Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/mUeHIujfyke75HDRik99Zqe0src.roa
File: mUeHIujfyke75HDRik99Zqe0src.roa (raw, json)
Hash identifier: xV3MudCsuC223ocQdDOdYJFAQNyog+sO445pqgoPOZE=
Subject key identifier: 99:47:87:22:E8:DF:CA:47:BB:E4:70:D1:8A:4F:7D:66:A7:B4:B2:B7
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 0190EA3F494B0C2F00FAAD033E79B063D4E6
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/mUeHIujfyke75HDRik99Zqe0src.roa
Signing time: Thu 25 Jul 2024 14:15:34 +0000
ROA not before: Thu 25 Jul 2024 14:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57033
IP address blocks: 31.43.162.0/24 maxlen: 24
193.107.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:3f:49:4b:0c:2f:00:fa:ad:03:3e:79:b0:63:d4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jul 25 14:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99478722e8dfca47bbe470d18a4f7d66a7b4b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:81:7f:2f:fa:e5:1a:0d:b2:86:9b:e9:34:
27:b9:30:7f:4f:cf:3c:75:e0:13:24:b1:c4:bf:07:
e9:e6:34:a2:a5:e2:1c:85:23:14:28:03:63:21:10:
f6:db:fb:d9:25:e8:4b:7c:be:bd:7b:a0:fb:7a:07:
2a:56:58:59:46:a3:b1:c0:6b:22:f6:39:8c:ce:82:
27:31:0f:b5:1a:d7:23:00:ae:84:ca:b2:f7:c0:dc:
23:21:82:d3:2c:b4:5a:92:7b:60:60:a7:eb:4a:23:
17:60:85:99:04:12:c7:30:00:a6:76:d9:a5:9e:c2:
cd:82:85:07:07:a0:6a:cd:e7:da:ea:a8:72:33:05:
22:a0:43:01:28:13:8c:15:de:5e:48:31:91:00:43:
95:84:16:f3:d0:94:26:9d:01:b1:b1:42:3a:15:a3:
c7:19:2d:1f:47:ec:bb:5f:89:e9:a9:46:86:e6:74:
d8:8d:56:02:52:a3:0b:67:d5:eb:b4:a2:20:be:e6:
db:24:10:1f:9b:69:c8:1a:0c:cf:54:01:f5:56:38:
bc:a2:24:94:5c:c1:5e:26:a3:52:6a:a2:29:88:fc:
a1:46:8a:8a:e1:4e:cd:2f:49:d3:f0:69:58:40:2e:
e9:14:ea:92:a2:2e:61:22:39:8f:78:e1:2d:54:2d:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:87:22:E8:DF:CA:47:BB:E4:70:D1:8A:4F:7D:66:A7:B4:B2:B7
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/mUeHIujfyke75HDRik99Zqe0src.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.162.0/24
193.107.83.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:be:65:e7:d2:49:90:3c:1e:a5:d6:75:55:61:f6:53:58:35:
59:3d:d5:41:45:aa:2b:f6:58:d6:86:f5:08:8c:8b:8a:ef:8d:
2f:a6:49:d0:7b:cc:5e:7b:c4:9f:3d:57:aa:cf:87:f9:e2:13:
f3:b2:ef:c0:d3:da:8c:2d:ef:e6:c0:ef:5b:e1:9a:0f:f0:56:
c1:3b:13:0b:76:c1:bc:35:8c:a1:21:5b:34:23:92:55:a9:ea:
81:05:1c:8b:f8:1b:1c:a0:ba:37:25:eb:f4:a3:39:0c:91:3b:
e6:3d:9e:a2:63:4a:c5:fc:da:3e:5e:27:fc:7d:5d:ff:ed:0c:
d1:a4:54:77:56:06:56:f5:37:10:b5:f2:54:20:e2:15:a8:3f:
c9:6e:4b:a8:2e:50:62:76:cd:d2:9e:87:48:fe:fc:79:86:da:
72:35:d0:80:87:b6:49:17:bc:5f:e5:c9:0b:6f:5e:39:77:9d:
f4:f8:1e:08:07:2f:ca:13:af:50:ec:f1:f8:0b:99:c4:8f:e0:
9b:d2:10:12:68:ac:cb:82:c3:db:38:99:70:15:e5:57:5b:cb:
2e:93:5b:6b:4e:c6:06:0b:03:1b:95:fd:7d:94:23:b1:8e:28:
16:86:9a:77:7b:b6:8a:9e:09:30:0b:6b:91:66:dd:24:82:19:
c0:8b:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:36 2024 by rpki-client on console-ams.rpki-client.org