Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kuHX78b5neyKk_0WFxupfYP5deg.roa
File: kuHX78b5neyKk_0WFxupfYP5deg.roa (raw, json)
Hash identifier: Qd84zwcx27hfrChnxnWCrZTas/IcE13FBYNQEr3lTSs=
Subject key identifier: 92:E1:D7:EF:C6:F9:9D:EC:8A:93:FD:16:17:1B:A9:7D:83:F9:75:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F6059CFA4AE66525E7C55377F8A7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kuHX78b5neyKk_0WFxupfYP5deg.roa
Signing time: Tue 02 Jan 2024 12:33:16 +0000
ROA not before: Tue 02 Jan 2024 12:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44343
IP address blocks: 31.148.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f6:05:9c:fa:4a:e6:65:25:e7:c5:53:77:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92e1d7efc6f99dec8a93fd16171ba97d83f975e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:64:38:cd:2d:c0:d8:28:c7:b0:a8:e5:9a:
cb:86:3a:23:f5:1c:9c:ce:8a:c6:74:60:ff:b5:ba:
ea:a9:91:69:5c:03:5d:af:35:2d:58:3a:77:92:a2:
fd:86:b4:53:a2:bf:3c:c9:96:78:28:aa:2c:f2:3b:
8a:6b:05:27:ef:5d:cf:6e:c6:b0:38:3b:46:4c:c8:
1d:7e:6a:c7:80:fb:da:c7:68:fc:0f:8a:61:40:06:
45:29:1a:99:d6:0b:0f:75:0f:f1:fd:64:99:96:ca:
ab:70:f4:11:00:77:0b:5c:44:9e:24:2b:7c:a5:7c:
e4:9f:7f:d7:89:48:19:8c:56:0c:0c:18:9a:f1:33:
7d:53:f0:a6:14:76:b5:d2:8d:ea:c1:2c:0d:a6:a8:
bc:02:03:93:d5:ae:38:3f:e4:71:fe:26:19:d1:68:
24:41:aa:77:61:5c:1e:41:8c:b7:a5:27:81:d9:99:
70:a1:b4:5f:9d:86:91:65:ca:77:30:f5:6d:e7:c1:
4c:5f:bb:5e:9a:55:35:32:28:fb:c1:62:ba:7d:60:
c1:83:41:10:28:30:0f:6c:8b:80:ae:78:aa:0e:67:
fc:4d:2c:79:d9:e2:d3:14:dc:10:8a:e7:c4:81:64:
b7:49:2f:d1:76:2a:30:72:86:2f:63:11:4a:36:76:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:D7:EF:C6:F9:9D:EC:8A:93:FD:16:17:1B:A9:7D:83:F9:75:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kuHX78b5neyKk_0WFxupfYP5deg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d8:31:5f:92:d8:48:89:c3:a3:80:1c:cd:8c:a5:e7:b0:61:
77:53:75:79:99:aa:38:6c:bc:dd:c7:0e:05:57:9d:d2:73:ef:
af:34:30:c8:07:04:e6:a2:9b:61:44:a7:20:c4:3e:32:e5:ac:
0e:00:44:be:1e:b1:8b:61:8b:62:2d:5e:4d:5e:49:03:5c:21:
26:d2:35:86:81:20:a3:ea:01:de:44:22:f8:c4:47:80:b5:e0:
91:eb:b3:f9:d6:fd:f7:bb:1e:3f:52:46:b0:1f:12:c7:09:68:
7b:37:15:b6:19:ae:ea:a3:3a:b9:5c:da:26:31:6a:21:0c:90:
60:d1:d8:43:c6:89:50:09:47:73:dd:6f:50:f8:3a:52:b9:08:
4a:49:c7:fe:64:17:74:91:ba:8a:4e:04:6b:92:e2:a7:11:6b:
e3:17:81:99:6c:ac:f6:9a:e4:2d:9b:f5:cd:d4:db:1b:a0:32:
f7:16:51:04:51:b8:5f:23:74:7d:20:be:ba:5b:56:67:d4:a9:
b4:d3:7e:94:9c:43:c7:00:43:03:71:06:b8:40:c9:4a:02:2d:
23:28:0e:1b:eb:4a:57:4a:e3:4d:62:f7:1b:6d:ae:55:a7:f7:
ff:8e:06:47:40:cc:81:43:ca:29:d6:3c:40:58:97:90:03:e1:
dd:e9:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 06:41:07 2024 by rpki-client on console-fra.rpki-client.org