Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/grt2xaKyXtS6a-XIx5FIjDFxvZI.roa
File: grt2xaKyXtS6a-XIx5FIjDFxvZI.roa (raw, json)
Hash identifier: 5BJCJGca6wRnZ0Mvern3IPJ8eSo/5heC4or/5N8feD4=
Subject key identifier: 82:BB:76:C5:A2:B2:5E:D4:BA:6B:E5:C8:C7:91:48:8C:31:71:BD:92
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801AEA09CDEDCAF0B2C3DB9EA893ED7
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/grt2xaKyXtS6a-XIx5FIjDFxvZI.roa
Signing time: Tue 02 Jan 2024 02:30:02 +0000
ROA not before: Tue 02 Jan 2024 02:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48330
IP address blocks: 31.40.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ae:a0:9c:de:dc:af:0b:2c:3d:b9:ea:89:3e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82bb76c5a2b25ed4ba6be5c8c791488c3171bd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:1d:93:5a:26:ab:6f:8e:36:43:95:5a:39:
c7:3c:eb:68:f1:87:f4:92:dd:3a:bd:58:6f:e3:58:
f7:97:ea:45:df:84:a3:4f:5c:88:7e:20:50:9c:53:
67:40:21:4a:89:9c:b0:11:db:fa:bd:39:23:ac:4a:
09:58:19:c0:7a:1e:7d:0b:a3:07:ee:b5:b6:ba:b7:
1e:25:56:fe:44:3f:4a:a6:01:74:c2:25:06:3a:8c:
da:4a:ac:31:aa:d9:2a:8f:9c:1c:e2:53:d0:a7:fd:
b4:86:7d:43:5d:d0:1d:68:4b:e3:6e:4f:50:05:f9:
47:29:02:ca:22:fc:c9:a1:57:89:b6:20:5f:6e:05:
00:6e:ed:41:54:fb:65:bc:44:f4:f8:c6:84:3d:a7:
20:90:d3:f3:b1:9f:b0:bf:8f:0d:6b:40:c0:aa:45:
f2:d3:41:51:1e:ce:9d:9a:52:d8:a5:1a:9b:e9:7c:
56:72:64:5e:0f:69:a7:9e:e4:ab:c2:db:7a:94:a5:
83:f9:24:e0:f6:1b:f0:e4:6a:d1:a0:6d:73:cb:8d:
fd:64:5c:bf:4d:2b:ea:95:37:e2:3a:8e:e0:d8:89:
58:16:72:c9:65:d8:fc:ca:29:0a:de:05:55:d2:79:
b7:62:fa:a0:6f:98:2c:eb:b8:4f:2b:eb:8d:41:79:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BB:76:C5:A2:B2:5E:D4:BA:6B:E5:C8:C7:91:48:8C:31:71:BD:92
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/grt2xaKyXtS6a-XIx5FIjDFxvZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:df:96:20:42:a9:8c:0e:6e:28:7d:ac:b7:28:97:06:ae:fd:
93:da:48:dc:cd:e1:15:39:c6:f6:46:b5:5c:09:dd:b7:e4:35:
e0:d7:7e:1c:2f:ab:b0:6b:d8:9a:ae:bb:bb:9d:69:f8:87:a8:
6e:b8:32:96:dc:4c:be:93:d0:3c:11:25:18:ef:5a:9b:de:3c:
90:bf:d9:fd:43:94:ad:41:89:90:f1:5f:60:b3:e8:df:10:b3:
4d:02:61:4e:8c:97:16:4a:d2:2c:79:e9:4d:23:16:19:37:3d:
57:67:f2:2a:f8:63:15:6f:55:52:e1:d5:3f:3e:f9:c7:2e:71:
44:75:6a:6c:46:54:fa:34:8d:23:3a:5a:1a:18:2b:62:09:3b:
ca:3e:f9:a7:be:d6:7d:c5:c1:6f:ff:4d:2a:6f:71:0a:d1:d5:
06:c1:ee:fb:cf:21:e4:42:75:62:54:0b:fe:87:97:ce:58:1f:
fb:3d:0c:4a:d0:b2:e6:19:8b:67:23:d6:6b:9d:7a:0a:7c:ed:
10:34:0d:e5:57:7d:6e:ff:cf:fb:06:44:36:2f:5b:c9:c7:83:
87:66:a0:38:87:93:74:4d:47:f3:c7:4d:bd:7b:9f:a6:84:c8:
ab:6a:b9:48:0f:ab:33:06:2a:9f:4d:c6:f9:13:9a:08:1f:1c:
19:3e:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:00 2024 by rpki-client on console-ams.rpki-client.org