Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4vRCDmd2k5xP8_y1tdFrrzqJF6M.roa
File: 4vRCDmd2k5xP8_y1tdFrrzqJF6M.roa (raw, json)
Hash identifier: VILbG5R4pv1UVr5uxYEhFlEJglfE65NPC3kX0veMNx8=
Subject key identifier: E2:F4:42:0E:67:76:93:9C:4F:F3:FC:B5:B5:D1:6B:AF:3A:89:17:A3
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 018CC727453AD0E1F0DAF05A28BD01947810
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4vRCDmd2k5xP8_y1tdFrrzqJF6M.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35156
IP address blocks: 94.31.15.0/24 maxlen: 24
82.98.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:45:3a:d0:e1:f0:da:f0:5a:28:bd:01:94:78:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2f4420e6776939c4ff3fcb5b5d16baf3a8917a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:db:55:a4:34:91:59:2a:f8:27:6c:50:af:
27:c5:32:e9:5e:b9:32:70:eb:38:77:8a:3e:0f:a1:
c2:6e:33:54:80:48:5e:4f:f6:c0:31:10:66:98:1f:
d8:54:24:d0:d9:35:e8:a9:e0:41:ae:c3:93:a4:07:
ad:60:bd:46:0b:f9:08:3a:d2:99:8c:4f:f5:cd:3d:
d2:e6:16:11:35:36:1b:11:5c:fc:6f:50:d9:2c:87:
21:d1:f8:c2:3c:12:ea:de:45:cc:20:07:24:18:98:
5d:a4:d8:36:e9:31:af:2a:39:cd:9b:ce:63:a1:a8:
09:b3:53:41:43:e5:40:97:9f:65:06:3e:c8:36:ed:
2e:49:f6:3d:87:a2:59:4a:de:5e:ec:88:ae:54:34:
39:d2:df:2a:88:a6:ca:ee:1b:b6:7f:89:ab:72:98:
3a:5a:11:a1:5f:fc:d2:69:26:37:b6:5c:60:bd:67:
38:e1:64:01:b9:66:38:7d:14:9f:c9:fb:45:7c:80:
d9:a8:31:a1:f8:75:d3:02:a2:a9:9d:0b:ab:8a:5a:
c7:1d:d0:07:99:7a:cd:13:1e:5b:45:25:97:70:cc:
7f:71:a9:11:53:72:c5:f3:a0:77:06:aa:d4:31:5f:
b5:6b:54:c0:ae:1b:03:dc:8b:de:96:63:71:bf:50:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F4:42:0E:67:76:93:9C:4F:F3:FC:B5:B5:D1:6B:AF:3A:89:17:A3
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4vRCDmd2k5xP8_y1tdFrrzqJF6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.248.0/24
94.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cb:8c:d3:e1:1a:9c:0b:ca:17:5a:84:1d:ab:17:53:c6:59:
3d:a8:7a:5c:09:b2:6a:25:d8:44:23:e2:41:27:00:d1:e2:5d:
a3:26:5e:ed:a7:ba:93:70:b7:ad:1c:15:23:d9:29:34:63:05:
c6:f6:3b:5f:fc:ae:36:18:e8:b7:37:fc:1e:48:28:99:48:2a:
5b:c5:53:31:03:2d:b3:f5:27:55:06:e9:ae:43:77:5f:b6:15:
8c:ae:03:a7:f6:79:58:e5:04:f2:74:4d:d5:fd:30:ab:ff:d3:
77:1a:bf:d6:48:ee:dd:53:99:b8:73:ac:ec:8c:3c:64:d3:82:
82:bd:93:dd:ef:73:74:fe:11:f7:18:b7:49:f7:1b:2a:d5:0d:
c3:07:5e:f3:ef:fe:fd:84:5d:d8:63:39:da:b7:d1:bf:50:b2:
b6:e6:c5:57:b0:77:0e:6f:55:7c:dc:e0:ca:82:93:8e:3c:43:
ad:03:af:bb:df:2d:2d:5b:78:dc:47:0c:50:7e:ad:1e:a3:10:
c0:7d:c2:cd:87:f2:26:68:40:07:4d:ea:f5:a7:2f:f7:cd:d2:
55:09:74:4a:a8:de:2c:54:d7:40:53:7d:89:7c:ac:b2:c2:52:
4c:0b:02:b0:e9:b0:75:fa:14:ac:cf:1a:8b:76:ac:8a:1b:f0:
ed:bb:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:08:40 2024 by rpki-client on console-fra.rpki-client.org