Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DEdqASNJnFj8VewA2DuBOSIVV5I.roa
File: DEdqASNJnFj8VewA2DuBOSIVV5I.roa (raw, json)
Hash identifier: 4mpmtdnp09Nb888xnIeAT/MBQm1kaSBZhct+l78cneM=
Subject key identifier: 0C:47:6A:01:23:49:9C:58:FC:55:EC:00:D8:3B:81:39:22:15:57:92
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018EAEAA84E84EAB8F059C3B21B9FB9870FC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DEdqASNJnFj8VewA2DuBOSIVV5I.roa
Signing time: Fri 05 Apr 2024 14:29:54 +0000
ROA not before: Fri 05 Apr 2024 14:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207983
IP address blocks: 31.210.54.0/24 maxlen: 24
78.135.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 13:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ae:aa:84:e8:4e:ab:8f:05:9c:3b:21:b9:fb:98:70:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 5 14:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c476a0123499c58fc55ec00d83b813922155792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:3d:2c:7a:2a:05:1b:3b:3d:26:8e:c7:e3:
0a:a3:16:9b:e0:dd:3a:4e:be:bb:34:79:9c:13:c7:
61:38:6f:97:ac:6e:05:5f:3b:77:57:d0:e2:48:65:
8e:cf:d8:fe:9d:9a:fe:d5:2f:51:18:77:be:c5:d1:
9d:97:a5:06:36:8d:a4:1e:0d:5d:58:bf:c9:4a:29:
4e:53:dc:6f:8a:c1:7c:d1:f8:d5:9e:4e:7e:02:0e:
f2:0b:3d:ed:b5:5b:a1:91:92:f0:68:8e:e0:af:2b:
58:7f:b7:4f:f8:72:b7:bc:21:23:69:c6:da:93:0a:
88:6c:21:e0:75:64:8b:77:29:ac:64:fd:ab:8e:93:
ca:13:34:e3:c4:cd:60:56:73:fe:b3:ea:96:6f:40:
0a:9e:47:85:16:6c:28:4e:ce:2a:5c:8b:58:62:16:
70:1c:f5:19:92:97:cc:df:f6:da:52:15:e4:ce:fd:
d5:ec:78:41:0d:26:a6:a0:a0:3b:b5:8a:77:43:2f:
b7:b1:f4:ba:ab:9e:c2:a3:64:68:56:59:8c:fe:4e:
ee:f2:1c:74:8d:12:43:15:e3:f1:21:e6:42:49:d4:
fc:f4:16:58:90:55:a1:39:01:be:bd:f1:e4:cb:c1:
31:25:87:18:28:8b:b7:8a:54:c9:0f:ca:d6:ed:f6:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:6A:01:23:49:9C:58:FC:55:EC:00:D8:3B:81:39:22:15:57:92
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DEdqASNJnFj8VewA2DuBOSIVV5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.54.0/24
78.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f4:a8:bb:ce:7f:6a:1d:5b:3a:30:40:48:68:e1:66:2c:95:
44:13:00:21:d3:f5:9a:ab:62:65:b7:c7:f9:f1:72:ed:79:73:
9f:87:44:f1:60:23:c5:1b:42:82:cc:04:d6:47:5c:a9:de:bf:
50:7a:27:90:c4:36:23:bf:a1:29:d5:90:d5:fd:a5:2d:7d:01:
fc:f9:11:2b:6d:35:6a:9a:a1:f5:5e:7b:c3:1b:54:b6:11:fb:
a6:be:39:6a:f1:a7:0c:95:94:5d:bc:72:11:50:1f:1d:13:be:
7a:a4:08:8a:ba:92:95:20:c0:1c:43:6e:be:28:a0:c1:1b:57:
6c:20:41:c3:98:7b:6d:a9:21:78:95:60:ac:f1:63:74:76:6b:
b0:54:45:98:85:b0:64:28:25:71:59:d4:76:e3:8e:5d:7a:af:
2e:d2:d9:ee:32:0f:00:38:55:c2:9d:1d:e8:8c:02:02:d9:b9:
6d:08:f8:ad:58:d9:12:9c:5c:e4:8c:39:97:f6:b2:69:36:b2:
b2:33:40:c8:6b:32:f3:f4:3c:a3:ba:a0:5e:8b:b8:16:ef:1c:
27:17:4b:1f:57:46:34:30:8a:2b:bb:84:99:8e:e1:cd:88:b2:
71:b3:74:9c:fe:83:51:c5:d8:5e:83:bd:84:a6:44:8e:b7:fe:
55:50:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:54:49 2024 by rpki-client on console-fra.rpki-client.org