Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rALppqkVDWP9k2qj6ETIVkeK-rw.roa
File: rALppqkVDWP9k2qj6ETIVkeK-rw.roa (raw, json)
Hash identifier: c3AiJuNhARbk5sW7W7g2o2VyVNmbld4cfT8HPav6JnA=
Subject key identifier: AC:02:E9:A6:A9:15:0D:63:FD:93:6A:A3:E8:44:C8:56:47:8A:FA:BC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A2075914EDE1845E1BE4F9E36284E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rALppqkVDWP9k2qj6ETIVkeK-rw.roa
Signing time: Tue 02 Jan 2024 12:33:27 +0000
ROA not before: Tue 02 Jan 2024 12:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60028
IP address blocks: 31.148.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:20:75:91:4e:de:18:45:e1:be:4f:9e:36:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac02e9a6a9150d63fd936aa3e844c856478afabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:17:ea:67:04:5c:1f:55:4d:6a:e4:01:95:
f1:e0:47:8a:f0:35:00:cb:72:f6:7a:6f:c1:95:cc:
e7:98:e1:d0:9c:ef:69:18:50:dd:72:bf:43:58:b1:
60:7f:74:b7:4c:5f:ea:20:72:1e:46:e0:78:7b:a1:
a3:12:d6:04:f7:c8:fc:c9:57:6f:d9:79:b8:22:20:
fb:0e:6f:35:bd:3e:e3:ea:79:24:53:1b:57:5e:00:
50:bb:05:f1:cb:cd:29:eb:4a:a3:a4:ea:3d:cb:4e:
f9:7d:83:6a:2f:07:14:bc:65:9e:e5:e5:60:e6:1e:
2b:43:f2:ba:f7:58:7c:ee:5a:1e:0f:67:4a:dc:78:
3a:99:fe:57:f4:bd:96:b4:16:27:ab:2e:34:8d:10:
a9:2e:12:75:2e:44:58:4c:f4:4a:dc:ec:1b:61:36:
29:43:4b:cb:e8:a9:ac:5c:99:8f:6d:84:30:f6:93:
89:76:af:d7:94:a8:e2:45:69:24:a5:a3:97:45:74:
c2:97:82:7a:5e:d8:b6:c3:e1:5e:ae:42:1a:b5:ef:
0f:72:5b:dc:65:f6:fe:4f:f9:09:38:ba:5f:c3:28:
ee:7c:ed:2f:9b:1c:b0:7b:c2:41:3c:0e:41:99:27:
61:f7:7c:a4:fb:47:df:09:7f:c1:95:02:4c:c0:e5:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:E9:A6:A9:15:0D:63:FD:93:6A:A3:E8:44:C8:56:47:8A:FA:BC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rALppqkVDWP9k2qj6ETIVkeK-rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.4.0/24
Signature Algorithm: sha256WithRSAEncryption
84:62:5f:f5:14:74:33:ff:6e:b1:15:2e:ca:b7:c0:5d:e5:4f:
e5:0f:be:50:01:f3:3c:26:76:22:e8:c1:ce:ad:33:07:43:92:
34:16:03:2e:0b:a4:64:c0:5b:60:2f:f8:c8:52:45:23:ce:47:
7b:8e:ce:1e:f4:68:f6:24:69:83:b6:8b:37:f8:7b:4d:ab:0f:
03:31:b2:d9:75:e3:b9:8a:2f:15:f3:dc:17:82:26:d5:6a:e3:
02:13:27:16:24:49:bb:8d:ca:1a:49:d8:4a:d0:e4:4a:d8:5d:
0c:4c:2c:39:83:c9:cd:4c:97:6d:11:8d:69:ec:26:b7:d8:e0:
bc:7b:8b:3c:a9:65:77:35:99:bc:90:5d:23:7e:7f:8c:eb:d5:
69:f7:c9:92:d1:43:0f:63:14:0a:58:e8:93:a5:58:93:5b:23:
41:34:ed:cd:f0:23:94:6a:9d:18:d8:0d:35:59:81:82:56:d5:
80:f7:4d:42:c9:2f:3a:18:3e:30:0e:67:d7:3d:fb:8e:b4:6e:
9e:ed:a5:99:b5:ec:1b:04:5a:c8:c9:6a:4c:fa:aa:46:db:46:
a8:c4:7d:a4:ca:eb:30:f5:b6:08:40:68:24:7d:97:39:61:de:
e6:f3:69:dd:5e:60:9d:e7:d3:cf:cc:88:99:15:9b:0d:a5:ef:
6f:39:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 19:46:48 2024 by rpki-client on console-ams.rpki-client.org