Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9MdZaZGurWze6LcLqFRGHHUehYQ.roa
File: 9MdZaZGurWze6LcLqFRGHHUehYQ.roa (raw, json)
Hash identifier: PP+mI5JQ3fxW8aEUEXI1v9QQ8QEV/5wRwrj96W6K6Mk=
Subject key identifier: F4:C7:59:69:91:AE:AD:6C:DE:E8:B7:0B:A8:54:46:1C:75:1E:85:84
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45625857506F2F5F3C82A058EB797
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9MdZaZGurWze6LcLqFRGHHUehYQ.roa
Signing time: Wed 07 Feb 2024 18:11:16 +0000
ROA not before: Wed 07 Feb 2024 18:11:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34047
IP address blocks: 31.222.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:56:25:85:75:06:f2:f5:f3:c8:2a:05:8e:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c7596991aead6cdee8b70ba854461c751e8584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f7:91:2c:98:c7:bb:0e:e0:3f:5c:74:e3:6a:
83:a8:33:5a:9b:2d:88:19:30:d4:6b:89:5e:ef:12:
d8:90:90:33:45:cf:0d:35:25:ee:56:6d:8b:64:92:
8c:7f:c4:22:d2:ba:f0:11:8d:2b:2f:37:ec:0a:07:
d2:54:3e:c1:5a:c0:55:8c:8e:57:6d:6b:b7:8e:82:
4a:d5:6c:fc:fc:1a:d8:9f:a7:8f:59:ed:0a:f5:68:
f1:b0:a9:a6:ea:ca:50:8c:68:4a:2f:98:f5:48:00:
67:bf:74:b5:ae:0d:13:5e:ea:74:6e:f2:ec:60:33:
2b:26:98:ef:73:66:c6:7c:3e:3d:53:44:97:b6:f2:
5a:01:5c:3a:2d:97:10:e5:35:62:d6:d5:40:3b:fb:
ef:e3:9a:e8:26:25:5f:ca:21:46:08:2b:b8:60:80:
15:cd:aa:ea:8e:34:3e:e8:32:66:b8:b9:19:76:df:
38:b7:54:d3:b8:24:28:3c:01:af:14:44:ca:e0:0a:
76:1f:9e:34:f2:17:16:44:72:d6:ae:c2:8e:0f:66:
48:4d:5a:6e:95:81:64:41:b4:68:9e:cd:28:84:7e:
b7:bf:50:d4:23:7b:6e:86:48:c5:14:08:b2:d6:1b:
4f:30:2b:b2:3c:40:11:8e:6a:9b:2d:8b:a9:7a:b6:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C7:59:69:91:AE:AD:6C:DE:E8:B7:0B:A8:54:46:1C:75:1E:85:84
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9MdZaZGurWze6LcLqFRGHHUehYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.253.0/24
Signature Algorithm: sha256WithRSAEncryption
25:67:38:b8:d6:81:13:ab:b2:10:00:ab:a7:23:ce:a6:ed:c1:
cf:4d:86:a1:b5:f1:27:aa:32:6f:d3:cd:d2:76:5c:84:57:bc:
c1:0a:64:9d:5a:ab:13:44:f9:94:18:3b:42:f3:f6:b8:a5:d8:
89:11:52:85:43:d3:6c:c5:22:67:be:58:46:fa:8a:d2:11:a8:
16:e2:7e:c2:c3:62:2e:2a:e7:5b:f0:a6:fd:2c:f8:81:bd:aa:
84:d1:bf:30:d4:79:1a:8a:52:67:eb:e3:46:db:67:d7:d6:2d:
8e:87:63:df:6b:a1:4e:e8:15:de:cc:f8:c9:49:38:e0:61:1c:
15:66:cf:5d:61:4d:28:91:2a:14:54:91:fa:87:87:e9:b3:ce:
aa:0d:29:4a:72:ba:d3:fe:32:d8:d3:6f:00:fe:9a:dc:76:b0:
5f:b9:19:1b:a8:5e:65:5e:45:79:72:cf:76:85:27:7b:5f:e9:
da:a0:2a:2c:00:4c:43:fb:02:13:f8:cb:42:e4:e6:57:59:79:
42:a9:3b:97:5f:ec:3d:d5:0c:31:27:e7:e1:c6:fe:f9:1e:fe:
28:28:62:97:65:7a:0d:54:d9:42:57:a5:c0:30:94:c4:db:07:
66:6c:b8:02:e0:65:96:d8:a9:86:fb:3a:e9:db:21:c7:d2:2d:
1d:5d:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:10:32 2024 by rpki-client on console-fra.rpki-client.org