Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/AV9CRX7lmTCc6GiIB9AhztHDQH8.roa
File: AV9CRX7lmTCc6GiIB9AhztHDQH8.roa (raw, json)
Hash identifier: avTjSORCfSpHNnGS9iKwoelJhRj1BAFKAzEYLASj++Y=
Subject key identifier: 01:5F:42:45:7E:E5:99:30:9C:E8:68:88:07:D0:21:CE:D1:C3:40:7F
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 018CC6B9260DC5F416B7FF594BC71AC23B66
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/AV9CRX7lmTCc6GiIB9AhztHDQH8.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209924
IP address blocks: 31.222.53.0/24 maxlen: 24
31.222.54.0/24 maxlen: 24
31.222.52.0/24 maxlen: 24
31.222.52.0/23 maxlen: 23
93.191.194.0/24 maxlen: 24
93.191.195.0/24 maxlen: 24
93.191.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:26:0d:c5:f4:16:b7:ff:59:4b:c7:1a:c2:3b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=015f42457ee599309ce8688807d021ced1c3407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:b0:0d:54:00:56:38:20:c1:c8:e7:43:d2:
98:af:4f:8e:cb:01:53:df:63:6f:78:10:e5:ac:5d:
bf:42:99:3c:2d:f5:ad:45:d2:a5:cf:8f:ab:77:48:
7b:fb:f7:c4:aa:91:1f:8b:26:01:a1:6b:b2:7f:38:
d7:ee:18:f6:c6:52:96:c0:75:d4:95:da:fd:0a:07:
5d:2a:55:59:69:66:04:93:75:05:4c:30:d6:64:25:
83:2f:b0:38:3a:40:9c:ea:6a:23:93:3c:4e:09:73:
94:a1:28:90:f5:4f:76:b5:3b:ea:5e:a9:3a:fd:c7:
d4:58:bf:d2:ca:54:ca:b4:18:f3:db:87:12:a5:61:
a2:d5:3f:1f:0f:76:86:6e:8d:37:05:19:21:fc:5e:
b0:db:a1:23:d6:ce:0e:67:94:1e:b6:58:60:56:16:
20:de:51:6a:15:2d:0d:11:eb:33:51:48:f6:24:a9:
84:eb:b2:ef:70:90:3c:55:0a:6d:12:7a:e9:f9:1e:
45:94:1a:0c:e9:88:2c:46:6e:db:18:f5:08:16:07:
e3:2e:ca:9a:89:fc:9e:42:ec:74:3b:fb:23:64:e9:
2d:19:a9:b2:f9:28:c9:bd:8a:2f:ad:8b:2f:8e:27:
3e:19:6b:89:06:b2:1c:9a:86:93:bb:4a:e6:28:73:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:42:45:7E:E5:99:30:9C:E8:68:88:07:D0:21:CE:D1:C3:40:7F
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/AV9CRX7lmTCc6GiIB9AhztHDQH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.52.0-31.222.54.255
93.191.194.0/23
93.191.197.0/24
Signature Algorithm: sha256WithRSAEncryption
32:97:77:21:cf:a5:c6:7d:5f:ac:15:db:02:9b:0f:75:81:f3:
90:0e:7d:c4:9d:5f:71:64:31:bf:f5:d1:bd:c7:7d:a7:d0:c4:
7a:e0:51:7e:d8:3d:ea:ee:27:a7:ee:ae:5e:8b:48:44:6d:85:
4f:59:30:6c:d1:bd:c5:29:32:e7:58:95:e3:eb:88:af:ab:ea:
d0:f2:ed:e7:3f:92:0f:7c:dc:7b:bb:b8:25:3f:99:a2:eb:5d:
f6:8b:aa:dd:00:23:74:4a:bb:a4:af:46:ed:b9:0a:51:74:b9:
02:77:c8:87:96:f9:b8:a7:ff:f2:08:d8:5e:f0:f9:ee:66:ee:
ed:85:0b:f2:ce:57:19:93:a9:f1:0c:f7:e1:3e:0e:07:e8:45:
b2:14:74:d8:14:de:f6:b3:e5:72:50:df:ca:e0:06:d1:0f:50:
a5:d2:81:b9:cc:b4:72:87:ca:c1:dc:3d:01:d3:74:33:b4:07:
e9:82:45:1f:11:4b:e8:bb:bc:96:50:68:e6:9c:42:a9:7f:b2:
b4:bb:59:d8:54:e5:cb:18:69:81:6c:d7:46:3e:c4:30:d5:52:
41:05:08:dc:0d:40:c6:b2:23:58:7a:16:6a:6d:02:94:f7:37:
e9:c8:f1:6a:d7:a8:5f:08:d0:02:00:25:5c:1c:a8:75:f1:dd:
52:0e:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:15 2024 by rpki-client on console-fra.rpki-client.org