Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/zWPxYfvcYsg2QgXZyTOdzAr9xac.roa
File: zWPxYfvcYsg2QgXZyTOdzAr9xac.roa (raw, json)
Hash identifier: ySeBR3UPrhRxGvFrrMBam7pqlheWgq7Hwem/P5ANnPc=
Subject key identifier: CD:63:F1:61:FB:DC:62:C8:36:42:05:D9:C9:33:9D:CC:0A:FD:C5:A7
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B21421A5571E4DC84C0E4E722295
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/zWPxYfvcYsg2QgXZyTOdzAr9xac.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211867
IP address blocks: 31.40.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b2:14:21:a5:57:1e:4d:c8:4c:0e:4e:72:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd63f161fbdc62c8364205d9c9339dcc0afdc5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:ff:14:4f:19:d7:06:f9:4a:05:5f:30:68:
22:d3:64:5c:1a:86:74:b1:de:3b:a2:a4:78:ba:59:
25:57:9a:d3:0e:c1:7b:6d:04:a3:ee:49:b3:0d:79:
d0:08:c2:ff:7a:21:f8:d0:59:d9:9d:c3:06:1a:52:
14:9b:70:4d:ba:a6:0d:ab:46:77:6e:87:7e:f0:e4:
27:3a:fd:6f:8c:a0:6f:fd:ef:f8:82:8d:43:6e:3a:
69:00:d2:6e:78:a2:37:83:b8:98:60:9a:f9:56:bd:
4b:ba:c5:7d:77:2f:93:04:66:06:4c:5b:91:a7:43:
97:d6:cd:48:a9:3a:71:92:a9:73:20:f0:43:e7:17:
82:a1:45:4d:68:1f:07:66:88:1a:e8:39:da:17:9c:
a8:c1:a2:fe:8d:5d:83:53:d8:b5:06:fa:56:54:eb:
14:17:c4:58:fc:b9:f7:3a:34:7d:c5:36:29:92:b8:
df:c1:d5:72:b0:8a:62:03:de:34:10:31:66:d3:25:
1b:e8:78:83:d4:60:0d:0b:29:37:50:31:5d:16:c0:
93:f9:fa:74:b4:18:e6:53:95:57:cf:0a:bc:1e:f8:
5b:bb:c4:3f:fb:d6:83:3e:ed:9e:25:5e:8b:66:ff:
9f:7d:26:14:1f:05:ef:a5:a4:e9:e8:5e:b3:78:3b:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:63:F1:61:FB:DC:62:C8:36:42:05:D9:C9:33:9D:CC:0A:FD:C5:A7
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/zWPxYfvcYsg2QgXZyTOdzAr9xac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:95:14:3a:5d:75:c8:24:fb:23:c3:f9:32:84:43:a7:cb:6d:
fd:21:e8:2b:d4:2f:43:c9:36:3b:be:cf:f5:1a:21:b9:3d:82:
86:d2:7c:9e:65:f8:a9:f6:b3:90:7b:51:3a:a9:5d:f7:6b:21:
cc:ab:e7:63:70:9f:b9:e9:d7:e5:b8:78:cd:1c:c3:d0:29:e3:
f9:25:1f:46:27:9d:05:d1:ea:33:31:bb:19:73:1f:6f:8f:8e:
40:dd:f2:5e:ae:27:77:1e:3d:95:d6:7b:76:a5:85:3e:8b:d2:
34:2a:56:29:17:43:67:ce:3f:52:8e:d7:b8:cf:36:a1:37:a7:
cf:77:eb:dd:ca:05:4e:3b:a0:2c:e1:b3:5b:4d:b5:c8:b2:24:
f5:48:98:ba:36:6c:e8:aa:db:3a:82:c7:8d:ff:45:1f:47:b4:
fe:03:38:4a:86:ea:43:dc:54:0b:2a:0b:32:3a:35:d9:28:6a:
74:ed:a2:9c:e6:ee:13:13:30:6c:43:01:cf:89:c1:23:1e:53:
8a:96:a2:a7:63:f0:82:79:6e:66:f4:4b:a3:05:93:4e:3c:e2:
3a:a0:9d:93:a9:79:f7:0a:f2:ce:fb:03:c5:e9:e3:76:a8:f5:
72:15:a7:48:a9:6f:eb:c9:0e:dd:bc:88:30:5e:7e:62:55:4d:
cd:64:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 17:25:11 2024 by rpki-client on console-ams.rpki-client.org