Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/omWgxlKDLGmJMR82gaFLLnsHa1M.roa
File: omWgxlKDLGmJMR82gaFLLnsHa1M.roa (raw, json)
Hash identifier: C3fBG40bmEX0oIkMeOaLTyXq/3PezvD1oheJntALBac=
Subject key identifier: A2:65:A0:C6:52:83:2C:69:89:31:1F:36:81:A1:4B:2E:7B:07:6B:53
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0190EFD04EE9A734AFA20C742F6D66B6E926
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/omWgxlKDLGmJMR82gaFLLnsHa1M.roa
Signing time: Fri 26 Jul 2024 16:12:04 +0000
ROA not before: Fri 26 Jul 2024 16:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199839
IP address blocks: 31.24.249.0/24 maxlen: 32
2001:678:f30::/48 maxlen: 48
2a12:4940::/32 maxlen: 48
2a12:4942:174::/48 maxlen: 48
2a12:4942:4009::/48 maxlen: 48
2a12:4946:1600::/48 maxlen: 48
2a12:4946:1650::/48 maxlen: 48
2a12:4946:1655::/48 maxlen: 48
2a12:4946:1658::/48 maxlen: 48
2a12:4946:1700::/48 maxlen: 48
2a12:4946:1800::/48 maxlen: 48
2a12:4946:1900::/48 maxlen: 48
2a12:4946:3000::/48 maxlen: 48
2a12:4946:8000::/40 maxlen: 48
2a12:4946:8000::/48 maxlen: 48
2a12:4946:8010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:d0:4e:e9:a7:34:af:a2:0c:74:2f:6d:66:b6:e9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jul 26 16:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a265a0c652832c6989311f3681a14b2e7b076b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:2a:40:a3:b6:4c:61:4d:5f:34:fa:5c:18:
e6:83:a5:49:cb:bd:a6:71:92:0b:2b:52:77:5b:80:
cc:03:41:55:c3:52:96:c1:12:f3:2d:b2:94:de:bc:
65:81:33:7d:31:c1:5b:a1:51:4d:12:20:dc:d3:3e:
9c:c5:be:a2:1b:27:db:82:59:df:20:ee:46:aa:fa:
21:f3:36:8e:19:37:4e:81:eb:f5:f3:73:68:1a:be:
b6:05:df:5c:51:23:92:35:44:03:2a:3b:31:b0:a7:
a8:ba:e8:9a:e1:9e:bf:b8:02:68:3e:e4:ec:6f:e6:
04:ab:f0:9e:e3:cb:75:46:69:d3:d3:a2:67:39:4b:
bd:9e:5a:f8:a1:6f:a1:45:c0:a1:be:cc:2a:78:99:
00:a2:e3:d0:85:db:9c:09:be:fb:34:0c:3c:6b:d5:
40:28:0b:35:c4:1b:9c:76:a2:b9:75:66:a6:49:80:
9d:8d:76:e6:d3:26:df:a5:05:c2:be:c1:85:f0:48:
dc:d9:e8:a3:d2:ff:80:41:78:8c:27:57:ec:d4:48:
fb:b1:c7:37:b6:5b:1f:83:79:18:d5:ba:1a:29:ed:
36:e4:5c:19:a7:06:53:8e:df:d3:af:ca:4e:45:49:
c5:3c:e9:6b:ca:a3:0a:37:36:6e:0f:cd:be:ec:7f:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:A0:C6:52:83:2C:69:89:31:1F:36:81:A1:4B:2E:7B:07:6B:53
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/omWgxlKDLGmJMR82gaFLLnsHa1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2001:678:f30::/48
2a12:4940::/32
2a12:4942:174::/48
2a12:4942:4009::/48
2a12:4946:1600::/48
2a12:4946:1650::/48
2a12:4946:1655::/48
2a12:4946:1658::/48
2a12:4946:1700::/48
2a12:4946:1800::/48
2a12:4946:1900::/48
2a12:4946:3000::/48
2a12:4946:8000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:3e:e8:b7:74:be:96:ab:6a:b2:01:a9:53:50:7b:ea:5b:e3:
a7:f1:8a:7c:11:f3:e4:05:5a:12:97:e3:04:b8:79:21:9f:e0:
31:da:8f:24:84:91:2a:9d:39:40:8d:78:d0:53:02:3f:47:60:
f6:b4:94:b0:3d:b7:e9:8e:c6:dc:78:00:08:0d:dd:d5:ef:15:
c3:38:b4:79:ce:df:28:c4:ed:b6:d7:bb:d6:d8:4b:f3:69:cd:
d4:7a:24:55:a4:23:87:d6:69:95:90:9f:3c:0e:32:52:fd:c4:
a7:41:6a:c7:98:f9:04:67:ee:64:9c:cf:88:f1:7e:03:d1:a4:
f6:80:c0:04:c7:77:cd:83:5b:d8:dc:27:e6:69:94:0e:4d:d2:
1b:a4:d1:a7:e3:e3:9a:cb:8d:79:35:5c:7f:ed:5a:9a:9f:65:
ed:2e:c3:00:8a:b0:2a:6c:cf:78:7a:91:a8:84:3e:8e:c4:05:
19:ce:c4:cc:6d:6a:37:77:2f:d0:c5:c6:20:3e:c8:ca:d5:fb:
1b:da:69:58:f9:9c:6b:fc:6b:b7:c2:c7:06:1e:fc:4d:ce:99:
35:91:a7:91:9a:32:27:02:8d:ed:28:62:9b:3e:0b:64:6b:40:
18:17:db:03:4c:29:ed:5f:cd:d3:9b:06:0f:14:6a:58:f0:10:
88:1a:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:17:21 2024 by rpki-client on console-fra.rpki-client.org