Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/64jz0fsHIYrhfSnDC8RUFozsFQY.roa
File: 64jz0fsHIYrhfSnDC8RUFozsFQY.roa (raw, json)
Hash identifier: ZEnEAPS+kDPAQt9IpsY8Owv1kiDei8ZhUs9Q5Zl75gY=
Subject key identifier: EB:88:F3:D1:FB:07:21:8A:E1:7D:29:C3:0B:C4:54:16:8C:EC:15:06
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526CFD09C664E83776014623E2D8209B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/64jz0fsHIYrhfSnDC8RUFozsFQY.roa
Signing time: Wed 14 Aug 2024 19:45:59 +0000
ROA not before: Wed 14 Aug 2024 19:45:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35048
IP address blocks: 31.40.203.0/24 maxlen: 24
45.142.252.0/23 maxlen: 23
212.115.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6c:fd:09:c6:64:e8:37:76:01:46:23:e2:d8:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:45:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb88f3d1fb07218ae17d29c30bc454168cec1506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:02:60:78:ce:ee:f2:de:b5:99:cb:12:c2:
1b:c0:74:d3:4d:76:e5:e8:10:af:4c:83:8b:13:e1:
99:e9:b9:4f:47:c4:3b:97:13:d7:66:b3:01:8f:54:
85:9e:c2:10:c1:68:48:5e:08:11:2d:f5:5e:0d:84:
f9:f3:b0:04:a4:e8:3b:f9:8a:65:43:fe:31:c5:a2:
eb:2f:bc:80:2d:66:15:93:02:82:a8:4f:ad:31:69:
0d:72:f4:38:35:de:39:c5:0f:78:de:1a:b0:05:0f:
56:ef:36:6c:39:d0:e3:39:c7:76:32:85:d5:f2:ba:
85:17:12:47:25:ec:16:81:0f:07:38:44:ca:47:40:
20:ea:86:29:51:86:6c:a9:0f:1b:ea:d3:8f:e1:ec:
ae:16:52:44:01:c1:38:19:4a:40:95:e2:6c:35:90:
f6:43:e7:75:f6:aa:52:d6:43:3b:83:c7:21:9b:7d:
24:ad:03:e5:ba:29:69:5f:72:46:c9:1c:5e:31:c5:
4e:3a:1a:c1:d9:36:e4:c2:4c:9e:7c:58:fb:47:3e:
58:23:56:e4:0b:bb:37:ab:ec:1a:3b:7f:a7:3f:fe:
4d:4c:c3:79:1c:3a:08:cb:7a:63:f7:55:29:68:42:
4b:42:6d:18:2e:c0:74:4d:b0:16:d8:fd:7c:ef:ce:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:F3:D1:FB:07:21:8A:E1:7D:29:C3:0B:C4:54:16:8C:EC:15:06
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/64jz0fsHIYrhfSnDC8RUFozsFQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.203.0/24
45.142.252.0/23
212.115.49.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2f:f4:87:2a:3c:b8:a7:35:11:c1:03:a9:7b:07:87:76:7f:
e8:6b:54:a7:78:42:3c:d1:53:38:42:6b:c0:78:7e:45:49:c0:
64:6b:56:b5:7b:8a:c7:e3:d6:40:a9:47:92:2d:df:4f:8c:41:
ff:a9:0c:0e:65:ce:20:a2:2a:97:95:53:2b:a2:61:c5:63:d3:
97:d1:58:a3:39:ce:7c:5a:b2:4d:02:8d:85:82:3c:b0:e7:cc:
55:33:68:c2:ce:ed:a3:0a:df:b7:f0:3f:32:5a:25:6b:c7:ad:
4b:3a:8d:2f:8a:82:56:58:8e:c0:21:d7:43:84:ac:66:0c:36:
c9:17:83:aa:a8:b3:4b:59:db:b0:61:a1:25:2e:61:9b:d1:3c:
43:38:d1:62:b8:2c:11:ae:42:3d:64:eb:89:09:53:14:d0:93:
c3:a1:d5:92:3b:a0:3e:2e:c4:00:f2:05:a0:71:e6:34:f4:3a:
b4:05:00:a8:aa:6f:d0:e8:23:08:a2:f1:87:69:6d:99:b1:47:
9f:c1:64:36:ca:2a:6a:44:6b:ff:19:78:42:bc:ac:5c:a6:6e:
f2:09:81:e2:eb:59:2f:14:d4:4b:4a:da:cb:21:10:a9:f7:ed:
81:cc:66:0b:1d:42:c6:9d:e3:7f:7e:b1:84:4d:d8:d9:99:b9:
34:e1:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:17 2024 by rpki-client on console-fra.rpki-client.org