Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h1ZTC7E_xBHAohjG4hD3w3ATOv4.roa
File: h1ZTC7E_xBHAohjG4hD3w3ATOv4.roa (raw, json)
Hash identifier: NZGXkJLfkg8RvFIUjCuDQuJ9rUBOSoeZAFc/b36jgrQ=
Subject key identifier: 87:56:53:0B:B1:3F:C4:11:C0:A2:18:C6:E2:10:F7:C3:70:13:3A:FE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019224654328CF7B2CBCFEA1AD7AD063BBB8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h1ZTC7E_xBHAohjG4hD3w3ATOv4.roa
Signing time: Tue 24 Sep 2024 14:17:49 +0000
ROA not before: Tue 24 Sep 2024 14:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47673
IP address blocks: 31.148.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:65:43:28:cf:7b:2c:bc:fe:a1:ad:7a:d0:63:bb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 24 14:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8756530bb13fc411c0a218c6e210f7c370133afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:b8:45:20:f4:81:e1:eb:58:e1:a3:5e:e0:
a8:a2:8c:76:53:72:0b:92:d4:fa:54:9d:e4:18:74:
21:0d:4e:1f:5f:b9:41:ee:f2:04:bf:4b:0a:fb:1b:
fd:09:44:3b:fb:d5:c9:b9:e0:40:4c:db:8f:34:1f:
d6:d7:13:35:4c:52:5e:bd:6d:14:5f:47:53:b6:07:
74:5d:5a:8b:ec:b9:07:71:f3:0d:79:6c:b3:88:71:
8a:0c:9d:8d:d5:50:57:d3:b4:8f:7d:de:5d:3b:46:
8c:b6:ae:cf:ea:15:0f:10:9b:79:79:f2:60:55:e1:
56:59:6a:f1:34:3d:95:9c:4c:c3:0a:1f:22:bf:5a:
74:bb:77:c1:c5:97:e5:f4:d0:41:f3:c4:3a:4f:5c:
5b:e1:0f:d4:3b:ff:1f:c3:36:35:43:92:dc:b6:de:
9f:55:3e:bf:57:00:0e:af:a2:46:82:67:c2:ca:a0:
a8:91:34:8c:fb:1a:74:dc:ef:32:57:c2:22:f7:b0:
23:5a:30:97:b7:9e:e1:69:4c:43:63:3a:e4:62:04:
e7:c5:80:68:8a:3e:52:2f:a1:d4:f1:6c:de:8a:a7:
88:03:a5:a5:67:a3:5c:d1:44:cb:65:64:e3:48:05:
67:2f:ba:a3:65:72:26:97:00:e1:f0:98:3d:45:4f:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:53:0B:B1:3F:C4:11:C0:A2:18:C6:E2:10:F7:C3:70:13:3A:FE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/h1ZTC7E_xBHAohjG4hD3w3ATOv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.28.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:88:80:63:dc:38:f4:18:bb:99:83:a5:9a:64:93:58:93:7b:
0d:17:f9:56:13:ce:9a:ac:92:e9:25:47:c7:8d:f6:0b:d1:fc:
ad:2c:f3:27:58:85:e7:c2:90:94:ab:de:8a:20:11:57:be:e6:
69:73:16:b3:68:bc:80:b4:7f:cc:5f:60:11:be:2f:a2:f8:2b:
ba:e3:68:5d:8f:c6:d7:9f:77:06:c0:f4:34:be:32:cb:ba:eb:
bb:8a:74:6f:ca:e4:0e:25:31:fd:2d:2d:19:fc:73:62:9d:59:
54:29:46:92:31:50:f9:2f:6e:41:c3:f6:05:41:ef:3c:85:a2:
14:64:74:ad:54:74:6f:4f:3b:2c:da:aa:2e:0c:fb:7a:3c:e1:
0e:94:c8:9d:9d:0b:58:6a:a6:c6:73:7b:21:ab:2e:d8:fc:d7:
32:e0:12:84:5f:57:b9:04:42:39:a3:2a:00:08:92:ce:df:56:
97:23:02:f3:45:8b:4f:b2:ad:31:80:0d:3b:a9:24:1f:9b:36:
13:4e:c4:6d:7c:fe:96:30:30:9a:84:96:17:3d:de:6c:9f:e3:
bf:90:51:8f:0f:2f:2e:40:b8:14:d0:1e:a3:69:77:29:06:fc:
b8:22:c8:65:58:aa:16:25:fe:b8:e6:72:14:6c:3e:83:e9:f9:
7d:51:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:31:03 2024 by rpki-client on console-ams.rpki-client.org