Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-EmZaz9DwoXv6aeJYpDwlFbRY0.roa
File: T-EmZaz9DwoXv6aeJYpDwlFbRY0.roa (raw, json)
Hash identifier: 1Uud6GeNpZqcpgZrsPzX1gOKhTyk1egwCH1wA+W05tI=
Subject key identifier: 4F:E1:26:65:AC:FD:0F:0A:17:BF:A6:9E:25:8A:43:C2:51:5B:45:8D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F232707B1E5E0429B73AC3CA5F27
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-EmZaz9DwoXv6aeJYpDwlFbRY0.roa
Signing time: Tue 02 Jan 2024 12:33:15 +0000
ROA not before: Tue 02 Jan 2024 12:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43301
IP address blocks: 31.148.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f2:32:70:7b:1e:5e:04:29:b7:3a:c3:ca:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe12665acfd0f0a17bfa69e258a43c2515b458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:1d:b0:32:1a:73:8a:85:1d:e5:52:f3:30:
3e:a7:c6:08:86:ca:fe:db:a1:56:6d:5c:04:ef:1b:
bd:31:b0:20:13:89:73:4b:db:80:9e:e0:b0:4b:04:
7e:44:6b:ef:a8:1a:1b:fb:60:1d:23:68:22:45:41:
f4:de:d9:ed:bb:56:95:00:30:92:05:79:a8:89:dd:
84:8b:d6:64:bf:47:2e:15:63:c1:11:fb:ac:bf:2e:
02:a1:0b:76:f6:c3:ec:af:39:f0:a9:75:9f:63:c4:
fb:0b:33:a9:e7:6e:08:95:da:20:be:b9:77:06:bf:
b2:c6:80:82:a7:af:34:56:bf:ed:ca:98:54:f9:98:
50:da:5c:52:d8:3c:05:f6:d7:9b:13:3e:a8:1b:06:
91:97:6d:24:e7:cd:d4:3e:46:83:df:38:20:c4:9f:
38:90:f5:e1:d1:6f:3f:08:04:1b:d4:30:6f:77:68:
25:dd:a0:36:12:43:a7:43:31:f9:41:e1:ef:46:e7:
71:80:e7:0a:e1:3a:bf:d6:ca:58:3d:a9:45:61:3b:
f3:f2:b3:0f:b1:51:51:f5:cd:a4:51:89:76:eb:f5:
b8:01:98:e6:91:f9:6c:77:f0:13:53:84:85:77:c1:
74:f1:3a:78:e3:45:7c:51:bf:0a:47:54:59:28:b6:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:26:65:AC:FD:0F:0A:17:BF:A6:9E:25:8A:43:C2:51:5B:45:8D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-EmZaz9DwoXv6aeJYpDwlFbRY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.206.0/23
Signature Algorithm: sha256WithRSAEncryption
68:54:3e:1f:ec:72:34:cc:8a:b3:d7:e8:d6:58:76:73:d9:e1:
9b:d6:bc:9f:44:94:78:03:e6:29:8d:0a:ce:4a:e0:11:ea:c2:
9a:05:2a:d4:22:38:ff:f6:be:90:ee:ed:15:b6:05:da:15:8e:
15:df:fa:70:47:4e:03:2c:30:bf:f5:3c:c6:05:c3:da:0b:20:
da:f9:f5:6d:1e:99:94:aa:f9:d3:2e:76:1f:54:68:b4:c0:98:
82:64:f7:8e:a6:ca:77:f8:54:a7:d7:05:36:ca:4d:e9:9c:2d:
85:c6:c1:b8:27:e6:b3:5f:d2:75:7c:43:46:82:0e:ad:2f:b4:
c4:f1:67:4a:6d:9d:fe:b3:ab:38:0e:f4:ab:ba:ef:ea:c7:29:
a0:f6:44:fc:8f:de:8f:1f:d0:b2:a8:86:9b:2f:f9:12:5a:51:
ed:45:47:a9:d2:b7:35:57:7e:d4:76:b0:e9:eb:5a:c8:b9:5f:
89:42:71:7b:0c:4c:da:32:2f:30:33:54:87:d7:e7:e2:9b:ab:
7a:a7:75:17:8c:43:71:f0:e0:4f:37:5a:5c:11:67:61:46:f8:
f7:91:ae:e6:0a:81:ff:49:a5:d7:e0:ce:c9:18:e7:dc:41:8e:
d0:36:49:29:04:4b:9e:10:75:25:94:af:9d:40:fb:4f:15:b2:
6a:bc:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org