Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/xVR339HjNchpMW42lFtq9oDAnEo.roa
File: xVR339HjNchpMW42lFtq9oDAnEo.roa (raw, json)
Hash identifier: zG9alpJSb9GpLK/CP8Wvb8JC1EjmtFKsTUAQwH6/URI=
Subject key identifier: C5:54:77:DF:D1:E3:35:C8:69:31:6E:36:94:5B:6A:F6:80:C0:9C:4A
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 01929BF2DA5A31F87493CF2C8FD24B4E4EEE
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/xVR339HjNchpMW42lFtq9oDAnEo.roa
Signing time: Thu 17 Oct 2024 19:27:16 +0000
ROA not before: Thu 17 Oct 2024 19:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 31.15.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:f2:da:5a:31:f8:74:93:cf:2c:8f:d2:4b:4e:4e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Oct 17 19:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c55477dfd1e335c869316e36945b6af680c09c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:af:58:ca:0f:c9:40:51:aa:0f:3c:9e:2f:
c2:37:f0:b6:3b:58:19:0a:3d:8d:e2:7e:dc:38:61:
4e:88:30:f5:1a:9a:66:d9:06:51:84:c9:a5:c0:d8:
e3:0f:e7:b6:46:86:e9:35:52:26:8b:63:a1:bb:13:
08:e0:33:d9:0e:e9:d1:e5:e4:8a:ad:57:e4:dc:84:
33:7d:6a:dc:5e:7c:13:19:6d:ba:77:f9:3b:87:f4:
4c:1f:af:d2:1f:85:3b:9b:79:91:e9:36:c6:06:b3:
63:76:33:60:77:a9:24:30:dc:77:03:0f:0e:77:af:
dc:82:cd:b1:b9:94:09:f7:fa:4d:7b:48:de:47:fa:
99:da:1e:bf:b0:9a:f6:52:4f:14:58:3d:a0:11:f8:
0a:f1:0a:87:14:f5:f5:2a:04:4f:a7:33:53:74:ce:
8c:32:7b:12:ef:39:60:f5:99:f6:0c:2e:25:4f:95:
41:85:d1:69:38:8d:f8:7e:0a:93:d1:2c:77:d7:6a:
b5:cc:df:3f:16:17:11:11:cc:7a:a7:ed:bc:bb:a9:
90:5f:08:9e:14:94:f6:8b:3c:3a:d7:8d:db:d9:32:
99:f1:09:5f:7d:98:22:fb:27:e4:15:f5:56:88:29:
f3:99:b0:b7:39:ae:de:87:11:14:bb:14:84:45:2a:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:54:77:DF:D1:E3:35:C8:69:31:6E:36:94:5B:6A:F6:80:C0:9C:4A
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/xVR339HjNchpMW42lFtq9oDAnEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.19.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ef:d4:ee:fd:79:cc:3c:7d:21:23:21:f0:c7:d1:f2:81:ea:
bf:73:36:46:0e:4c:8f:e0:ee:0b:af:ac:97:3d:23:37:be:e4:
34:f3:62:15:06:aa:40:45:5a:37:9c:00:e6:b4:fc:d4:4f:1d:
cf:5e:3a:4f:31:6b:3b:d9:aa:8e:2c:af:bf:28:92:00:0a:d6:
6a:63:1f:fd:d6:7f:ba:69:94:e0:a3:08:4c:3e:b5:45:12:21:
d9:fb:22:ed:bb:ce:fc:21:78:ff:ba:0a:49:b2:5d:34:47:c3:
50:9e:76:01:7c:b7:80:b8:b9:b5:5d:57:2d:a1:7e:6e:8a:dd:
cf:32:8f:8a:eb:f8:bb:13:94:c8:d0:9f:df:d1:25:a9:4c:b0:
93:42:64:72:14:36:6b:11:be:3a:72:4d:89:8c:00:59:96:b3:
98:bf:98:de:07:2a:97:25:71:ec:82:df:aa:37:60:90:08:ef:
e2:5f:fa:73:ea:ce:de:73:4d:37:c6:c3:2e:97:b8:71:4b:2c:
4a:7a:9a:56:26:38:7b:9c:ac:6d:04:4b:0c:97:09:29:ba:51:
71:fa:b9:47:9f:73:13:dd:c3:ee:9c:9f:d7:cb:0f:e2:96:c9:
0e:78:eb:c9:27:cd:b2:5a:b6:c8:06:2b:ce:d4:44:0b:2e:53:
77:f1:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:24 2024 by rpki-client on console-ams.rpki-client.org