Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_Gp3zVNJjjrfOvF0wL7kCTc10s0.roa
File: _Gp3zVNJjjrfOvF0wL7kCTc10s0.roa (raw, json)
Hash identifier: j7hBVupaGIRBBA1ueQy0Np/tnvMjRIA+9Lyh0y0bsYA=
Subject key identifier: FC:6A:77:CD:53:49:8E:3A:DF:3A:F1:74:C0:BE:E4:09:37:35:D2:CD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7E63F1E943B4A318541761756760
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_Gp3zVNJjjrfOvF0wL7kCTc10s0.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7e:63:f1:e9:43:b4:a3:18:54:17:61:75:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc6a77cd53498e3adf3af174c0bee4093735d2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7a:88:e9:29:45:3a:cb:fa:f7:d8:4c:f5:f5:
51:60:63:69:b1:64:97:8c:c4:ae:43:dc:14:e7:e5:
a8:e8:37:00:ce:b9:31:2d:ef:50:0a:4b:0a:a5:7c:
80:a1:eb:33:dc:41:f7:b8:d9:6c:5a:48:87:db:2f:
25:0e:4e:5f:5a:e3:2a:45:db:e7:7d:da:3d:ca:f3:
c8:80:1f:8b:31:9f:51:81:8e:92:5f:1b:e2:30:bd:
fa:0e:97:b9:0c:56:a3:de:f0:ca:fc:f3:ef:94:cf:
16:ce:23:64:95:fe:af:6b:30:ed:ea:b6:9c:49:fb:
0a:f5:e9:2d:43:3f:89:00:5c:3b:7d:f3:66:bb:e9:
43:fe:f8:2e:32:65:4d:2e:23:b1:1b:2c:55:f0:77:
7a:10:08:9f:37:22:ea:41:28:52:01:0b:b3:4f:4e:
8c:09:69:4b:94:b3:fb:6b:51:8b:d6:11:e5:2d:75:
ee:42:f8:e0:17:1e:3e:be:e5:3b:b8:cf:ec:6c:b5:
8c:b8:58:70:ce:ee:f5:a4:77:84:92:5c:53:69:5e:
70:33:c3:45:06:67:11:a1:8d:4b:12:97:b3:c3:a2:
a1:ca:d8:2b:37:cc:d9:f3:b8:53:5c:3d:f6:f2:ea:
47:4e:cb:71:9b:dd:cd:a7:45:42:ae:38:78:de:79:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:77:CD:53:49:8E:3A:DF:3A:F1:74:C0:BE:E4:09:37:35:D2:CD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/_Gp3zVNJjjrfOvF0wL7kCTc10s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2c:8c:17:15:3d:45:bc:9d:6f:f9:99:50:c6:c7:69:1d:61:
e4:56:aa:ce:34:25:b6:9d:a6:df:24:8b:9e:11:89:af:e6:c1:
04:56:e2:b4:7d:5f:d1:00:57:13:31:f8:26:c0:3c:2a:e1:c4:
bc:cf:a9:20:6a:b0:8b:86:93:96:ea:c4:bc:52:b6:06:d1:12:
9a:59:78:17:a9:65:fd:1e:c0:ce:ce:97:67:2e:5f:32:03:87:
6b:0b:b0:d5:1d:88:52:d5:69:00:da:b6:a6:e4:71:f5:30:77:
fb:a9:6a:c5:ba:8e:47:ef:5e:9c:6c:be:3a:e1:85:61:63:91:
76:e2:56:e4:34:db:17:95:1d:8d:7a:2c:9b:11:f2:15:e3:ca:
06:52:5e:2b:b0:b4:a3:29:3e:4b:54:8e:5a:02:f9:4c:a8:79:
7a:1c:e8:72:63:d0:1a:7d:23:21:d6:e2:4c:08:c9:b6:2d:92:
be:fd:6f:ee:68:aa:ad:df:77:74:ec:6f:54:ea:0d:5c:90:2a:
af:ed:07:6c:d0:49:82:bb:4b:8f:4a:25:f7:36:3c:64:46:fb:
f4:8e:09:f6:d5:8b:62:a9:cf:57:ce:fa:ff:ea:06:cd:18:59:
36:79:76:77:36:c7:6a:f4:23:dd:62:f1:68:80:5c:31:2b:b2:
d8:d2:04:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:43:41 2024 by rpki-client on console-ams.rpki-client.org