Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/631WVgRjqRecc6oXZgnjMKWbXtU.roa
File: 631WVgRjqRecc6oXZgnjMKWbXtU.roa (raw, json)
Hash identifier: 3Q3Lwe6JZqce30GfOm3kMCiGg5YOFN2K8pBpLtm92M8=
Subject key identifier: EB:7D:56:56:04:63:A9:17:9C:73:AA:17:66:09:E3:30:A5:9B:5E:D5
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 018CC80192B1998C9C95B77F9956B16F7854
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/631WVgRjqRecc6oXZgnjMKWbXtU.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206807
IP address blocks: 194.116.220.0/24 maxlen: 24
93.114.249.0/24 maxlen: 24
2a10:22c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:92:b1:99:8c:9c:95:b7:7f:99:56:b1:6f:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb7d56560463a9179c73aa176609e330a59b5ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:bd:52:16:7d:70:af:94:8a:b9:6f:88:ba:
4f:2d:69:2d:91:6d:f8:96:12:cd:63:ca:5d:c9:65:
f0:7b:4b:09:70:ed:ac:0c:7f:3d:6f:ae:f1:8e:0a:
55:f6:72:0d:f9:4a:6b:0a:39:e6:27:2f:ec:54:0e:
7d:73:41:f1:a2:41:55:14:a4:d9:c4:26:9b:22:f4:
f8:65:19:bd:f9:76:e5:15:5b:b5:60:b3:a7:fb:5d:
4f:f7:31:13:a7:64:29:6a:f4:ea:00:55:6c:c4:54:
6b:8f:a8:9b:f8:ba:77:b9:c5:6f:84:7e:0b:bf:f4:
bb:c5:21:94:a1:61:4a:52:db:46:da:6d:13:19:ca:
f4:88:19:3f:15:a7:46:4f:f2:59:c1:64:68:39:19:
90:b7:6d:23:fc:d1:27:45:f6:c6:ac:c9:a2:e1:20:
2f:73:5c:29:9e:53:c8:47:d5:98:3e:1d:28:76:a3:
e3:21:04:a0:28:43:61:d4:72:b1:41:eb:6f:d7:22:
83:ae:c1:84:6d:38:3a:7e:6e:2c:bf:20:5a:4a:56:
ed:12:a8:c2:0c:a0:75:67:a4:35:fa:3a:aa:ef:b0:
1e:68:1f:00:fd:61:39:ef:2a:9e:31:fe:ee:78:96:
d2:8e:e7:32:df:94:cf:d4:4d:22:8f:6c:08:a9:08:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:56:56:04:63:A9:17:9C:73:AA:17:66:09:E3:30:A5:9B:5E:D5
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/631WVgRjqRecc6oXZgnjMKWbXtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.249.0/24
194.116.220.0/24
IPv6:
2a10:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
11:b5:3a:04:85:0f:7c:7d:60:82:91:4b:6d:9e:38:cc:47:d0:
15:80:92:6c:99:28:37:ba:58:8f:9f:14:ec:6b:f1:a9:08:e9:
ad:ff:51:4e:60:8c:d4:a2:19:64:58:fd:ee:c6:11:46:85:b2:
da:2f:27:71:67:d7:26:63:86:40:44:bc:42:50:ea:cc:81:d2:
54:ff:8b:80:59:74:fd:46:c5:07:8a:e8:89:34:36:9a:d8:7b:
9a:dc:c7:10:70:85:b9:6e:31:93:4f:6e:13:e4:20:47:d2:f9:
22:d9:d0:4b:17:41:b1:85:2a:63:b7:8d:1e:39:2b:06:6c:c4:
42:b8:ab:f7:a8:d2:6b:ca:4b:3d:10:05:29:8a:72:95:06:93:
f8:93:50:1f:be:56:41:54:9d:d1:f7:b4:99:ac:88:07:f9:38:
4a:48:c0:cd:fd:5a:b3:09:4f:8e:35:52:33:a9:5b:87:79:95:
29:e7:4e:09:9c:52:4d:92:1a:6e:48:cd:51:b9:41:5f:25:98:
9f:82:a4:4d:3e:5a:0a:37:39:5d:dd:c2:c7:c2:ec:c0:89:95:
bb:14:f2:a8:1d:a4:09:1b:42:fe:91:83:24:0d:f1:2f:38:09:
c1:63:7d:25:62:2b:96:44:47:a4:ee:43:19:c9:a2:e6:27:ef:
e5:48:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:07:41 2024 by rpki-client on console-fra.rpki-client.org