Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SQulPcTdxARssYkdPYlb58zFoek.roa
File: SQulPcTdxARssYkdPYlb58zFoek.roa (raw, json)
Hash identifier: Vgk2PZBCWrPutdoEYdl0zHk8mw48QJbpGEl5LzCd8gI=
Subject key identifier: 49:0B:A5:3D:C4:DD:C4:04:6C:B1:89:1D:3D:89:5B:E7:CC:C5:A1:E9
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0190594F7924D8A3832CEF8DDF4AE291B498
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SQulPcTdxARssYkdPYlb58zFoek.roa
Signing time: Thu 27 Jun 2024 10:48:18 +0000
ROA not before: Thu 27 Jun 2024 10:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:4f:79:24:d8:a3:83:2c:ef:8d:df:4a:e2:91:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jun 27 10:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=490ba53dc4ddc4046cb1891d3d895be7ccc5a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:f4:55:7b:de:a8:2c:06:31:0e:a4:3b:e6:
62:f1:3d:fd:fa:79:4f:58:15:bd:4a:ea:8d:f1:7b:
6a:9c:4b:c2:ae:38:bb:d9:1c:d2:74:6a:8e:17:30:
38:12:8e:6f:02:72:8d:e2:39:ee:53:1a:dc:1e:15:
e1:5c:08:57:35:1d:ca:9f:64:76:8e:ba:8d:b2:7c:
dc:ce:2b:82:7e:0c:5b:5f:af:9b:e4:c4:77:ad:21:
89:0c:6b:bc:99:fa:3e:d7:aa:25:8a:22:ab:cf:09:
65:b9:d7:e2:20:3c:01:94:4b:89:5b:19:c4:02:bd:
3b:dd:69:ae:c4:d9:6c:21:32:46:67:02:12:ca:42:
86:4d:d3:9f:30:c6:b8:8d:c6:e3:22:12:1e:2f:61:
68:24:11:1b:21:95:3e:00:22:14:35:13:0c:90:4c:
56:b7:31:ba:2d:40:19:f1:2e:91:f6:02:5d:3c:a9:
29:f8:39:6a:4b:10:a2:ba:2a:cb:4b:8e:b8:8e:34:
55:11:ec:1f:c7:00:73:77:45:3f:c2:f0:e9:0e:12:
93:95:b5:70:34:ab:b8:93:f3:40:e6:29:4f:8b:46:
e6:b1:c4:97:7d:c7:52:b4:c3:38:a9:e7:5e:09:c3:
ea:15:16:5a:1a:88:20:93:ae:1e:97:79:c2:25:09:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:A5:3D:C4:DD:C4:04:6C:B1:89:1D:3D:89:5B:E7:CC:C5:A1:E9
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/SQulPcTdxARssYkdPYlb58zFoek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1d:46:c6:75:87:14:8f:a4:d9:56:b9:2a:1a:5b:16:2b:bc:
01:95:54:04:1a:ff:a0:eb:b8:0b:4a:61:a3:83:0f:fd:d0:c9:
7f:5b:20:8d:3c:a9:87:44:04:24:d7:ac:ab:e2:75:3c:1f:4f:
e0:65:ba:59:ad:fd:4b:3f:04:d1:7c:db:63:bd:41:61:84:c9:
c1:d0:f0:54:e2:6b:4b:cd:15:05:28:33:81:15:79:c1:7e:cc:
c1:1d:3f:60:41:fe:4b:2d:ba:35:ef:2f:a6:8a:b2:06:60:ad:
0e:85:d4:90:64:76:7c:40:3d:f7:35:c2:7a:97:a1:16:54:34:
ae:88:37:d8:6e:ba:25:6c:5d:11:07:0b:82:ad:fd:ea:32:cc:
d4:f0:e4:f5:d5:c5:73:9d:22:cd:58:2a:d1:12:de:ee:9e:54:
46:db:66:e5:f0:83:48:e4:08:5c:3f:28:cc:4f:14:18:e1:1e:
a2:54:34:bc:a2:32:60:c8:8c:d2:28:05:6f:6a:b7:35:ac:e3:
8d:38:d9:df:4e:b2:b6:60:50:d7:3e:78:10:9a:65:77:ef:e1:
d1:b0:28:af:a7:f8:f7:0b:25:06:8d:c2:b0:cc:56:72:b8:f4:
a1:a7:74:bb:cf:cf:54:e5:e1:a4:ff:78:1f:fd:6e:b9:01:68:
70:9f:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:39 2024 by rpki-client on console-ams.rpki-client.org