Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/L_ZBFk4Z4XjvkMXaTXIRNIwa2bc.roa
File: L_ZBFk4Z4XjvkMXaTXIRNIwa2bc.roa (raw, json)
Hash identifier: dpLzhOgQT47L3SLdPx1Whn0LnLw2YBjYUuoCXeP3nBI=
Subject key identifier: 2F:F6:41:16:4E:19:E1:78:EF:90:C5:DA:4D:72:11:34:8C:1A:D9:B7
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019425216074019D9052E9F40F189092A1A1
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/L_ZBFk4Z4XjvkMXaTXIRNIwa2bc.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8011
IP address blocks: 31.88.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jan 2025 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:60:74:01:9d:90:52:e9:f4:0f:18:90:92:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ff641164e19e178ef90c5da4d7211348c1ad9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:f9:fb:4a:ec:c6:3b:3a:70:c8:76:de:41:
e4:ce:23:85:c4:6c:58:5e:78:f6:9e:3d:60:9e:89:
c6:fa:c4:8b:4f:1e:4f:d0:9c:59:2e:f4:87:0c:67:
5b:65:0e:55:04:ad:e1:fa:59:1e:fd:71:8b:e2:5e:
c7:10:a4:07:82:3d:81:7a:aa:b5:3e:91:39:4a:e5:
e3:4b:30:61:dd:1d:6d:7c:e5:f0:c3:cb:65:2a:1e:
2d:11:96:c2:7d:fe:25:95:77:58:50:0b:aa:ad:d3:
08:28:32:dc:96:f0:85:6a:e4:aa:1d:69:df:77:c9:
fc:d1:87:f4:5a:fb:dc:17:ee:59:fa:25:2d:24:af:
b0:8e:73:f0:66:20:e2:7d:d7:fe:57:23:88:9a:19:
34:ea:ad:ba:10:3e:40:6f:9d:8c:c1:0a:fd:bb:0f:
b5:dd:c7:25:83:c4:74:4e:eb:20:78:ef:40:21:4b:
94:9b:14:bf:5c:02:b1:42:e1:a6:87:90:fa:c3:a1:
3e:1a:f1:ee:49:ff:7a:63:b8:4a:82:dc:c0:e9:44:
f5:84:8e:22:6b:3f:f9:43:aa:83:74:87:e0:f5:bb:
8f:9e:32:95:f9:3e:6e:41:67:21:75:4f:a4:db:25:
1f:ca:16:f2:38:ae:ef:92:dd:ee:8c:3c:57:50:23:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F6:41:16:4E:19:E1:78:EF:90:C5:DA:4D:72:11:34:8C:1A:D9:B7
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/L_ZBFk4Z4XjvkMXaTXIRNIwa2bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
Signature Algorithm: sha256WithRSAEncryption
4c:21:f6:54:71:14:12:ad:b4:e5:7a:05:50:49:ce:6a:21:cf:
ec:09:c1:19:64:10:89:99:00:f1:47:be:72:96:72:31:6b:e4:
2e:71:b4:e0:13:ae:1b:ca:0e:28:e9:05:5e:a0:00:d9:4b:04:
1a:8f:2e:63:41:c4:ad:4d:dd:4e:85:03:d0:0a:2f:5b:96:ed:
5f:8d:38:d8:66:fa:68:e2:0c:9d:12:a7:c4:3a:c4:e5:de:e1:
fa:b7:bc:23:af:e5:f6:8d:a1:09:f4:ee:5c:26:be:ac:28:2f:
ff:00:2f:fc:fa:30:44:de:34:91:cf:85:b8:73:5f:1f:c0:3f:
ba:eb:c1:f0:8e:32:59:b7:08:f9:e4:ae:7d:e1:b2:fd:dd:74:
eb:33:41:76:4b:f1:c3:6a:d1:dd:d5:4f:5f:2c:4e:ff:e4:47:
1a:fb:29:23:aa:ff:ac:3c:f8:42:95:24:e4:1f:82:fb:0e:46:
22:33:fb:a5:30:3d:83:ac:aa:46:b8:3b:b9:21:6e:a7:c6:f5:
0d:6d:88:3d:da:9a:b9:8b:ec:0a:6c:de:fc:25:e9:00:79:c9:
30:c1:0a:01:94:2d:30:0e:a1:d3:e2:d1:d4:c0:17:03:7b:3e:
28:89:0e:b3:72:6b:12:27:9c:c6:d1:1d:b9:74:c4:c9:11:86:
94:e8:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 6 05:49:28 2025 by rpki-client on console-fra.rpki-client.org