Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/i4VevhW18cfeW1ITCN4ThXh8PNM.roa
File: i4VevhW18cfeW1ITCN4ThXh8PNM.roa (raw, json)
Hash identifier: OQ6RB4BEAjMf6sxcEH7YfDoMZJ6ePLkElDEI9eK9zXI=
Subject key identifier: 8B:85:5E:BE:15:B5:F1:C7:DE:5B:52:13:08:DE:13:85:78:7C:3C:D3
Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial: 018CC348DD92E36CA110BDB3D5EEDD03CBEF
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/i4VevhW18cfeW1ITCN4ThXh8PNM.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50330
IP address blocks: 31.220.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:dd:92:e3:6c:a1:10:bd:b3:d5:ee:dd:03:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b855ebe15b5f1c7de5b521308de1385787c3cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:7f:c5:f3:77:73:40:f9:c6:33:54:35:68:
f4:ed:a3:3a:da:b2:bd:f1:93:09:ab:80:22:a1:ac:
ce:3f:ba:1c:bd:52:e3:c6:00:0b:16:f6:1a:49:01:
fc:ce:40:42:36:ec:db:98:67:56:cd:85:8c:bc:ba:
e0:fd:35:ea:d5:58:35:4b:58:f8:54:76:b4:e1:de:
30:93:26:a2:2e:e8:67:cd:ff:8b:f9:47:4a:bd:ff:
e7:a4:10:77:46:80:a7:44:e0:d3:da:1f:0a:b0:4c:
6d:2e:ce:44:cd:ae:a5:02:89:da:c9:d9:22:ee:07:
5e:35:b6:2a:b0:14:66:6a:08:04:ee:97:cb:90:5c:
cd:15:a1:25:2f:03:48:d0:f5:ee:f0:8f:ea:a7:23:
e9:21:1c:b0:47:79:56:84:21:4d:f4:ad:94:e1:45:
00:bd:55:ae:83:3d:2b:4c:05:61:3a:ff:73:37:d2:
36:bb:02:5e:5a:1f:ae:68:f2:93:ed:32:3f:34:2f:
f5:63:a3:5e:12:f6:ed:d6:59:08:e1:6d:c3:61:cd:
ab:ca:8c:40:b9:7a:d2:11:9a:77:e6:df:0a:2f:4b:
82:46:f2:bc:0c:3c:e6:a6:7e:85:53:08:69:fb:03:
37:13:f1:ac:75:9a:f3:c7:66:bd:29:b3:e4:ce:a2:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:5E:BE:15:B5:F1:C7:DE:5B:52:13:08:DE:13:85:78:7C:3C:D3
X509v3 Authority Key Identifier:
keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/i4VevhW18cfeW1ITCN4ThXh8PNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
54:86:24:cb:34:98:85:8b:e0:ab:d1:db:40:04:ff:43:19:c8:
22:84:44:9f:56:84:70:be:71:6e:e5:e1:3d:a2:e5:ec:76:3e:
be:e2:2d:13:c8:03:e1:d4:c4:54:73:cf:14:cb:93:81:81:9c:
3a:8f:42:c2:f6:e6:60:93:be:0d:09:d1:c6:a2:42:e0:6a:0e:
f9:b1:e4:f4:ef:72:86:b7:be:2c:98:90:72:05:43:fa:51:02:
d6:35:e8:02:6f:36:aa:b2:3c:b6:d9:64:2e:5c:2d:c5:31:6f:
02:d5:41:a3:d8:0e:db:ac:e5:59:ef:6b:03:30:0b:73:28:4f:
3a:53:4b:b3:3c:d6:18:b5:1d:93:97:b3:3b:56:90:d5:a5:b5:
40:fc:25:d1:37:2e:71:1e:d6:f9:00:f4:f4:cd:77:21:7d:f8:
68:65:31:1b:56:86:ff:e6:4b:3e:34:8b:e5:81:e7:08:f6:5a:
87:8a:ed:ae:f0:78:fc:a0:e3:c7:ea:55:34:de:3e:d2:b8:d6:
00:6f:fd:be:0f:05:1a:9d:58:12:c9:9c:9c:cb:6e:93:61:0d:
6d:cf:54:c4:96:73:33:82:fc:03:79:61:f9:34:fd:17:be:9f:
70:b5:d4:a9:75:a9:5c:4c:17:af:63:39:21:d8:29:ce:9d:70:
8c:8e:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:54:08 2024 by rpki-client on console-ams.rpki-client.org