Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mMTfhdO_TCVsuZ5RV4u-z65hXOc.roa
File: mMTfhdO_TCVsuZ5RV4u-z65hXOc.roa (raw, json)
Hash identifier: Nlr5IqzE7rYLAQ2MhzQ6xn9I9j6m9QXgh6MLZhyVTS4=
Subject key identifier: 98:C4:DF:85:D3:BF:4C:25:6C:B9:9E:51:57:8B:BE:CF:AE:61:5C:E7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191A208FA917226BFC09BA6D652F0420D30
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mMTfhdO_TCVsuZ5RV4u-z65hXOc.roa
Signing time: Fri 30 Aug 2024 06:46:22 +0000
ROA not before: Fri 30 Aug 2024 06:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43830
IP address blocks: 31.40.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:08:fa:91:72:26:bf:c0:9b:a6:d6:52:f0:42:0d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 30 06:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98c4df85d3bf4c256cb99e51578bbecfae615ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:ae:cb:77:e8:f5:62:e4:a6:ac:a5:40:e4:
8e:32:ff:70:71:57:3a:10:38:a7:2b:22:6a:db:84:
d1:85:a5:22:ec:ae:4d:ba:04:8b:c3:46:6d:83:6d:
d7:22:a8:42:dc:6d:ac:b6:11:aa:53:d7:cb:43:8f:
70:18:ed:47:f6:8d:66:f5:ca:b8:1b:68:32:1c:51:
ed:84:b3:83:9f:06:4d:c3:1c:77:f1:10:75:9f:49:
59:dc:d8:d4:bb:dd:d1:db:44:cb:3f:84:36:0c:6a:
6d:0f:8b:4d:5e:3b:8d:68:1d:e5:0f:fc:3a:f7:68:
3e:30:bd:7c:9a:09:7b:4f:5a:45:e1:b2:87:b8:69:
3e:08:3a:c3:57:bd:16:a2:5d:e0:c8:8e:1e:d7:a8:
6d:37:b4:dd:65:ac:02:19:30:1d:e9:45:7f:cf:82:
17:50:eb:20:44:ed:ea:46:22:31:9b:fb:20:52:ed:
c0:49:b8:a3:8b:3d:58:ab:a4:bc:e4:47:75:a9:2c:
3b:ed:c5:bb:ba:74:f4:4e:af:94:29:9e:7e:ae:2c:
42:75:e7:ed:92:7e:f2:d6:a9:6a:ad:40:1f:93:90:
36:6d:92:28:09:df:7e:bb:dc:ea:c1:56:2c:fc:8e:
98:c2:81:b7:cf:1e:8b:6e:75:24:19:a6:f8:0e:b0:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C4:DF:85:D3:BF:4C:25:6C:B9:9E:51:57:8B:BE:CF:AE:61:5C:E7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/mMTfhdO_TCVsuZ5RV4u-z65hXOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.251.0/24
Signature Algorithm: sha256WithRSAEncryption
90:61:a4:48:5c:9f:b1:a3:ac:2d:a2:30:6a:c8:2e:0a:a6:fc:
43:ec:8a:36:87:a6:bf:87:30:c0:75:67:60:64:a3:85:cc:30:
1c:33:86:35:a9:8f:3f:62:bd:00:89:4c:7d:fc:2e:16:ee:aa:
60:ad:fe:94:fc:07:d7:29:6c:5d:3c:52:8f:51:8e:a0:35:19:
14:45:67:8d:8d:da:28:5a:02:60:f4:59:6f:34:5a:81:85:d6:
c4:15:25:88:6a:23:23:8e:91:fc:7a:6c:e4:de:58:bb:f6:8f:
40:25:dc:85:b0:2f:67:ed:f8:b2:e1:e9:4c:d4:d9:3e:29:4c:
77:7f:67:55:b2:85:43:5e:ea:df:6c:65:11:49:90:48:a0:3f:
6c:da:1c:29:60:a4:b6:d1:dd:77:fe:5b:94:0c:42:ef:19:4f:
32:98:68:9e:83:fb:e0:c4:76:3e:fc:78:6d:25:ff:46:2a:5c:
3c:a0:0a:f0:01:f8:c2:21:0d:f5:f8:4f:de:83:0a:7b:9b:3e:
f9:6c:24:bf:7b:75:1a:58:c3:a2:57:ae:6a:c1:ef:a5:b1:dd:
14:4a:8e:d3:93:9d:35:f6:c4:a3:7b:9c:1b:8a:c5:54:eb:44:
f3:9f:9b:39:b0:5b:90:6e:b6:f5:b0:94:83:d4:31:9f:d1:36:
69:dd:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org