Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/7HeH0QiPnp19M1HwL9bXORr_POA.roa
File: 7HeH0QiPnp19M1HwL9bXORr_POA.roa (raw, json)
Hash identifier: Sl2Fi/54RCaA+Vja5DRNpBEmPGILRZVGMzIhTWv2vK8=
Subject key identifier: EC:77:87:D1:08:8F:9E:9D:7D:33:51:F0:2F:D6:D7:39:1A:FF:3C:E0
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 018CC5009DDD3DF29C8D986AFC78C6E29946
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/7HeH0QiPnp19M1HwL9bXORr_POA.roa
Signing time: Mon 01 Jan 2024 12:30:01 +0000
ROA not before: Mon 01 Jan 2024 12:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49517
IP address blocks: 31.184.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:9d:dd:3d:f2:9c:8d:98:6a:fc:78:c6:e2:99:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 12:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec7787d1088f9e9d7d3351f02fd6d7391aff3ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:0f:70:71:e9:02:44:93:b9:f9:31:2f:5c:
b8:ef:9d:c9:92:1c:a3:39:a2:cb:04:ae:13:e6:e3:
91:81:07:5c:9f:cb:c4:7b:68:91:c8:e7:0b:97:71:
d8:88:76:75:16:8b:db:13:b4:7a:5a:ed:d1:d2:7e:
9a:54:96:24:81:87:74:03:47:62:92:2b:5d:20:c5:
83:76:d5:a3:ab:6e:31:49:47:71:55:6a:9d:4e:3b:
31:eb:bf:ca:18:31:c4:2e:44:20:8b:3c:b0:6c:d4:
1e:70:c7:66:45:da:7d:e8:75:b0:1d:4f:b8:08:56:
cb:3d:14:e2:9a:e2:b0:2f:04:61:7b:09:e0:78:f1:
c6:3d:d8:c6:7a:9d:12:35:c0:e3:6e:50:3f:6b:d0:
92:18:67:f9:f9:e2:d6:bd:0f:e9:25:c9:0f:b3:1c:
eb:31:62:1c:9a:52:29:da:37:a5:dd:8c:cf:64:56:
a3:ec:b4:b1:50:2f:d7:74:64:b1:93:cb:49:9e:2f:
10:1a:22:22:ca:6e:43:ea:3e:60:2d:dc:42:30:07:
d0:08:32:b3:01:a8:13:b8:3f:a8:07:c3:87:74:50:
47:1d:d9:4b:9b:16:61:36:3c:de:4d:58:2c:16:53:
ca:74:1b:2a:d6:fd:bd:0c:00:5e:11:82:0e:1a:4c:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:87:D1:08:8F:9E:9D:7D:33:51:F0:2F:D6:D7:39:1A:FF:3C:E0
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/7HeH0QiPnp19M1HwL9bXORr_POA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.174.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:88:26:ba:bb:88:c1:06:e0:91:ac:01:ae:3e:48:d7:62:
fd:21:c2:a7:ff:7f:83:65:03:00:48:26:4f:86:3f:b4:73:ad:
23:96:6c:a2:7c:dd:6a:66:17:39:3e:6e:f1:22:c1:fe:64:df:
ca:67:8d:b7:bd:38:10:af:ba:72:fa:94:fd:cd:59:cb:83:a0:
82:10:0b:b6:24:1e:d0:6f:78:87:c2:d6:c3:9c:df:7f:b0:db:
60:f9:e9:7d:97:fa:15:a4:7b:e4:3d:96:09:06:ba:40:30:75:
c4:2c:2f:55:ff:5d:37:8a:2f:64:ce:4b:22:07:ff:63:bf:25:
78:d2:61:02:f1:48:52:3e:81:1a:33:7a:fb:cb:68:2f:48:f3:
81:cf:35:8b:d6:7a:61:02:fd:ef:d9:77:3a:fa:e0:cb:aa:c0:
0a:be:7f:54:44:af:ff:98:10:de:52:e7:b3:2e:93:b6:2c:17:
31:63:1d:5b:3d:c8:dc:a4:f7:2a:b1:3f:fe:4e:e6:7a:16:4d:
41:da:48:05:aa:e0:2b:61:f8:da:48:22:f3:89:8b:29:33:75:
8e:75:9a:d8:f0:ec:af:08:c8:b7:05:02:75:2a:86:8f:c9:e7:
4c:cf:69:12:67:61:e8:ff:60:ca:31:51:c2:1b:9c:64:43:3d:
f7:f2:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:55:00 2024 by rpki-client on console-ams.rpki-client.org