Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa
File: lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa (raw, json)
Hash identifier: Rup0ioyoCeKO4bl3gu1plhaZy+FR134Kh8wcWKANp/0=
Subject key identifier: 94:49:1F:17:42:65:DD:80:26:E7:3B:D0:EF:49:12:AF:AD:30:52:EE
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018CC7947AC2FE32DFE1360E3416BA234556
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa
Signing time: Tue 02 Jan 2024 00:30:45 +0000
ROA not before: Tue 02 Jan 2024 00:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 31.214.244.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7a:c2:fe:32:df:e1:36:0e:34:16:ba:23:45:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 2 00:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94491f174265dd8026e73bd0ef4912afad3052ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:98:bd:57:01:4a:9f:6d:76:ae:e6:e8:f4:
d4:f4:67:2d:c6:f8:57:27:64:e0:a2:67:1b:67:66:
9b:fe:d6:3e:09:94:f7:09:34:f7:7c:f9:dd:33:69:
cd:84:d6:ff:80:a7:ef:b0:0a:c2:ba:1c:d6:70:f8:
86:dc:f5:4c:69:26:0d:fb:2d:35:af:a3:f4:10:b8:
f6:0d:8d:9f:6e:aa:10:ce:78:be:de:de:b7:50:43:
04:13:90:8b:b2:f4:a1:b7:19:f0:cf:7b:7a:83:80:
5e:1d:ea:05:2f:66:a3:36:e7:ee:b3:d7:c8:1f:43:
e7:34:bb:68:c5:82:02:e3:f5:7d:67:e2:67:34:94:
0d:93:e7:bb:65:f2:97:fc:59:99:5b:5f:81:41:77:
43:6a:ee:4b:64:a7:50:66:34:cb:e2:8b:cf:f1:fc:
61:be:5d:35:fd:f4:77:5f:1d:4d:69:b0:ab:65:41:
69:ca:29:21:cb:28:be:18:21:90:d2:39:90:4a:4b:
ac:9f:70:ff:4c:5e:4d:e6:d7:ed:63:66:80:27:fe:
da:ed:02:64:45:86:f7:f8:20:c9:d8:72:b7:28:39:
ee:7e:a9:7c:50:6d:b9:3f:ae:06:d9:62:a3:48:7c:
27:a3:72:57:e4:c5:47:28:a4:3b:69:c7:4d:07:d4:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:49:1F:17:42:65:DD:80:26:E7:3B:D0:EF:49:12:AF:AD:30:52:EE
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/lEkfF0Jl3YAm5zvQ70kSr60wUu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:fc:35:29:f5:3b:09:0f:52:88:c6:6f:55:dc:14:d7:1a:3f:
b6:22:66:f9:a8:f6:e9:28:71:62:24:6b:d4:bf:f8:6e:4d:e8:
e6:8f:2a:0f:89:18:25:96:a8:8e:49:e2:80:4e:f5:dd:f0:70:
84:43:53:c8:e4:6c:3f:24:61:8b:58:15:27:c7:f0:90:61:b3:
cf:70:a3:5d:66:30:50:e5:a6:d7:57:49:4d:7c:4f:b8:bf:c4:
cd:6c:8d:6e:58:34:6f:da:f5:d9:09:05:b9:6e:37:cb:d4:3f:
69:9c:eb:c8:e3:5b:95:cd:3d:1d:ab:3d:e2:29:d5:42:38:71:
10:57:92:c3:fe:43:3e:3f:d1:b7:c0:a8:2f:16:bd:a2:a0:63:
6f:f9:2e:56:ef:79:cf:dc:e1:c5:4b:30:3f:3f:a4:6c:d8:83:
29:06:ef:c3:cb:db:06:4c:cc:90:ec:97:f7:09:16:59:f6:b7:
c0:3b:0e:05:ac:07:6d:82:aa:e1:f1:34:2d:28:fb:53:42:0b:
83:ef:b3:69:ea:d4:c4:50:68:88:68:81:70:d9:a1:c7:35:59:
c1:00:84:5a:9f:72:30:ee:04:4f:40:fd:59:91:0f:97:2e:74:
cf:fb:4d:7b:45:2f:f9:21:9b:74:8a:c9:e3:53:4f:c6:a2:79:
81:86:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:10 2024 by rpki-client on console-fra.rpki-client.org