Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/So32SZVe_IQfBvpotWc1aBOFa3c.roa
File: So32SZVe_IQfBvpotWc1aBOFa3c.roa (raw, json)
Hash identifier: aEotD/UGmlCMwBSq7c6Mhjr3WOmVT5TTH30Yrm7j4dg=
Subject key identifier: 4A:8D:F6:49:95:5E:FC:84:1F:06:FA:68:B5:67:35:68:13:85:6B:77
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EE357848B0C2ED03FBC6D97BD0BD24C8C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/So32SZVe_IQfBvpotWc1aBOFa3c.roa
Signing time: Mon 15 Apr 2024 19:59:07 +0000
ROA not before: Mon 15 Apr 2024 19:59:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 31.40.202.0/24 maxlen: 24
45.91.239.0/24 maxlen: 24
45.95.31.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
78.142.239.0/24 maxlen: 24
84.252.70.0/23 maxlen: 23
193.187.104.0/24 maxlen: 24
193.187.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e3:57:84:8b:0c:2e:d0:3f:bc:6d:97:bd:0b:d2:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 15 19:59:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a8df649955efc841f06fa68b567356813856b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:9e:be:49:04:05:67:54:11:5e:eb:07:79:
85:ab:c9:5e:0d:5a:f3:55:c6:43:0a:ee:f0:e6:a2:
94:6d:87:67:77:89:b2:cd:b2:b8:4f:4c:a6:7b:50:
08:52:ed:bb:f9:ad:f0:84:84:6c:59:fb:68:d7:6f:
1e:40:ed:df:d5:d8:91:90:f8:50:5e:a7:c5:b5:56:
9e:1c:0f:a6:6e:60:2d:24:79:f8:77:cc:b7:db:3c:
75:0c:f7:c1:32:da:db:0e:a1:40:70:60:23:e8:56:
f4:56:f3:a0:04:79:b9:f0:86:41:32:8e:10:2d:be:
71:6c:bd:8f:32:42:19:3f:80:95:a9:6b:77:18:1e:
57:12:cb:2b:93:27:e6:04:47:d7:41:2b:73:8f:db:
50:ac:89:4d:6d:6e:28:43:03:53:9a:7f:2a:b3:57:
34:bf:76:2c:d7:e5:2b:68:f3:33:5c:3f:52:76:63:
79:41:25:9e:8a:36:96:2f:8f:48:be:87:57:5e:ca:
e0:75:6b:25:aa:b8:52:51:30:35:8a:4d:e7:91:9e:
d6:5a:8f:ac:59:b4:9b:95:0a:24:4d:59:01:5e:ad:
be:b6:e9:44:57:51:b9:af:5a:49:1b:17:15:d2:67:
2e:fd:50:88:d7:c2:b9:62:fd:85:f6:30:45:b1:ae:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:F6:49:95:5E:FC:84:1F:06:FA:68:B5:67:35:68:13:85:6B:77
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/So32SZVe_IQfBvpotWc1aBOFa3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.202.0/24
45.91.239.0/24
45.95.31.0/24
45.128.128.0/24
78.142.239.0/24
84.252.70.0/23
193.187.104.0/24
193.187.107.0/24
Signature Algorithm: sha256WithRSAEncryption
80:76:82:b1:34:5a:2c:a3:43:f1:05:b0:b1:85:1f:51:8c:9c:
6d:cd:11:cc:34:18:e8:bc:e5:ac:c3:ef:99:24:14:25:84:05:
34:1a:21:71:62:ba:ad:9d:3f:68:74:db:cb:4f:12:c6:22:62:
d9:6a:05:b6:9f:70:d4:19:e9:9b:11:44:b9:5f:35:d6:da:7b:
0b:5a:67:5d:01:3e:f6:53:e7:29:3c:38:8a:d8:8b:fa:b1:be:
c4:4f:da:18:0c:ae:63:be:85:8b:18:ee:f1:9d:90:e2:c2:e4:
07:d4:49:92:ae:80:06:cd:2d:0c:35:b7:80:36:6a:3c:13:da:
28:ac:d4:1c:bb:87:f3:f5:b4:28:9c:6c:05:8f:dc:6c:74:d1:
f3:fe:af:c3:54:01:4a:72:76:2d:cd:6a:48:50:b5:2e:57:4c:
2a:33:f8:17:82:48:50:ab:3c:16:42:9b:30:f1:9f:e2:7e:e4:
04:1e:5b:d2:ca:07:4c:3f:3b:cc:d6:bb:85:7a:ca:01:36:29:
ed:59:9f:28:17:63:25:45:52:24:e5:42:73:72:56:51:9a:48:
be:af:ba:45:d1:aa:fb:e4:3b:e1:f1:86:ab:10:32:c8:0c:a8:
fe:2c:5f:29:70:51:2d:7e:cb:a3:90:d4:e1:58:0d:2d:13:c5:
e0:a5:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 18:06:18 2024 by rpki-client on console-fra.rpki-client.org