Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ihpH76-tIjJHdmzhyxuP7iPp_l4.roa
File: ihpH76-tIjJHdmzhyxuP7iPp_l4.roa (raw, json)
Hash identifier: N4I/55I6UMwltksAOqkjdEZqT9D4ViKKwm+9Ho7me9Y=
Subject key identifier: 8A:1A:47:EF:AF:AD:22:32:47:76:6C:E1:CB:1B:8F:EE:23:E9:FE:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A04E47AC781E0A1FD8AC6FCFB9798
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ihpH76-tIjJHdmzhyxuP7iPp_l4.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49491
IP address blocks: 31.148.134.0/23 maxlen: 24
31.148.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:04:e4:7a:c7:81:e0:a1:fd:8a:c6:fc:fb:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a1a47efafad223247766ce1cb1b8fee23e9fe5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:1e:e1:d1:8c:43:6e:c8:d1:2e:b6:80:ed:
e7:53:c6:97:37:4d:34:8f:6d:e1:a9:b3:cd:fc:c7:
df:f2:5c:8a:7a:c7:94:67:d3:f2:75:86:24:73:84:
2c:7e:c7:22:5c:b5:4f:9c:b1:2a:ed:e7:61:0a:6c:
f1:27:56:e5:18:a3:b3:ca:5b:64:5c:c8:cf:4e:b1:
9c:44:1e:b1:88:a6:ec:4c:7c:a0:ba:d5:50:bd:78:
97:4d:49:9a:fd:dc:cc:9b:86:7c:4a:c4:7a:60:ab:
0a:80:04:30:16:dd:0b:32:da:a6:dc:39:50:02:f2:
1a:ca:fc:76:a3:2e:84:33:37:e6:db:82:a3:5d:22:
3e:a0:aa:3d:3f:4f:ce:6c:41:5a:04:04:b8:7a:ba:
01:cd:7d:56:25:f3:39:26:f2:de:69:b8:02:7b:40:
e9:16:c0:a0:a3:82:bc:34:14:0d:73:e9:94:db:23:
2c:eb:a8:30:25:09:be:70:cc:f3:fc:b1:cf:62:e4:
e8:7c:bb:09:c2:57:b9:98:82:28:5e:a7:3e:e7:5e:
d8:33:38:3d:fe:3a:58:42:42:06:27:41:ca:64:fe:
5b:0d:c0:81:a2:20:5f:80:2d:38:11:b5:94:70:88:
18:6a:9f:02:d5:50:c6:38:49:4a:bc:7d:0d:b0:71:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:47:EF:AF:AD:22:32:47:76:6C:E1:CB:1B:8F:EE:23:E9:FE:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ihpH76-tIjJHdmzhyxuP7iPp_l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.134.0/23
31.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
58:59:40:0b:24:94:ff:37:17:76:6e:15:4c:53:5e:98:91:7a:
7a:87:8d:88:b1:85:a3:03:d6:b9:9d:a8:ba:af:8f:0a:b3:15:
96:b1:a1:0f:3a:ef:7f:d9:ce:23:21:67:b0:e4:03:6f:31:dd:
5d:4a:66:33:8f:10:df:64:eb:4a:2d:06:1c:9e:99:29:8d:3a:
05:59:b5:8e:48:6b:8c:06:b3:cd:8c:f4:42:70:4d:29:22:c0:
cc:a8:f9:2b:ea:4a:f6:1d:a7:e7:64:a6:f4:2e:14:b1:71:c6:
22:49:a5:9d:e5:05:06:78:7c:e2:86:bf:28:53:a3:c3:65:ad:
dd:10:f6:2f:26:44:55:f6:33:d3:ba:09:8b:7d:dd:f1:88:ea:
d4:d3:5a:23:c7:04:4b:23:fc:ac:fd:b5:76:7d:35:f8:87:dd:
c3:cc:92:c3:0d:3f:f8:1c:9a:2d:e8:a9:56:39:5b:40:3a:91:
04:bc:5b:71:56:b4:56:48:43:27:1d:66:fd:dd:6b:f2:28:a6:
ef:ea:aa:18:25:a3:8b:0f:e3:3f:cc:a6:58:61:4f:8b:7e:80:
ca:42:36:72:ba:40:16:a5:17:31:19:b7:6a:58:46:74:c0:11:
ca:2c:d9:50:aa:48:b8:28:6f:61:12:6b:8b:b1:97:8c:b2:fd:
56:65:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org