Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1jIHvXuKWH1LeGqeIEX8AO1UND8.roa
File: 1jIHvXuKWH1LeGqeIEX8AO1UND8.roa (raw, json)
Hash identifier: HSAyNX8Ee+VfiYpgtkoVoc4F8FxOvBqf5Vql5u0vPdc=
Subject key identifier: D6:32:07:BD:7B:8A:58:7D:4B:78:6A:9E:20:45:FC:00:ED:54:34:3F
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018E7A0B4EC7A690A3AE63BF3E3C3EE2E7EF
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1jIHvXuKWH1LeGqeIEX8AO1UND8.roa
Signing time: Tue 26 Mar 2024 09:15:45 +0000
ROA not before: Tue 26 Mar 2024 09:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25437
IP address blocks: 31.40.158.0/24 maxlen: 24
195.20.118.0/24 maxlen: 24
195.20.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:0b:4e:c7:a6:90:a3:ae:63:bf:3e:3c:3e:e2:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Mar 26 09:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63207bd7b8a587d4b786a9e2045fc00ed54343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:2b:a3:db:ad:bb:b5:ed:20:00:d4:98:77:
05:3d:f1:5f:a4:9f:e8:42:35:c3:5d:5f:e3:99:ef:
3e:4d:c9:34:10:d5:09:44:b6:b0:ad:f7:e4:ba:49:
2b:9d:47:3e:ea:f4:5c:6c:ab:3a:97:ec:53:c5:d7:
f3:6c:42:65:22:7a:82:9f:eb:21:9c:ed:42:ec:8f:
d6:5f:ab:45:86:8e:66:f2:f4:a6:d4:d6:1c:f1:61:
bf:c2:7c:e6:d9:cb:89:3c:23:40:8b:17:27:e2:74:
a9:2a:71:b8:c3:35:34:72:da:fb:40:b4:81:43:77:
54:20:48:80:1b:59:7a:cd:92:b5:85:0f:6c:ed:61:
4a:6d:f4:ed:86:2c:84:4e:c8:3a:fb:eb:b5:19:1f:
42:e6:59:de:41:ec:22:62:97:c5:d0:e8:71:b1:19:
c4:75:50:af:68:82:ba:80:8d:c2:4e:0c:ce:54:c9:
1a:0a:79:bc:fe:ea:f8:6f:2c:12:9e:0e:aa:7c:7d:
61:fb:9e:7f:3a:cc:8b:86:be:04:5a:5d:15:64:ad:
30:d1:47:e8:57:e7:d1:12:45:39:00:71:37:b3:11:
7b:d1:2f:0d:ee:f2:32:6b:ba:c6:6f:9c:94:b4:70:
19:0d:f5:e0:5f:79:22:3d:3f:0e:2f:84:83:37:97:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:07:BD:7B:8A:58:7D:4B:78:6A:9E:20:45:FC:00:ED:54:34:3F
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/1jIHvXuKWH1LeGqeIEX8AO1UND8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.158.0/24
195.20.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:37:7a:3c:53:74:5e:ad:b9:19:f7:ef:12:fe:fc:34:d8:cd:
4f:0f:31:4d:a0:50:08:eb:9e:9d:07:5f:45:e3:42:95:ba:1d:
1c:d8:7e:19:3c:8d:03:4f:e6:4d:7d:a7:81:9d:c8:2b:c2:ea:
44:de:0a:a2:25:da:07:e5:c7:c9:3a:e5:6a:fe:03:5b:a6:05:
e3:16:47:5e:8c:41:c8:cf:e7:1a:b6:46:f9:63:09:8f:f1:e2:
5e:7c:5f:d4:23:35:81:2d:69:0a:cc:b7:57:48:d4:db:9b:3b:
b7:62:57:4a:5f:35:19:0b:6c:d7:ba:bf:75:16:d0:e5:63:cd:
44:34:91:e1:e3:92:df:0e:0a:06:76:0c:68:28:21:c4:b8:ab:
b3:09:d7:4e:3c:5e:e7:61:c0:4a:c7:8a:fd:b6:01:0b:b6:1f:
e4:04:2b:81:2c:51:67:c0:81:34:a6:3c:44:ec:c7:51:5a:43:
14:55:9d:07:45:9a:f9:f9:f1:7f:34:f9:59:89:a2:b4:84:08:
90:bc:21:ba:04:d2:e1:22:29:b6:14:71:a7:1c:ba:2c:1c:2f:
07:f8:78:b7:7c:01:23:a2:71:f7:db:9c:f9:d9:e4:3a:33:45:
f3:e3:17:f3:c3:39:d1:b9:1a:f1:ba:8d:58:66:dc:a6:c3:bf:
2b:c8:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 09:04:12 2024 by rpki-client on console-fra.rpki-client.org