Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/gdfuNv-Hew51tFd4lOHiu5PUcdo.roa
File: gdfuNv-Hew51tFd4lOHiu5PUcdo.roa (raw, json)
Hash identifier: zXngl4ejXZg8QSW9fah/6ny6n8Oc43vDyqdP+TCIV1Q=
Subject key identifier: 81:D7:EE:36:FF:87:7B:0E:75:B4:57:78:94:E1:E2:BB:93:D4:71:DA
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 018CC26D7B108B8377C7716CEA2814ABC516
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/gdfuNv-Hew51tFd4lOHiu5PUcdo.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200137
IP address blocks: 31.171.210.0/24 maxlen: 24
2a0b:71c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7b:10:8b:83:77:c7:71:6c:ea:28:14:ab:c5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81d7ee36ff877b0e75b4577894e1e2bb93d471da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:5b:b1:0d:90:80:e0:b5:36:29:6e:88:57:
06:3e:3f:ea:50:c3:9d:bc:a2:5d:e8:5a:8e:32:ec:
dc:5a:8f:4f:36:77:fb:3e:70:72:80:46:28:e3:73:
b0:c4:07:77:1c:51:e9:2a:d8:ce:53:9c:5c:6d:90:
77:22:53:67:b5:e8:dc:24:22:fe:31:73:5a:f9:4f:
96:9f:13:70:4b:32:e8:20:e1:54:9b:48:a9:f1:fe:
be:79:67:ff:5a:71:57:bd:50:64:b7:20:4d:17:8e:
85:7e:97:8a:fd:4d:db:b5:1d:eb:98:02:23:3f:54:
db:2f:49:cd:91:51:66:4d:ee:bf:70:7a:66:e5:7f:
fb:7c:22:8a:d1:47:b3:6b:3c:27:8c:75:ac:f0:b6:
8c:4f:4f:6f:1b:0b:64:3b:4b:59:63:08:79:78:1f:
6a:7f:b6:4e:e0:6a:83:5b:ea:42:d4:0a:1a:6f:51:
bd:64:0c:ee:65:5a:32:99:4c:55:b4:35:b9:c3:56:
c0:d4:9e:cc:ca:76:28:44:9e:35:e5:10:12:18:ca:
a7:a2:e0:91:ba:4c:4b:4d:81:7f:85:25:d2:8a:9e:
07:5f:5b:d7:cf:2e:76:17:ef:e9:24:3c:53:6f:de:
ae:9b:00:f6:82:2f:bc:be:3a:dd:63:19:a2:c0:2c:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:EE:36:FF:87:7B:0E:75:B4:57:78:94:E1:E2:BB:93:D4:71:DA
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/gdfuNv-Hew51tFd4lOHiu5PUcdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.210.0/24
IPv6:
2a0b:71c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
04:c6:0b:16:25:b0:67:34:ec:61:09:c5:af:6f:cd:f4:29:20:
07:f7:db:44:84:29:d1:ca:78:86:f0:7f:fe:fd:ff:54:4b:cb:
71:5a:b6:b6:ff:82:66:9b:ec:f2:58:1c:2f:0c:10:ad:79:eb:
e5:3d:b8:cf:ff:44:41:54:29:f5:06:8a:35:8a:2f:cd:dd:7f:
13:1f:9d:89:a3:bc:76:ab:68:51:f2:18:97:f9:6d:a6:c0:f9:
b9:09:23:01:8d:4c:bd:82:8e:d6:6e:55:7f:48:e6:da:59:0c:
64:ea:01:8e:d3:5c:e0:cb:a8:3d:a7:37:be:bb:c8:b5:cc:76:
3a:6d:45:87:86:11:15:19:66:cc:05:f1:77:7a:7d:b9:69:0b:
31:3c:76:33:e4:3f:a0:f6:13:31:04:9e:4a:9e:67:f1:0c:f5:
a2:7c:1f:73:fd:55:b2:6b:4b:8d:4d:9d:75:9b:2c:b4:68:82:
af:1c:e4:6f:8c:72:2c:e2:35:2e:07:1b:99:36:5d:20:75:83:
7e:53:d7:50:d8:5c:d2:dc:02:97:9e:89:89:b8:1e:dc:e4:c6:
df:58:c5:e0:10:1d:29:53:67:7c:d6:5e:ef:81:6f:a1:70:5e:
ee:f7:16:3c:2e:47:5b:6c:b9:ee:5c:4c:57:95:2a:05:57:6f:
5a:0a:18:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:16:48 2024 by rpki-client on console-fra.rpki-client.org