Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/j3OcKHTnZaoKq6bQps4MJEerV8o.roa
File: j3OcKHTnZaoKq6bQps4MJEerV8o.roa (raw, json)
Hash identifier: Sk4vl8ljSP+fyXUzoE8O7tvUmIURy8+figXpD5UDvuk=
Subject key identifier: 8F:73:9C:28:74:E7:65:AA:0A:AB:A6:D0:A6:CE:0C:24:47:AB:57:CA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01934FEC5A798450F996219F2326D87E781F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/j3OcKHTnZaoKq6bQps4MJEerV8o.roa
Signing time: Thu 21 Nov 2024 18:11:49 +0000
ROA not before: Thu 21 Nov 2024 18:11:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
212.68.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:ec:5a:79:84:50:f9:96:21:9f:23:26:d8:7e:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 21 18:11:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f739c2874e765aa0aaba6d0a6ce0c2447ab57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:57:36:70:f2:90:c1:5b:cf:87:78:63:f4:
67:c9:37:c4:da:67:50:f4:31:e5:75:0a:5c:f5:98:
f8:48:7c:ab:df:90:1a:47:df:ff:de:98:4e:d1:3a:
8f:f0:38:68:bb:6c:54:71:32:50:e3:b0:f0:59:68:
70:36:86:cd:8e:34:19:e6:43:2c:bd:db:0b:94:d3:
00:79:9c:27:70:65:e0:06:97:a4:e0:29:ad:0f:a8:
08:f9:21:7a:1a:ae:a4:15:77:bb:d1:ed:be:8c:72:
c3:21:d1:f2:98:33:4a:ed:32:3b:28:c9:ae:4b:b7:
3c:6e:cc:26:54:77:29:27:28:a3:d1:d2:71:94:7d:
6d:79:db:d6:16:bb:35:fa:9e:99:20:11:af:d2:7c:
64:1f:a8:4b:80:18:05:a1:a7:fe:9a:98:54:bb:61:
55:cc:32:06:df:2c:83:19:00:12:e8:85:c9:31:51:
fd:20:01:a9:46:05:4d:99:4b:25:0f:79:30:3b:76:
10:ff:b3:30:7b:32:28:73:10:37:11:2c:8e:bb:50:
ea:e8:5a:b4:7f:b3:a7:b0:b3:dc:9d:1c:f7:2d:b5:
64:a0:0d:72:bc:bc:5c:8d:fa:db:b2:b4:5d:d9:a6:
4f:65:8a:c1:e4:36:e6:f8:ba:9d:2a:4c:c7:10:ce:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:9C:28:74:E7:65:AA:0A:AB:A6:D0:A6:CE:0C:24:47:AB:57:CA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/j3OcKHTnZaoKq6bQps4MJEerV8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.53.0-31.210.54.255
77.92.148.0/24
188.132.170.0/24
188.132.215.0/24
188.132.227.0-188.132.228.255
212.68.36.0/24
212.68.49.0/24
212.68.56.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:b8:f8:cd:b9:b6:f0:51:13:c5:c6:63:62:11:a2:a3:92:
bf:b1:7e:ca:84:ca:9a:a3:2d:d9:fe:c9:d1:fb:cc:a3:2f:c8:
45:40:f2:51:4d:05:94:e6:fb:24:ab:ed:7a:8f:24:6d:74:37:
b6:b1:8f:a3:85:48:e9:93:f6:0a:cb:6e:1d:8a:8e:77:b8:79:
4e:e3:3a:c9:7a:a9:0e:d0:6b:8a:0b:9c:3b:3b:df:59:46:bd:
96:bd:05:55:14:56:57:bc:ee:82:a2:8f:88:6f:eb:ca:f5:1f:
5a:e6:42:7d:c8:4c:b9:50:c8:6c:5e:da:d5:89:9a:10:c5:c8:
85:35:98:5b:f4:bf:28:f7:74:cf:aa:05:fa:34:a0:7a:0e:cf:
5c:38:a0:20:f0:6f:d2:76:ae:1f:19:77:fd:66:f0:65:b8:a0:
a5:7d:51:d8:59:a9:e2:78:e2:57:50:08:95:ab:ce:2b:8a:3f:
36:38:61:7a:94:6b:4f:15:7d:1a:e8:3d:e1:cd:41:4a:ad:b8:
6f:2b:4e:02:91:de:cb:9c:e4:06:79:ee:82:3f:0d:41:44:ca:
9e:68:90:30:d0:e6:a6:f4:f3:69:bd:09:bc:c6:87:97:2d:4e:
4d:52:c7:64:12:0f:62:62:82:6e:4d:99:a2:c8:c8:d3:1b:e8:
89:be:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:35:48 2024 by rpki-client on console-ams.rpki-client.org