Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/sNgRJTkwrqR8tqNN7SLHfhw1kZM.roa
File: sNgRJTkwrqR8tqNN7SLHfhw1kZM.roa (raw, json)
Hash identifier: 9o27cNkmt9rtNQPoPJlJerAZW1e8HbfDBADeKFls878=
Subject key identifier: B0:D8:11:25:39:30:AE:A4:7C:B6:A3:4D:ED:22:C7:7E:1C:35:91:93
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 0194071F99FE26622F1AC8FACFAE998B2E34
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/sNgRJTkwrqR8tqNN7SLHfhw1kZM.roa
Signing time: Fri 27 Dec 2024 07:58:19 +0000
ROA not before: Fri 27 Dec 2024 07:58:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8011
IP address blocks: 31.88.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Dec 2024 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:1f:99:fe:26:62:2f:1a:c8:fa:cf:ae:99:8b:2e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Dec 27 07:58:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0d811253930aea47cb6a34ded22c77e1c359193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:0e:17:bf:4e:d6:1c:7e:15:48:78:aa:f9:
55:a9:5d:6d:18:a7:ab:db:09:6c:59:07:ea:2b:ec:
73:e6:ef:42:46:2c:5c:dc:26:92:a0:b6:68:85:7e:
0b:52:de:66:47:fd:a7:51:89:f0:f2:cc:92:c2:4f:
48:fa:79:c9:d3:24:66:1c:61:41:f2:55:cc:dc:36:
80:1e:af:e3:cf:ef:6f:20:62:65:c3:20:1d:04:a9:
92:7e:cb:0f:60:2f:d0:41:28:08:cb:e3:fb:d4:c5:
7c:fe:5b:b9:be:10:38:4a:a5:d7:3a:b6:99:2e:30:
3b:80:29:bb:5b:82:e4:95:b0:3d:16:40:0d:4b:90:
36:6a:00:6a:d6:51:40:a4:aa:90:17:86:e7:c2:b8:
1d:0b:84:eb:7a:2f:7b:fb:87:d9:3b:7d:38:49:69:
16:65:86:02:42:db:d4:6c:35:2e:55:46:bb:32:cf:
69:a1:0f:13:24:bc:4a:48:f3:76:32:5a:b1:94:33:
b7:22:84:46:5b:12:3c:c7:c2:51:6a:b7:09:c9:18:
c5:2f:68:1a:44:4a:22:c0:e7:45:97:f8:11:7b:f6:
c2:69:8d:a3:2b:c1:f2:01:f3:a2:e4:90:9d:b1:58:
70:c2:d6:3f:94:e4:32:49:f6:58:74:75:75:6a:df:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:11:25:39:30:AE:A4:7C:B6:A3:4D:ED:22:C7:7E:1C:35:91:93
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/sNgRJTkwrqR8tqNN7SLHfhw1kZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
Signature Algorithm: sha256WithRSAEncryption
12:48:47:1c:2b:dc:2d:01:12:18:20:b7:eb:5e:c9:05:a5:41:
f8:ff:68:3b:e3:d2:99:94:fd:7b:a3:ad:b6:53:c2:a9:87:23:
c1:3a:53:19:86:b1:32:e1:59:38:57:f4:55:2a:b1:b9:e5:ec:
37:3a:29:f3:6a:8b:a7:50:46:fd:03:2e:e8:65:bd:29:a4:bd:
10:00:21:a1:60:30:04:4b:c8:70:d5:55:51:6f:07:05:c1:a8:
c7:4a:eb:2c:ba:6e:6d:30:e5:09:34:94:54:bc:8d:e3:de:01:
7d:ca:26:8e:6b:56:d7:6a:bb:e9:8a:d2:ea:a3:d5:9d:e5:8f:
7c:ce:54:d9:69:77:ac:99:b0:ff:e8:57:e7:01:e2:cf:ed:66:
22:d7:9f:e9:a5:e9:b9:12:a1:de:64:ec:4f:52:7b:90:93:db:
c5:47:7a:36:13:5e:2b:b5:05:be:84:e0:dc:29:10:07:5e:c7:
29:82:06:42:b0:f4:2e:2e:bc:a9:41:d3:b5:be:84:93:70:a5:
2a:cd:cc:69:f5:b5:2e:59:6a:20:b7:67:2f:55:18:5f:59:50:
fb:5e:ec:08:94:30:f8:e9:0f:0c:f7:fe:40:88:2b:79:b4:61:
e3:fc:31:fe:26:29:34:36:ec:52:7b:90:91:c2:75:52:58:4b:
49:1c:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 29 09:26:03 2024 by rpki-client on console-ams.rpki-client.org