Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_PPQdduwapnPYePRRxIDJ2RtiK0.roa
File: _PPQdduwapnPYePRRxIDJ2RtiK0.roa (raw, json)
Hash identifier: UNBYNNwGcDD06aXhRV3Opi/Gk4ZJcM6AteJ2xDwr41o=
Subject key identifier: FC:F3:D0:75:DB:B0:6A:99:CF:61:E3:D1:47:12:03:27:64:6D:88:AD
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F86A70AA859D3C448B00BF82DD371DC72
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_PPQdduwapnPYePRRxIDJ2RtiK0.roa
Signing time: Fri 17 May 2024 13:04:05 +0000
ROA not before: Fri 17 May 2024 13:04:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204957
IP address blocks: 31.222.242.0/24 maxlen: 24
31.222.249.0/24 maxlen: 24
185.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:a7:0a:a8:59:d3:c4:48:b0:0b:f8:2d:d3:71:dc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 17 13:04:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcf3d075dbb06a99cf61e3d147120327646d88ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:01:fc:41:6a:09:ea:2e:17:e7:40:e6:09:
81:86:2f:44:05:2d:e8:7c:0b:c3:40:19:6c:b3:bd:
46:51:6b:3c:a1:63:cf:ac:62:5a:05:e1:b9:21:18:
38:51:e4:ef:a4:ab:49:5a:4c:d2:40:6b:0f:83:bb:
9f:e5:a1:d2:1c:c5:49:20:f6:5a:e1:b9:17:00:23:
e6:a5:f8:5c:4f:a5:fc:a6:67:bd:84:94:76:f1:45:
a6:ff:0b:1a:cc:e9:29:18:67:df:73:3f:ec:c7:4d:
9d:fa:45:d5:ec:16:f3:c0:ea:1d:7d:7d:82:1f:39:
ef:e4:cd:39:4c:c7:55:47:9d:72:6f:09:58:67:0b:
7c:f9:07:9c:ec:da:ca:34:13:61:61:e5:ad:3a:a7:
99:fe:1f:29:bc:6a:23:11:d7:1f:b7:af:e6:c6:fd:
48:fb:77:75:13:cf:b1:f9:af:ff:13:2a:ad:b7:94:
1a:ed:60:7b:ae:c1:21:6a:3d:40:9c:8b:f7:23:bf:
10:a7:7f:1a:e7:49:de:74:cd:6c:52:16:cf:1a:f0:
88:83:7f:1f:df:6e:ab:f3:a2:e7:fe:b0:c4:4c:2e:
52:04:0d:c7:91:6e:37:5c:63:cd:d4:40:f1:a1:e3:
91:4a:21:c1:a4:09:40:b7:65:3f:94:ca:67:26:04:
a0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:D0:75:DB:B0:6A:99:CF:61:E3:D1:47:12:03:27:64:6D:88:AD
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_PPQdduwapnPYePRRxIDJ2RtiK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.242.0/24
31.222.249.0/24
185.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7c:56:d4:f0:bb:79:bd:4e:94:cd:3e:02:bc:b1:05:f3:a6:
2d:98:eb:e1:7b:39:d6:10:e0:f9:30:53:05:a4:c6:87:c2:db:
75:59:25:b8:93:c2:1e:4e:5c:76:a4:e2:e0:f8:ab:ff:fe:85:
8c:4e:24:c6:74:de:a9:59:98:1a:9f:70:ad:b3:41:b8:bd:65:
86:f3:45:2a:0c:10:fe:d2:1f:43:cd:3a:96:b0:48:55:88:57:
c5:c6:6f:b4:7c:74:79:f2:be:0d:39:73:cc:b7:8a:67:a9:a3:
25:68:ae:38:44:67:b5:a7:b8:09:2f:12:7f:58:69:01:4d:e7:
73:49:ae:ab:b9:d6:1c:98:d0:37:b2:33:84:ab:3f:47:de:6e:
4c:89:39:08:e0:98:51:76:d8:9d:6b:51:38:61:ee:7c:10:fd:
65:f6:9c:9f:c0:a9:8d:a3:b3:63:76:e7:d1:c0:07:a9:87:99:
ef:ae:b0:28:fa:b9:93:f1:66:32:8e:f2:89:66:2a:d7:ae:0e:
52:e0:7c:f5:29:aa:02:46:55:9f:b5:8c:eb:64:e9:70:bc:65:
00:9c:37:85:98:11:dc:f5:e1:da:3d:ae:89:16:5f:f3:cd:b4:
59:71:d4:cf:d7:63:b1:81:80:1d:b2:1b:85:2d:28:0e:f6:58:
34:d7:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:37:41 2024 by rpki-client on console-ams.rpki-client.org