Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ckXRbbcUHrCNjJGAE_1p8ziaLP4.roa
File: ckXRbbcUHrCNjJGAE_1p8ziaLP4.roa (raw, json)
Hash identifier: AbHAwrvzueh6byLOLzmg37+GhdlCz3GRJtD5Er6QlGg=
Subject key identifier: 72:45:D1:6D:B7:14:1E:B0:8D:8C:91:80:13:FD:69:F3:38:9A:2C:FE
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 018CC649F645EA3D81CA64AC6C679FCF02F5
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ckXRbbcUHrCNjJGAE_1p8ziaLP4.roa
Signing time: Mon 01 Jan 2024 18:29:45 +0000
ROA not before: Mon 01 Jan 2024 18:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202279
IP address blocks: 31.133.48.0/22 maxlen: 24
31.133.48.0/21 maxlen: 24
31.133.55.0/24 maxlen: 24
31.133.53.0/24 maxlen: 24
31.133.52.0/24 maxlen: 24
31.133.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f6:45:ea:3d:81:ca:64:ac:6c:67:9f:cf:02:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 1 18:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7245d16db7141eb08d8c918013fd69f3389a2cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:24:6b:9a:8c:a8:29:9d:a2:d4:3d:64:6e:
d2:b4:f8:d6:d5:9d:19:5e:14:c3:cd:e4:8e:62:bc:
c4:27:cb:8f:f3:61:92:05:3b:40:9e:7e:9b:57:63:
02:7f:9c:7b:ee:11:65:33:1e:35:b8:8f:ab:bc:12:
df:62:ad:3b:12:6b:60:6d:4e:1e:94:9b:5b:bc:6f:
25:f6:a7:32:e5:a3:e6:21:88:30:b7:36:22:3f:70:
eb:e8:a2:c5:50:8f:3c:67:11:65:e3:46:3f:5d:f2:
62:5b:68:e5:1f:02:e2:1e:b7:3d:a1:46:fa:a6:c3:
c4:1c:ec:7b:52:6d:02:97:3d:98:13:e3:0b:fa:fc:
c0:94:8b:58:9a:d3:90:06:09:d7:aa:d6:01:f0:47:
55:7f:83:e5:52:52:97:7c:b6:dc:7c:6e:3a:fa:00:
15:f2:86:7f:7b:77:75:15:0a:c8:0e:45:1f:48:e6:
a3:8f:76:b6:8e:0f:dc:b9:7d:19:23:e0:32:94:13:
c4:45:d2:bd:e0:44:a8:82:49:32:aa:02:04:9e:fa:
68:25:0f:21:40:ea:50:3f:e3:88:7b:c8:0d:cb:53:
2e:79:94:54:89:7e:91:e5:17:38:eb:4c:cf:5a:79:
0f:a1:52:04:5f:9c:36:31:70:7b:6f:08:b6:6b:4f:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:45:D1:6D:B7:14:1E:B0:8D:8C:91:80:13:FD:69:F3:38:9A:2C:FE
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/ckXRbbcUHrCNjJGAE_1p8ziaLP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.48.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:4c:15:75:96:38:64:00:85:bb:81:c0:7a:94:52:13:f1:f2:
49:19:b2:fc:43:93:04:5a:2e:0b:28:f8:4a:a0:d8:58:fc:de:
1b:e9:46:ff:e1:d2:29:55:f4:e1:0e:88:ca:06:eb:22:71:07:
8c:ab:54:20:ab:74:f7:e1:77:ee:58:fe:fb:c3:60:bb:0d:b5:
a6:76:2c:9d:8a:da:e8:68:ac:ea:1a:01:b8:04:3c:1b:05:f3:
a5:3a:c4:e5:a0:b7:41:96:79:8e:f3:f5:8b:ae:24:b2:9a:f9:
40:50:ac:b1:73:98:cf:c8:6a:cb:43:5d:14:28:fb:65:3d:89:
9b:79:8b:5b:6c:67:8d:94:7f:a2:be:36:84:62:63:13:99:fb:
7f:e2:90:3d:77:f9:e7:fb:33:0a:94:e8:bd:a3:3d:f1:21:8c:
a4:1b:11:4a:bb:bc:32:ab:e1:b1:73:3b:01:62:8b:77:b0:63:
35:78:f4:1a:ef:f5:f1:77:cb:95:20:12:d9:c4:99:94:e1:38:
78:99:14:46:21:13:f0:94:28:9e:79:26:0a:f5:34:2e:92:af:
32:7d:f0:ed:0c:fe:cc:a8:0f:f7:84:77:7c:aa:ef:5e:af:33:
73:6e:d5:37:0a:4f:df:c3:20:4e:cb:86:06:3c:90:97:fc:07:
bb:7d:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:02 2024 by rpki-client on console-fra.rpki-client.org