Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tM4Z6zwlnWljD8q5GxXONDMpNgU.roa
File: tM4Z6zwlnWljD8q5GxXONDMpNgU.roa (raw, json)
Hash identifier: a/63jsIcyEKQ3s5DM00HfPqWbK13sKugNwRPrx91QhQ=
Subject key identifier: B4:CE:19:EB:3C:25:9D:69:63:0F:CA:B9:1B:15:CE:34:33:29:36:05
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F0E6EBB5A9B2DFC1F518ECEB97E706009
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tM4Z6zwlnWljD8q5GxXONDMpNgU.roa
Signing time: Wed 24 Apr 2024 04:48:08 +0000
ROA not before: Wed 24 Apr 2024 04:48:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215827
IP address blocks: 31.14.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0e:6e:bb:5a:9b:2d:fc:1f:51:8e:ce:b9:7e:70:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 24 04:48:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4ce19eb3c259d69630fcab91b15ce3433293605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:80:89:4b:cd:3b:36:17:43:79:2c:e9:fe:
4f:82:06:5e:42:0a:e6:cc:15:fa:c6:79:b3:a4:d2:
5e:c4:13:6e:05:5b:a4:4f:b5:7d:4b:e0:56:9a:98:
c5:87:66:f3:d0:55:9c:da:77:a6:18:5b:72:3a:ca:
3d:64:c0:a1:68:fc:cc:31:0a:56:2f:8b:08:94:46:
8b:17:0c:e5:de:2d:90:7c:b4:ea:bb:b0:aa:55:0f:
e3:e1:aa:e3:51:fa:57:0e:0e:52:df:17:d7:b5:a0:
87:84:b8:16:c4:97:b1:59:7f:c9:b5:33:60:5a:88:
29:08:ec:e7:74:40:ef:88:d7:fb:fc:8d:de:d4:3e:
2a:b4:ba:b7:8e:6a:c5:97:7d:79:bb:b1:c2:cd:59:
91:99:c8:8c:e9:bb:33:c9:e2:82:3f:66:1e:64:85:
1a:a5:f1:73:92:f0:83:56:e2:a4:a3:8f:98:f4:44:
fd:00:0e:21:e0:f2:16:86:d5:af:e0:3c:25:6c:4a:
f2:6b:4a:75:31:85:fe:4c:f7:ba:77:47:7e:17:dc:
40:60:a9:0e:e2:45:99:fb:eb:40:07:e6:52:cb:c2:
fb:8f:a5:0d:c4:cb:21:5d:72:11:af:e8:fb:40:d2:
a1:d0:2e:3e:54:39:6e:09:80:5a:80:29:54:33:0d:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:19:EB:3C:25:9D:69:63:0F:CA:B9:1B:15:CE:34:33:29:36:05
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tM4Z6zwlnWljD8q5GxXONDMpNgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.10.0/24
Signature Algorithm: sha256WithRSAEncryption
54:80:a4:cb:bc:df:09:7e:9b:ed:0a:1c:10:a4:a4:48:b4:06:
72:e8:70:7a:0d:8f:a0:b2:dd:dc:31:98:1c:40:db:58:6f:7e:
0d:4a:e3:43:f9:66:4a:ca:77:f1:b4:2c:25:60:9b:e7:76:1d:
b2:7f:cd:8c:36:dd:7e:b8:e1:50:9b:66:d4:be:53:20:fd:a4:
47:9e:f8:fa:bb:ac:54:40:b6:7c:e4:2f:66:8a:f2:37:7b:3e:
e3:6b:07:00:5a:81:fb:6a:46:be:0f:53:4d:d1:c3:96:6c:d9:
55:99:67:16:f0:e1:89:d6:8c:25:33:2e:03:0c:05:34:1d:2d:
e7:66:a4:75:6f:ad:c6:58:bc:2d:0e:17:43:18:f0:31:b7:7c:
89:52:5e:c4:c6:00:ed:ab:b6:e7:8e:9f:c4:ad:73:73:ba:26:
47:96:ce:c6:d5:ba:56:34:63:32:ae:76:64:2c:f5:b4:c6:ee:
8f:12:b6:bf:ab:6b:37:1f:4f:8a:b4:d9:34:a2:fe:62:8e:87:
68:3c:7e:8d:84:40:0a:ac:23:0d:80:3e:b2:d1:28:e5:91:68:
ba:b5:da:86:fe:1d:99:d3:b3:58:14:07:6b:83:40:b8:73:61:
91:31:36:35:71:95:79:fd:d0:c9:71:e9:d0:f3:1f:ac:ad:56:
5b:d1:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:56:38 2024 by rpki-client on console-ams.rpki-client.org