Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/DSOSzAC0sVNLVr6SMLBToEwn1R4.roa
File: DSOSzAC0sVNLVr6SMLBToEwn1R4.roa (raw, json)
Hash identifier: SXnx9YXI7lOq1Pnyz2Ta2KwdHY5ZBVdyw3HwAyvb4dE=
Subject key identifier: 0D:23:92:CC:00:B4:B1:53:4B:56:BE:92:30:B0:53:A0:4C:27:D5:1E
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018DFB211FCB7B01103AF170ABA05F53C0EA
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/DSOSzAC0sVNLVr6SMLBToEwn1R4.roa
Signing time: Fri 01 Mar 2024 17:47:48 +0000
ROA not before: Fri 01 Mar 2024 17:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216033
IP address blocks: 31.40.133.0/24 maxlen: 24
31.40.136.0/24 maxlen: 24
31.40.145.0/24 maxlen: 24
31.40.146.0/24 maxlen: 24
31.40.150.0/24 maxlen: 24
31.40.152.0/24 maxlen: 24
31.40.154.0/24 maxlen: 24
31.40.160.0/23 maxlen: 23
31.40.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:21:1f:cb:7b:01:10:3a:f1:70:ab:a0:5f:53:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Mar 1 17:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2392cc00b4b1534b56be9230b053a04c27d51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:5e:a7:46:57:15:bb:67:22:0f:95:c2:cd:
86:a0:eb:a9:96:c2:dc:f2:bf:40:ca:76:1a:c2:7f:
01:ce:7d:41:94:34:db:4c:33:fd:94:d4:88:3c:2d:
9e:e5:4c:63:80:3c:bc:29:5d:38:68:78:11:92:76:
3b:66:70:38:6c:9f:15:fc:83:76:d8:04:c5:e8:c7:
e0:ed:53:e4:80:b9:ce:e6:10:de:ad:da:13:3b:18:
50:cb:29:ba:d1:4f:ef:a6:b2:c0:30:22:9d:96:f8:
94:95:3a:f2:89:59:2d:ed:5a:39:e7:1c:d1:e6:77:
83:60:47:da:a6:ef:52:0c:ab:fa:67:53:22:d3:d2:
94:4a:d9:b2:a2:49:fb:62:37:28:c7:bf:65:df:54:
ab:40:f6:cc:56:db:45:ce:0b:03:00:d3:e1:cf:d6:
e0:87:3b:c1:dc:d3:ba:bc:df:96:e9:a0:86:bc:80:
75:4c:f5:cf:b1:a7:16:f0:eb:6f:9c:fb:df:15:08:
e1:bd:76:00:47:fd:61:94:2d:ec:37:f7:a0:0e:cd:
93:56:d1:01:c4:8e:30:f6:bb:0c:e2:72:78:66:14:
41:58:76:46:be:2d:6d:ca:2b:7a:c1:13:aa:dc:6d:
ae:d6:30:93:d0:06:40:ab:5e:31:fc:04:1f:3e:30:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:23:92:CC:00:B4:B1:53:4B:56:BE:92:30:B0:53:A0:4C:27:D5:1E
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/DSOSzAC0sVNLVr6SMLBToEwn1R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.133.0/24
31.40.136.0/24
31.40.145.0-31.40.146.255
31.40.150.0/24
31.40.152.0/24
31.40.154.0/24
31.40.160.0/23
31.40.164.0/23
Signature Algorithm: sha256WithRSAEncryption
76:31:32:5f:e6:41:34:dd:48:02:a7:ff:c4:c6:f5:76:ad:f0:
96:a5:b1:e6:1f:7b:60:92:13:1f:c5:21:34:c6:bd:a8:ac:d7:
9e:19:87:6b:42:ee:75:0a:9f:80:b7:f9:73:06:45:99:e3:eb:
fe:6e:d5:05:f1:19:88:d3:58:ed:89:e8:91:9d:3b:0a:ad:e1:
ca:cd:da:21:36:3c:67:e8:5a:44:cf:17:47:77:97:7f:37:6e:
99:96:c1:d7:10:d3:e9:34:1d:83:e5:d2:32:2b:59:f8:c6:4b:
cf:6f:e0:53:d5:43:02:7a:4a:0d:f4:1f:9f:65:ee:7c:82:d3:
b5:a6:4f:70:99:b2:d2:25:9f:07:5f:3d:a3:95:7d:49:a8:41:
e9:38:e0:3f:0e:e2:01:2a:c7:1f:84:ec:00:d6:af:7b:58:a7:
df:c4:94:30:49:b7:87:6f:8d:9e:4d:eb:0e:a0:4b:5c:64:78:
76:8d:92:a5:ea:dd:4d:80:c7:31:8c:21:bf:78:c7:5a:97:a1:
52:f5:83:82:6a:e2:da:84:37:78:06:fc:90:8f:3b:69:02:c8:
da:c7:46:62:d6:5b:70:33:a5:ff:8d:a0:49:c1:23:cd:76:14:
2c:34:24:9d:13:a2:16:76:68:dc:3a:9f:b0:db:27:26:dd:39:
92:a8:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:23:51 2024 by rpki-client on console-ams.rpki-client.org