Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/n81le59hGcLoCOtVZvEcsPR4apk.roa
File: n81le59hGcLoCOtVZvEcsPR4apk.roa (raw, json)
Hash identifier: Ajzm0FgBlJAY4awvJ4rn03lxu9DHfd531HOEDVYMYyY=
Subject key identifier: 9F:CD:65:7B:9F:61:19:C2:E8:08:EB:55:66:F1:1C:B0:F4:78:6A:99
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 018CC56E25C8A588B6C1FAECAFA886E1626C
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/n81le59hGcLoCOtVZvEcsPR4apk.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50245
IP address blocks: 109.206.160.0/19 maxlen: 24
91.229.94.0/24 maxlen: 24
31.133.208.0/20 maxlen: 24
62.122.168.0/21 maxlen: 24
91.227.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:25:c8:a5:88:b6:c1:fa:ec:af:a8:86:e1:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcd657b9f6119c2e808eb5566f11cb0f4786a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:b0:6c:33:b5:5c:44:18:36:b9:7a:63:a0:
c7:7f:a1:b8:20:8f:e8:79:6a:17:8e:95:c8:14:67:
02:4a:5d:4f:1c:d6:90:4a:de:73:0a:a9:0d:80:f3:
24:17:f9:bf:39:f9:b5:a7:43:9f:65:86:33:39:28:
a6:aa:b6:59:5d:e0:42:61:91:2b:1e:39:e3:c9:14:
ae:c5:f5:15:9b:e1:da:69:2f:18:b1:eb:ef:05:59:
8e:19:2b:a0:39:13:de:33:d2:9e:1b:83:b6:9a:c1:
3a:37:d3:57:6d:1d:fe:7f:1a:1c:01:dd:7e:a9:6c:
01:ea:8b:1f:90:4f:71:5b:3a:ce:1c:f9:5a:e8:a5:
f5:9f:e8:02:6d:43:09:77:c1:31:b2:11:4a:e1:45:
81:21:ee:f8:13:9d:ed:0c:5e:fd:aa:e6:a5:f2:13:
3d:88:5e:10:4a:5f:e1:fc:a0:aa:1a:f1:a3:81:e8:
a4:c6:38:de:05:b2:6d:d3:7a:90:fc:67:9c:0a:33:
00:e6:ee:49:63:21:58:d4:6e:f3:07:44:3f:78:5a:
a4:2c:cf:0a:52:a7:62:6e:c5:5e:fc:10:55:85:8b:
61:3c:ff:be:dd:81:53:ec:bf:7f:7b:92:49:91:9f:
c3:91:ed:82:36:88:05:cc:f9:97:9d:44:ac:c7:fe:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CD:65:7B:9F:61:19:C2:E8:08:EB:55:66:F1:1C:B0:F4:78:6A:99
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/n81le59hGcLoCOtVZvEcsPR4apk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.208.0/20
62.122.168.0/21
91.227.144.0/22
91.229.94.0/24
109.206.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:a0:89:8c:d4:05:47:93:cb:9b:ed:03:4f:6b:ec:3f:ed:0e:
4e:d5:e9:ac:22:a0:3e:7d:38:3c:02:8f:6b:3c:19:9f:8f:7f:
0c:55:72:6c:75:db:39:75:d0:47:ee:2b:75:60:a5:7f:71:bd:
54:b1:30:22:90:6c:21:52:84:2a:eb:d6:31:27:7c:62:1c:d7:
ec:d2:06:e2:a1:b9:67:1a:01:a2:ab:b7:3b:e0:71:90:96:9f:
bc:6c:9d:77:19:8e:6c:14:38:42:51:6c:81:8a:23:8e:04:f9:
47:b8:30:58:e3:41:59:a2:84:24:54:e1:e2:28:f4:33:e2:19:
ac:db:b8:b9:53:5b:10:b4:4c:d9:57:e1:9f:6e:c3:4c:b6:0d:
48:0b:aa:aa:5f:cd:41:1c:e2:93:07:28:4d:7e:b2:5a:84:87:
6c:ea:88:77:d7:d5:3f:56:20:56:9b:e1:31:9d:c8:9c:58:04:
43:f0:6f:12:5c:7e:37:71:98:64:9d:ac:68:66:89:b4:2a:b3:
fa:42:34:22:29:c7:e3:70:6e:4b:c7:56:37:16:a2:8a:f9:2f:
e8:ba:6d:ae:70:fe:22:9f:d8:7d:db:58:c9:67:d1:6e:81:aa:
e5:bf:a0:97:96:eb:e9:4d:c4:bd:e7:c3:b9:c4:9a:be:0d:f8:
13:6b:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 01:38:49 2024 by rpki-client on console-ams.rpki-client.org