Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nxJQKInj-hb2VuuDUlKq2mcZ660.roa
File: nxJQKInj-hb2VuuDUlKq2mcZ660.roa (raw, json)
Hash identifier: eCqPhQ1ocDdYlxkNi/46sgWgmZVSUyE9DTdOBhJcjRU=
Subject key identifier: 9F:12:50:28:89:E3:FA:16:F6:56:EB:83:52:52:AA:DA:67:19:EB:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A32CADFED6150FB8BBC34123D1985
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nxJQKInj-hb2VuuDUlKq2mcZ660.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64490
IP address blocks: 31.148.50.0/24 maxlen: 24
31.148.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:32:ca:df:ed:61:50:fb:8b:bc:34:12:3d:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f12502889e3fa16f656eb835252aada6719ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:68:61:e6:c1:a1:11:d4:43:df:ba:b1:d8:0d:
11:f2:00:b2:f7:44:e6:b9:c8:b5:26:b3:3a:65:5d:
e5:81:6c:ef:da:53:89:3b:07:e4:6c:bc:7c:78:15:
51:d2:79:f0:99:cc:df:b2:1f:c0:63:ce:5e:53:ad:
4e:dc:89:3c:93:fc:61:e5:68:21:f8:10:77:0b:38:
85:a5:14:5a:16:a0:1a:64:35:72:9f:75:fc:92:64:
ac:91:9c:bd:cb:24:d8:7a:7b:0f:a1:c3:ad:a2:91:
ce:39:d1:32:a4:a5:04:02:70:00:0d:3a:ee:9e:f4:
10:6c:e5:79:36:27:f9:ed:17:52:4d:8c:64:33:6e:
6c:ea:5a:90:34:00:e4:87:1e:8a:e3:c4:38:d4:cf:
3b:ba:05:9c:df:fb:5a:f1:65:20:b3:a4:d3:56:4e:
0a:4c:c8:72:7e:66:b0:0b:1f:7d:eb:84:8a:a6:08:
80:3a:d5:d1:a8:0e:19:35:80:48:75:25:9f:a6:bb:
7b:a1:1f:ac:f7:25:fb:54:57:47:2a:bb:6a:32:c6:
23:20:f6:b4:b0:65:99:84:18:a3:13:63:73:56:26:
d6:e9:f1:0c:97:0b:46:cb:e6:08:86:b7:9f:18:af:
1b:2b:af:6c:4a:59:81:93:fb:31:45:f5:8c:02:92:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:12:50:28:89:E3:FA:16:F6:56:EB:83:52:52:AA:DA:67:19:EB:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nxJQKInj-hb2VuuDUlKq2mcZ660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:7e:f6:15:a5:38:46:81:07:d1:90:2c:47:c2:bf:ec:94:d4:
d6:80:78:10:22:cf:d9:99:85:72:ed:99:e9:ea:7a:da:25:1f:
44:1a:75:5f:dd:cc:e5:c0:7e:fc:49:e9:22:49:0e:31:01:5d:
63:74:09:0a:b9:36:26:3d:b8:48:d9:d2:49:5c:b0:30:50:2c:
50:66:7e:70:74:c5:b6:c6:e5:21:d2:01:67:5e:fa:f3:02:29:
12:62:f2:5a:6d:ad:fc:9e:d1:a6:cc:fe:35:0c:8c:22:05:a9:
48:1f:4a:96:10:c2:fb:54:ac:55:bd:37:48:c2:78:8e:b4:34:
1d:04:67:94:f5:44:d2:c7:8e:43:7b:05:28:3f:e6:84:f5:44:
6d:9d:b6:fc:f6:f6:0d:2e:13:42:5c:e0:16:ec:76:9e:06:12:
78:85:ae:40:6e:59:a7:09:94:44:82:d4:e9:44:72:2b:75:53:
42:fe:1d:98:9b:27:ec:e4:ea:46:af:c0:0d:59:e4:be:28:8b:
a0:de:d7:76:c3:74:bc:e7:ee:08:56:a3:09:12:ed:f5:6d:25:
a6:79:2d:56:95:af:3d:ee:3c:3d:48:d3:52:4a:90:e1:5d:9f:
49:ae:04:29:b9:50:b4:6c:ab:da:99:7c:0d:85:56:fc:e5:ba:
40:60:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org