Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yj35PShMfwzzFjf_1mjG4bqn_gc.roa
File: yj35PShMfwzzFjf_1mjG4bqn_gc.roa (raw, json)
Hash identifier: gHdPYN68HUydagZJiAnA+lSW4xatSDJYCXHV/LGM5zs=
Subject key identifier: CA:3D:F9:3D:28:4C:7F:0C:F3:16:37:FF:D6:68:C6:E1:BA:A7:FE:07
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A09418365D1671ADA9E7B3B407AA8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yj35PShMfwzzFjf_1mjG4bqn_gc.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50334
IP address blocks: 31.148.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:09:41:83:65:d1:67:1a:da:9e:7b:3b:40:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3df93d284c7f0cf31637ffd668c6e1baa7fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:ff:70:f0:25:3f:ff:e7:f5:bc:43:e7:ad:
fc:97:20:6e:5b:10:9a:e2:a0:c9:66:7c:af:cc:ac:
27:99:a0:ff:54:64:26:f0:ce:9d:6a:64:64:71:39:
20:39:32:41:4a:f1:e5:0d:76:55:0a:66:00:20:73:
d7:5e:e5:92:68:ec:ae:df:54:c2:19:1a:c2:f9:28:
ca:9a:32:9f:89:c2:3a:a5:3a:fa:b9:9f:c0:a9:80:
43:79:ac:30:d1:df:ec:7f:79:6d:f6:c6:91:8c:53:
65:07:96:54:fd:a1:a9:07:ef:d6:6a:1a:c9:f3:ab:
db:08:9e:ef:2b:fb:2f:3e:e7:5a:f1:2f:a6:21:3b:
4f:d3:86:4e:d3:f7:9c:2e:0c:28:35:d8:de:47:9f:
05:b1:14:a9:17:3b:da:39:73:d1:51:11:03:a2:f9:
00:d9:da:aa:8b:7e:66:05:e7:23:ed:04:10:5d:dc:
a1:ff:ad:91:a8:bd:48:9b:2b:b9:e0:84:1a:72:ac:
d9:28:50:d5:05:96:0a:73:f3:30:54:f0:a0:7c:87:
ce:49:20:b1:ce:2e:15:67:0a:f0:16:e6:2d:2f:1e:
e1:f2:4c:34:0d:45:e5:9c:9c:4b:24:a2:2c:52:36:
0b:30:5f:2a:61:a5:00:ff:a1:07:db:99:7b:44:52:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:F9:3D:28:4C:7F:0C:F3:16:37:FF:D6:68:C6:E1:BA:A7:FE:07
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yj35PShMfwzzFjf_1mjG4bqn_gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:a0:59:c6:7d:d7:09:c2:70:86:61:7a:3e:95:e5:c1:61:a1:
08:f5:af:94:6b:d0:a1:82:3d:f3:31:24:db:8e:6d:87:ad:7e:
b2:0d:57:75:8a:42:26:e2:9e:2a:f5:7d:e1:2d:a5:95:6e:4c:
9a:32:14:ea:0f:46:76:96:a7:51:66:48:12:55:52:f0:c3:01:
82:c0:0b:84:3b:b0:20:1a:63:fc:4d:9a:a4:c2:66:4d:19:3d:
8b:60:16:49:d0:1e:ec:49:65:ce:06:58:e3:e0:9e:50:4b:95:
12:4f:28:63:3c:6b:b0:d4:5c:e1:49:05:e1:12:bf:ab:4f:c1:
96:c5:74:8d:79:a9:35:f5:0b:7f:fe:c5:ac:a6:13:cf:52:84:
13:0a:39:9a:64:1d:dc:9e:70:d1:f6:ea:ae:e6:f7:ee:da:69:
4c:1b:c6:e5:c2:86:e4:4b:c8:e8:4a:e8:33:99:27:9f:d5:5d:
85:3f:b7:59:27:b3:d8:2b:ce:e3:ee:37:c1:c4:2e:13:a0:b8:
c2:ec:ac:0d:02:82:db:dd:fc:d8:5e:7e:6d:30:e7:17:cf:0c:
c1:70:f2:6c:d6:5c:17:80:d8:1e:e1:cf:84:dc:34:b8:17:aa:
7b:7a:08:40:60:2c:6d:1d:40:87:66:35:6b:3f:a0:1f:4e:a5:
22:5a:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:25:42 2024 by rpki-client on console-ams.rpki-client.org