Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2LxddxB8cp4N3aIVllUfOig3bUM.roa
File: 2LxddxB8cp4N3aIVllUfOig3bUM.roa (raw, json)
Hash identifier: uyjQ4G/M1hUVAEepIgCgwU+hzlvmgOBzHv0FNJe23Qg=
Subject key identifier: D8:BC:5D:77:10:7C:72:9E:0D:DD:A2:15:96:55:1F:3A:28:37:6D:43
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0192764D2FB73126631DA554B07C9B470707
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2LxddxB8cp4N3aIVllUfOig3bUM.roa
Signing time: Thu 10 Oct 2024 12:00:22 +0000
ROA not before: Thu 10 Oct 2024 12:00:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51540
IP address blocks: 31.210.39.0/24 maxlen: 24
31.210.44.0/24 maxlen: 24
78.135.84.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
78.135.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:4d:2f:b7:31:26:63:1d:a5:54:b0:7c:9b:47:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 10 12:00:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8bc5d77107c729e0ddda21596551f3a28376d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:b6:d1:0f:7d:c9:78:19:e5:d7:4f:72:ce:
2c:88:eb:a2:c4:e5:6f:38:31:75:ef:c6:51:8e:42:
04:17:97:1c:dc:0c:55:ef:8f:37:bc:0c:0f:f1:78:
3b:45:0b:57:5a:48:3f:54:75:0f:2f:98:52:c3:b3:
74:41:ab:e7:db:8e:b0:5d:95:d7:03:6a:f6:ee:40:
0d:02:14:f0:53:96:48:21:d6:6a:2f:56:a3:41:21:
e9:79:93:24:5b:f0:91:78:26:f4:48:86:64:11:a8:
b3:82:ce:cf:60:e8:ce:2f:b4:b5:b5:8b:92:ce:d5:
16:e8:87:ed:d8:13:ca:25:c6:84:b0:23:a6:8f:98:
f4:df:2e:8b:f7:5b:32:48:d2:ce:b3:05:5a:2b:ea:
1f:fc:e9:05:c8:cd:09:9f:9c:64:9c:78:7b:c6:98:
1d:dc:e4:03:49:39:f9:e0:0e:1f:bb:c2:41:e1:81:
e8:8f:22:19:e6:65:a9:30:ed:36:a6:18:70:84:f9:
6c:1e:46:bf:7d:97:c9:d2:8f:9c:97:24:d9:58:b2:
0b:08:9e:66:72:25:b7:c5:05:ed:cc:5d:56:c7:c6:
44:34:d6:ac:22:a8:06:89:ed:c7:78:dc:f6:65:e1:
b9:85:3b:ff:ed:50:18:7d:5e:9b:82:2e:be:1c:ee:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:5D:77:10:7C:72:9E:0D:DD:A2:15:96:55:1F:3A:28:37:6D:43
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2LxddxB8cp4N3aIVllUfOig3bUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.39.0/24
31.210.44.0/24
78.135.84.0/24
78.135.98.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:26:79:25:f3:bf:d3:28:2c:d2:69:3a:e6:32:c3:ed:5e:a6:
f7:eb:77:32:cc:72:98:71:e6:9f:ff:6f:e3:e8:c7:83:12:2a:
d2:e0:65:f1:75:c3:a6:f1:89:3d:32:7c:43:96:9f:dd:80:05:
40:c9:59:d3:6c:f0:56:7e:f0:2f:2a:79:c4:d1:0c:01:8d:53:
29:73:f3:11:03:ce:ea:26:b2:2b:0e:fa:6a:03:b5:7b:c3:3e:
df:26:c5:97:1c:a8:f3:61:b9:f7:64:42:b1:4e:2f:b6:f4:4e:
06:ea:5f:f8:64:ec:69:c1:12:9b:3d:13:3d:f7:60:1b:fc:ab:
7b:3a:d9:b4:41:95:1f:94:ec:cf:ab:46:e6:a4:b6:b0:7e:eb:
9f:9b:7e:0e:25:02:fb:c9:1c:b8:ca:09:a6:7f:ac:b0:8e:fa:
e8:12:e2:dd:4c:89:91:d8:cc:0c:dd:a1:b0:3f:22:71:f5:c7:
0f:52:b6:11:24:f8:25:6b:c6:0a:66:cf:51:5b:83:86:6b:15:
18:b5:d1:05:d4:36:7a:a5:6a:d6:d2:8d:9b:9d:cb:93:c5:96:
b9:a4:ec:a6:f6:02:8e:61:77:a1:e2:9b:e1:cd:89:78:a6:2c:
fd:28:e0:0f:4e:1d:94:cd:98:e0:cf:fc:e0:51:ed:28:d6:40:
df:54:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:09 2024 by rpki-client on console-fra.rpki-client.org