Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IvFJSm75h3GwG8trK74Q2PdIoGY.roa
File: IvFJSm75h3GwG8trK74Q2PdIoGY.roa (raw, json)
Hash identifier: bIDnN3VdK0bQwDA8fs+PjdiPjmWm5Y9oCibHXjZf/4E=
Subject key identifier: 22:F1:49:4A:6E:F9:87:71:B0:1B:CB:6B:2B:BE:10:D8:F7:48:A0:66
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0191433B49C36BE245FBB0769AE9DE5C411E
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IvFJSm75h3GwG8trK74Q2PdIoGY.roa
Signing time: Sun 11 Aug 2024 20:57:24 +0000
ROA not before: Sun 11 Aug 2024 20:57:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212389
IP address blocks: 31.24.249.0/24 maxlen: 32
2a12:4942:4009::/48 maxlen: 48
2a12:4946:8030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:43:3b:49:c3:6b:e2:45:fb:b0:76:9a:e9:de:5c:41:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Aug 11 20:57:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22f1494a6ef98771b01bcb6b2bbe10d8f748a066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:b6:34:21:dd:0f:9f:87:d0:8d:9c:4a:8c:
5f:35:96:83:fc:83:d2:e8:a3:40:7b:ee:4e:cc:34:
ba:97:b2:f5:a9:de:6e:64:65:96:da:6b:eb:44:fc:
2f:54:60:00:a3:7d:a8:91:7c:cf:cf:15:20:22:7e:
b8:ce:fb:bc:93:5c:bb:2b:d5:9a:2f:ab:14:83:c0:
ac:80:35:5b:41:2e:45:7b:d7:27:ed:11:fe:3a:b3:
e3:37:73:ab:e0:bd:35:7e:bc:ed:15:8b:25:20:be:
5a:91:bb:06:d9:a0:62:d0:e9:ae:d8:64:fb:3f:20:
55:9b:18:dc:4b:17:c3:7b:4b:70:b1:6a:7d:b3:91:
c6:39:ba:79:ab:7a:fe:98:a0:b2:40:95:4f:26:c0:
3f:fe:41:c7:cf:8f:53:68:10:a5:8c:aa:31:4d:cc:
98:9f:f1:60:ba:d5:e0:a7:da:af:9c:20:77:2e:15:
32:4f:ba:99:b6:d9:0d:75:3e:4c:f4:23:65:c9:06:
89:3a:ff:64:f6:0a:c9:33:13:72:c3:c1:50:e4:33:
b1:7a:b1:3b:8d:75:57:7e:21:8e:fc:dd:d3:24:1b:
16:97:e3:c8:c9:df:99:e5:30:2f:e0:47:95:96:fc:
09:17:62:d8:fe:70:cc:b6:ea:25:c1:2c:ce:1a:ec:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F1:49:4A:6E:F9:87:71:B0:1B:CB:6B:2B:BE:10:D8:F7:48:A0:66
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IvFJSm75h3GwG8trK74Q2PdIoGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2a12:4942:4009::/48
2a12:4946:8030::/48
Signature Algorithm: sha256WithRSAEncryption
0c:55:1d:43:c1:32:dd:3b:74:27:62:5c:a1:dc:54:4f:fa:c3:
f3:ce:4b:d2:b1:fa:08:7d:52:7b:42:be:8b:b9:b8:46:81:f8:
97:3e:f1:1e:92:40:d4:3e:38:fa:4f:62:97:ab:f8:70:f8:88:
21:6f:08:58:07:21:96:76:fb:be:0e:2a:dc:0e:ae:28:db:0d:
60:b0:4a:dc:df:09:86:db:dc:9a:7d:df:df:34:ed:6d:4a:90:
85:6f:01:b8:cf:40:e4:ab:53:be:2d:5f:14:ae:00:72:fb:c2:
f7:9e:4a:be:3d:ad:0d:8e:80:da:e5:c7:08:05:39:06:65:f5:
60:f7:6b:0c:b2:20:7f:72:68:d0:d0:a8:33:d1:bf:a4:e8:3d:
5e:43:0a:ea:ea:08:1d:58:83:02:7d:4d:87:06:48:bc:62:69:
90:62:11:c9:fe:90:2a:37:dd:f1:ca:ab:00:f8:f4:5b:30:83:
0f:d3:4c:17:48:5a:fd:b1:0b:70:ac:cc:1f:6e:b7:09:d2:69:
3e:e1:94:24:1b:b8:37:c0:19:c0:da:fc:91:44:18:bb:79:94:
86:09:fd:ef:22:a5:e3:b0:f4:f6:36:c1:53:8e:39:61:1a:dd:
55:b2:1e:a2:45:f1:28:32:04:d9:85:83:bf:25:26:42:f5:f5:
77:4c:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:11:21 2024 by rpki-client on console-ams.rpki-client.org