Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Er7qUKk82MjO51GsqWelczfZ_c.roa
File: _Er7qUKk82MjO51GsqWelczfZ_c.roa (raw, json)
Hash identifier: xXS+2VouRsxu3kZVN0U2TjFXYYSew0bohqpX9WLRmhw=
Subject key identifier: FC:4A:FB:A9:42:A4:F3:63:23:3B:9D:46:B2:A5:9E:95:CC:DF:67:F7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018E9EA212CDDEA7E60B6A016CC0151BA0F2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Er7qUKk82MjO51GsqWelczfZ_c.roa
Signing time: Tue 02 Apr 2024 11:46:45 +0000
ROA not before: Tue 02 Apr 2024 11:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44975
IP address blocks: 31.148.1.0/24 maxlen: 24
31.148.174.0/24 maxlen: 24
31.148.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:a2:12:cd:de:a7:e6:0b:6a:01:6c:c0:15:1b:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 2 11:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc4afba942a4f363233b9d46b2a59e95ccdf67f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a5:70:f7:92:ee:7d:bb:8a:c8:75:a6:e1:3c:
28:17:7d:aa:ff:07:dd:1e:2d:aa:fd:36:e7:32:f0:
cd:83:fb:15:60:0e:32:ae:e7:35:3c:73:03:f7:32:
7a:41:91:08:aa:36:0a:69:1e:97:28:56:b8:9f:88:
23:12:d8:06:11:4d:4b:03:a9:c2:89:b1:0d:44:3e:
9d:d2:84:92:f2:6f:d5:8f:8b:c5:41:4e:c8:17:79:
15:5d:d5:11:37:38:c3:89:92:92:5e:db:71:9f:ca:
4f:ab:ea:8c:76:4c:83:d5:fa:0a:0e:78:53:eb:c6:
bd:b5:cd:ec:8a:97:7f:15:65:78:12:8d:de:66:2f:
42:f6:45:30:3e:49:7d:84:b6:86:0c:89:51:97:7c:
aa:ee:cf:c0:7f:b9:b2:7a:19:82:ad:70:91:ba:36:
43:42:a6:9c:00:2b:28:11:f2:5b:47:f7:e7:90:6b:
8d:b1:94:7e:46:96:af:3b:95:b3:2e:d3:d8:af:5d:
f7:0e:1a:5a:01:fb:27:2a:39:ed:d4:5e:8f:eb:cb:
ab:c7:d5:e4:b6:34:f9:78:d3:f8:a2:96:31:37:44:
84:ff:02:e7:3d:93:c5:2c:b7:27:e3:a9:46:a4:82:
78:5d:ff:5f:48:17:60:0e:3c:db:67:a6:16:27:10:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:FB:A9:42:A4:F3:63:23:3B:9D:46:B2:A5:9E:95:CC:DF:67:F7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Er7qUKk82MjO51GsqWelczfZ_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.1.0/24
31.148.174.0/24
31.148.204.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ca:4e:e9:29:a1:37:ca:e3:23:31:7d:0b:c4:49:46:cc:1f:
7f:d9:da:09:c0:85:19:92:94:2d:07:f8:61:83:68:eb:84:76:
66:36:d1:5e:44:94:b9:9b:b5:f8:76:30:cc:b7:a1:90:02:57:
29:bb:d8:7c:c3:2d:b0:62:dc:b6:0c:51:ff:50:a2:47:77:45:
6b:ba:78:eb:00:58:7b:87:2d:00:49:3b:a8:ae:21:a9:54:6b:
d0:54:cc:c6:c0:67:ca:d5:e6:26:54:74:f6:cc:06:f1:ed:f4:
2b:c4:9b:05:fe:10:09:ba:ad:13:47:e4:d7:a7:34:3d:61:4c:
28:44:9b:46:51:ed:5d:0c:02:10:00:e6:f7:14:ca:c8:af:e9:
a3:ad:12:65:36:8e:57:04:f3:40:de:fd:4e:c8:8d:3c:92:ae:
16:fc:30:20:8a:15:a9:a5:56:ee:49:1c:d5:15:18:46:2a:76:
31:a0:5c:28:f3:1b:a7:e9:6b:5f:57:3e:8e:83:a0:d5:e9:96:
a8:ba:df:db:52:5f:ec:fd:c0:35:19:5d:3d:29:21:63:f4:54:
63:bb:09:16:ee:87:7f:dc:f2:4c:57:e2:fa:64:24:88:6c:06:
3f:ed:c5:0e:fd:a8:ee:89:ad:ed:af:47:9c:3f:bd:56:a2:57:
78:2f:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:59:55 2024 by rpki-client on console-ams.rpki-client.org