Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jPANCISyHLo1EQMQo3UvOCo2r-g.roa
File: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (raw, json)
Hash identifier: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=
Subject key identifier: 8C:F0:0D:08:84:B2:1C:BA:35:11:03:10:A3:75:2F:38:2A:36:AF:E8
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AC55E960AE55ECBC9C705EFF4044
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jPANCISyHLo1EQMQo3UvOCo2r-g.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59867
IP address blocks: 31.133.36.0/23 maxlen: 24
31.133.36.0/24 maxlen: 24
31.133.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ac:55:e9:60:ae:55:ec:bc:9c:70:5e:ff:40:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf00d0884b21cba35110310a3752f382a36afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:36:b1:bd:75:f0:c9:86:06:21:9d:f4:05:
e9:10:6d:de:93:da:7f:66:c1:e7:f4:4a:bd:16:88:
b8:cf:26:fd:f6:bb:5e:f8:c3:37:80:2c:29:b9:3b:
fb:f7:5b:92:27:44:3c:00:15:b0:9c:f0:25:43:f4:
56:3e:3d:68:aa:74:c4:b2:bd:8b:03:c8:04:96:cb:
32:58:a8:2c:00:39:0b:f2:90:6f:c3:64:48:c8:ae:
d4:a5:da:da:16:ab:79:70:73:1e:12:71:de:1e:57:
4e:a2:77:87:52:db:08:bb:63:0e:32:73:f8:2e:fa:
57:32:37:e2:70:50:f8:fc:2e:f4:ac:ab:06:62:1b:
6a:bd:f3:d4:3c:29:b6:a9:9e:18:51:7a:c8:cc:23:
f2:e8:e4:c5:d4:82:b5:84:8d:df:4f:9f:92:0b:8f:
7d:49:8c:a8:93:5a:5a:bb:23:5b:36:6d:77:94:9c:
2e:eb:54:2d:a2:1c:ac:c4:a7:c5:62:11:a3:8a:8e:
b9:cd:44:b5:2b:29:19:ef:74:8f:c3:01:78:a2:fd:
1f:06:74:01:94:fa:3f:d0:b8:c5:0d:9b:2e:f8:6e:
98:37:f4:f3:05:ca:05:10:d5:66:99:97:47:01:38:
ab:3a:fa:ec:42:7b:b8:94:53:f9:d4:52:8f:41:a0:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:0D:08:84:B2:1C:BA:35:11:03:10:A3:75:2F:38:2A:36:AF:E8
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/jPANCISyHLo1EQMQo3UvOCo2r-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.36.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:4c:e0:c7:52:7e:a7:be:da:b8:e5:58:fd:f1:99:13:6f:e8:
9d:56:db:4b:ae:8c:8c:f4:0a:67:67:1d:86:f7:8d:5f:ad:59:
11:0a:ce:be:96:db:b2:9a:c4:37:a4:d0:ea:b1:70:08:92:a3:
ca:82:98:a7:24:cb:c7:9e:41:32:bf:85:d5:ce:02:72:47:99:
a1:d7:1d:8c:e9:3e:83:2f:80:8a:db:db:2c:a7:d8:23:ac:f8:
ad:e3:96:07:10:cd:04:1e:6b:6c:dd:08:9e:a7:e8:d0:7b:65:
33:7b:34:08:45:3c:d8:69:28:42:13:a0:94:12:8e:74:8b:df:
4a:24:9b:c2:ef:9c:57:2f:50:51:25:df:27:00:dd:70:03:81:
ab:1c:7f:14:12:09:36:b4:f2:68:3e:24:b4:46:d8:db:48:f3:
32:36:53:b1:52:61:4b:18:d1:31:13:05:c5:e1:d0:cf:99:4a:
3f:a1:e7:b9:d9:4e:d8:22:0a:da:86:a5:8b:77:d5:9b:20:35:
bd:65:a9:02:c0:b9:7b:72:8a:74:93:3c:56:19:94:0f:03:10:
8f:73:68:f7:a5:84:32:c8:f2:6f:18:ce:5f:7c:b7:b2:eb:2e:
1e:fd:12:c7:9c:5a:bf:bd:9a:1f:0f:e0:2d:c1:26:d7:8f:1a:
a1:d2:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:28 2025 by rpki-client