:06:89:1e:a7:
f8:e0:bb:56:d6:8b:5f:06:be:26:4f:24:5c:ec:18:
01:5f:84:00:28:4d:e3:04:84:b4:ae:ab:e9:b9:5d:
a8:71:e4:70:f7:57:04:1e:ad:11:2a:6e:67:18:f6:
03:6f:36:41:d9:64:55:2e:1f:5a:c5:05:51:4d:f7:
c0:3b:ac:cc:ed:1e:0b:c5:8f:10:5c:df:70:ea:d9:
4a:68:08:a2:02:fe:c3:cd:b9:03:f7:ff:8b:8d:dd:
06:ba:fb:9d:de:c6:d9:76:65:3a:43:8e:e7:3f:d8:
d9:58:34:e7:82:59:62:97:0d:fb:3e:ca:61:f6:37:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:56:99:B8:F6:D5:19:F6:15:EE:90:6D:31:5E:75:5A:EE:C5:AA
X509v3 Authority Key Identifier:
keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/3ilWmbj21Rn2Fe6QbTFedVruxao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.0.0/20
Signature Algorithm: sha256WithRSAEncryption
00:24:96:28:01:67:12:94:c1:62:1f:92:cf:db:13:79:cb:21:
d4:55:13:28:ea:4a:16:f7:11:01:d6:65:d4:9a:8c:46:f6:21:
53:ea:81:8c:90:a2:f9:df:fa:7b:ee:48:b0:91:2b:9e:82:3e:
a7:5a:e3:e6:3f:3e:d9:d2:a3:1a:9a:9d:30:16:2e:f9:02:63:
63:58:bb:d9:3c:9b:16:d9:31:dc:e8:b9:86:72:be:74:04:45:
7c:ff:98:05:01:16:69:c4:ba:db:07:e3:b4:c0:1e:a1:ec:68:
98:96:03:ad:98:50:5b:61:f2:b2:16:10:02:87:e3:72:ed:9e:
b8:5b:e0:80:64:41:1b:ec:59:c1:75:de:79:d4:fa:5a:54:6f:
04:59:ae:99:6e:4c:80:aa:d5:3b:83:89:3e:14:f6:2a:21:15:
1c:22:f2:7f:81:8a:a5:ff:bb:b4:7c:f7:29:2b:59:10:fe:ea:
1b:94:2a:6c:de:df:44:d2:64:62:c2:4c:a0:01:7a:17:99:bd:
ad:b8:46:9d:89:91:a0:df:01:f3:99:13:60:c6:bb:39:0c:f2:
39:44:14:4f:61:22:83:5a:1e:87:8d:c1:39:ed:4b:1a:78:85:
1c:6f:53:86:1e:dc:09:dd:df:1b:f7:90:72:a3:dd:9f:4d:19:
79:b7:1d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:57:54 2024 by rpki-client on console-fra.rpki-client.org