Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa
File: HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa (raw, json)
Hash identifier: tnF7G1LPxAHiuOg1UiNbStFHEPcqkW70yTDAcJkZ/xY=
Subject key identifier: 1C:8D:60:46:A6:1C:B0:14:04:03:48:09:53:2F:C2:07:CB:C6:51:34
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 018CC6B924DA235DC4E3286557ADB9A233A3
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47448
IP address blocks: 31.222.60.0/24 maxlen: 24
31.222.62.0/24 maxlen: 24
31.222.61.0/24 maxlen: 24
31.222.63.0/24 maxlen: 24
93.191.192.0/24 maxlen: 24
93.191.193.0/24 maxlen: 24
93.191.196.0/24 maxlen: 24
93.191.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:24:da:23:5d:c4:e3:28:65:57:ad:b9:a2:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c8d6046a61cb01404034809532fc207cbc65134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:db:f9:23:74:96:76:ff:1d:6b:43:c9:b9:
86:e8:71:05:19:83:32:7b:e7:0a:57:26:58:45:3a:
55:e8:b0:0a:15:b5:47:1a:62:b9:8a:9a:ed:a5:a2:
f2:36:4e:ba:ba:58:bb:f8:f8:61:60:ac:b5:68:be:
9d:0a:b6:a2:b5:fa:8f:5c:6e:d8:ac:5e:fc:63:c9:
88:5e:57:1c:90:3a:7d:0c:83:e4:17:a5:0c:d3:4d:
03:e7:5f:a9:e3:25:56:0f:a2:4d:7e:2b:e1:29:ac:
d0:6c:96:68:a1:26:8a:b9:b3:c4:cb:d5:eb:0b:89:
3e:f9:ca:c0:53:89:21:ed:d7:6c:36:76:7d:0a:ac:
9a:aa:84:bf:0b:c9:0e:4f:86:ec:80:3f:ea:17:7d:
af:b0:b5:30:61:1a:b0:7d:0e:73:ae:ae:2d:44:29:
a4:03:b6:89:0c:7e:83:45:65:58:31:e2:ac:ad:44:
19:c6:36:57:ce:3a:f5:a5:36:c9:a2:ea:94:31:26:
2a:b9:fb:9d:fa:90:ab:ed:02:d5:bf:8c:17:4b:75:
9e:ef:fc:36:97:58:7a:35:26:5f:d9:51:1c:a4:20:
1b:b9:cc:97:01:c9:8c:f4:d5:87:ed:ce:83:d9:92:
45:85:40:a4:5f:59:c7:de:d3:3a:8e:9a:f3:5e:56:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:60:46:A6:1C:B0:14:04:03:48:09:53:2F:C2:07:CB:C6:51:34
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/HI1gRqYcsBQEA0gJUy_CB8vGUTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.60.0/22
93.191.192.0/23
93.191.196.0/24
93.191.199.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8f:30:20:21:da:44:ff:cb:06:a1:8a:b1:50:52:ec:ee:e8:
5a:91:cd:5f:9e:be:21:30:f2:28:c2:fd:f4:80:9a:2f:6d:dd:
04:f1:ef:d8:08:4d:7b:14:40:e0:bc:c1:b7:1f:e1:fa:06:14:
71:7e:20:6b:6b:69:11:72:46:98:bc:08:8a:b9:e6:70:13:43:
23:36:18:fd:68:ea:e9:18:c8:b6:d3:88:f6:58:9a:51:ac:04:
bd:d0:24:58:71:37:24:c5:49:f7:fe:6e:b0:27:c4:0c:02:de:
63:68:aa:53:d6:47:ef:57:60:53:bb:5a:42:cb:fb:d9:13:95:
8d:da:95:f5:59:fd:7d:f0:22:42:73:85:6d:7e:db:4c:93:12:
83:cb:34:30:1f:64:ef:e9:a2:05:0f:45:79:c1:df:af:35:18:
63:97:8b:57:c5:38:ba:85:87:c3:d0:f8:16:9d:05:46:39:8b:
70:89:dd:f6:9c:d5:90:6c:2c:c0:f2:70:60:16:5b:0f:a5:47:
59:9c:0e:f6:36:5b:2a:19:aa:3a:a7:0a:1e:c5:7e:d0:78:f7:
9a:da:25:99:53:ec:54:7c:b3:f4:c7:53:78:91:86:1f:17:64:
4c:c9:d7:e8:d0:33:2a:ff:e6:c6:01:a7:8d:6a:bf:b9:cc:4f:
eb:5c:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:35:39 2024 by rpki-client on console-fra.rpki-client.org