Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pJDlZX2he1Eu-BdN5w8u4cmrqDw.roa
File: pJDlZX2he1Eu-BdN5w8u4cmrqDw.roa (raw, json)
Hash identifier: rG/QGr8cD5xftRHPQB72frnfHiRG1Dc7n48XeH7OjCo=
Subject key identifier: A4:90:E5:65:7D:A1:7B:51:2E:F8:17:4D:E7:0F:2E:E1:C9:AB:A8:3C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A11A689B03CA067D159B53617DC87
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pJDlZX2he1Eu-BdN5w8u4cmrqDw.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51962
IP address blocks: 31.148.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:11:a6:89:b0:3c:a0:67:d1:59:b5:36:17:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a490e5657da17b512ef8174de70f2ee1c9aba83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:9e:a6:30:ff:b6:79:3d:e3:ae:05:1a:d4:
25:5a:ce:17:09:60:79:e2:54:bb:e1:1a:8e:4d:4f:
52:99:d6:ce:38:c1:1b:fd:dd:0e:cb:f1:dc:1d:72:
be:bd:da:a2:f9:48:73:bf:4a:37:79:d6:9d:20:a9:
e7:9e:09:0d:2d:2a:a3:1b:f2:c6:d7:81:de:d7:22:
17:63:e8:ef:aa:f0:15:c5:f6:4e:e3:05:47:fd:68:
10:8b:97:57:a6:2c:d9:1e:ef:81:59:da:81:69:74:
b8:2c:0a:f5:10:06:87:63:4b:e3:96:a6:47:8f:21:
80:81:bb:ad:ff:18:b7:56:12:7c:04:55:1e:0c:83:
3e:4d:9f:f3:85:21:71:71:15:e3:b7:28:3a:61:8d:
7f:32:37:bc:87:df:a4:d6:b7:3f:0a:19:b3:19:a9:
46:7c:cc:3b:cf:d9:08:46:9c:ba:c9:e8:51:99:93:
f3:71:fe:8f:25:6f:59:1f:a7:59:88:48:55:81:77:
7b:16:81:c9:01:f7:8e:61:5d:d0:08:79:b9:27:ce:
1e:08:87:53:6b:12:b3:97:29:36:19:a4:9a:8e:7f:
fa:ce:e4:1c:b5:dc:39:51:4e:0f:94:4c:bc:a3:87:
09:e6:d5:83:41:49:0f:05:c3:91:ad:63:12:85:f5:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:E5:65:7D:A1:7B:51:2E:F8:17:4D:E7:0F:2E:E1:C9:AB:A8:3C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pJDlZX2he1Eu-BdN5w8u4cmrqDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:18:f2:de:dc:50:ff:00:db:50:cd:b5:99:d1:a8:f2:bd:18:
53:72:9e:a9:86:15:19:30:6a:4b:47:37:f7:dc:de:38:60:34:
a7:ff:08:a8:78:56:4b:17:1e:32:45:90:c2:84:80:d5:44:d7:
ad:4d:e9:aa:9a:22:a6:a0:87:13:2c:b0:20:bb:16:59:f9:7e:
99:6a:9a:ee:4d:65:6f:32:7c:a1:af:4a:08:d3:f0:c8:1c:0e:
47:3d:4b:0f:e6:53:b6:62:d1:51:a8:fe:ca:05:ed:d8:5b:70:
d7:ae:01:63:cb:19:b7:24:24:d1:88:52:89:60:b0:ab:ad:9a:
2b:d5:15:4f:b8:9f:71:c9:5f:85:2f:de:1d:01:1a:98:ab:26:
67:57:de:12:46:41:ff:e1:da:01:5f:79:f9:99:34:2d:87:f0:
ed:f3:72:85:da:c5:bd:dd:d6:a5:b5:89:4b:5b:bc:b0:9b:51:
7c:a5:16:80:f6:e0:03:37:4e:4b:80:d3:b0:73:48:e3:24:92:
98:f5:85:2c:00:37:ec:2f:7d:21:37:97:00:dd:eb:a4:ca:04:
50:a4:fd:8b:47:91:6c:5e:e4:7b:8b:2a:56:9a:3c:2c:88:63:
b2:d1:c7:be:6c:4a:a6:8d:46:e3:80:a7:ad:1f:d2:35:28:c5:
0b:68:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:37:03 2024 by rpki-client on console-fra.rpki-client.org