Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/d10r-L_GGsZxsk1wVrBzlwaJU8Q.roa
File: d10r-L_GGsZxsk1wVrBzlwaJU8Q.roa (raw, json)
Hash identifier: 6UV7APpH4aUwH6A4i2FmcejMtTqnTG+IaU3iKCD7amc=
Subject key identifier: 77:5D:2B:F8:BF:C6:1A:C6:71:B2:4D:70:56:B0:73:97:06:89:53:C4
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 018E9596B325C8396D388392F19EAAD090FA
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/d10r-L_GGsZxsk1wVrBzlwaJU8Q.roa
Signing time: Sun 31 Mar 2024 17:37:45 +0000
ROA not before: Sun 31 Mar 2024 17:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 31.223.192.0/21 maxlen: 24
31.223.200.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:96:b3:25:c8:39:6d:38:83:92:f1:9e:aa:d0:90:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Mar 31 17:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=775d2bf8bfc61ac671b24d7056b07397068953c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:7d:4c:4a:f3:00:6f:bc:e4:58:54:57:06:
1d:a4:bd:03:e0:95:ef:41:27:6c:c6:98:61:94:76:
8e:cd:93:ec:64:f9:7c:e8:f1:81:ed:1f:f9:9e:3a:
cf:e7:76:b2:82:b0:c4:93:33:e2:08:24:1e:7a:dd:
d8:5a:51:5e:f4:56:7d:ff:56:b1:20:ca:31:5e:c3:
21:50:be:01:e5:8f:ef:59:45:1e:f1:f7:b2:b5:2b:
8d:c8:91:7d:f5:94:f6:12:9d:f7:de:0b:e5:97:b6:
eb:38:ea:3e:b0:95:bd:6c:22:23:57:6d:55:31:ff:
d5:2d:c0:24:a4:b0:b8:e7:a9:26:17:d7:2c:8b:1f:
e0:65:08:c4:88:39:3b:cf:85:af:4d:ee:c2:53:8f:
73:2c:da:ff:79:8f:98:36:f6:68:69:85:ea:f5:0a:
c4:a6:d7:60:31:0c:5a:7a:d1:8b:4a:0a:d5:c5:f4:
5d:a9:70:d5:63:c3:02:b0:ad:5e:d1:a1:ae:0b:d5:
1f:a1:e5:5a:f6:e2:90:98:90:6c:dc:4a:82:16:5e:
91:54:0a:e8:34:f8:ec:3c:93:e3:0b:79:57:91:a4:
70:87:f0:f9:44:a9:45:bf:21:44:2c:8c:86:04:2e:
a7:ce:50:97:ce:a2:d9:fb:52:cd:20:29:68:82:21:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:2B:F8:BF:C6:1A:C6:71:B2:4D:70:56:B0:73:97:06:89:53:C4
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/d10r-L_GGsZxsk1wVrBzlwaJU8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.192.0/20
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:52:b2:35:9d:58:5e:3f:b3:8c:73:53:43:36:ea:37:a9:e7:
e8:8f:2c:27:27:ab:1f:20:c2:8f:f4:c3:21:c8:88:75:b0:af:
2a:df:9b:b7:2f:68:00:43:05:c9:c5:f2:8b:82:0f:50:f6:69:
de:86:90:f5:aa:27:d6:f2:a9:af:4f:4b:81:f2:c4:1d:b9:7e:
f2:b1:8c:35:68:50:50:91:4c:61:bf:e9:82:d5:c5:92:d1:39:
3f:da:90:6d:02:b7:dd:3f:f7:31:2e:3b:bc:65:51:46:5d:ac:
e1:db:93:3a:da:a9:7f:6e:9d:9f:e8:e2:44:51:01:e4:81:7e:
02:19:86:4b:8d:b0:d2:81:ff:43:f3:82:5c:8a:91:95:05:e8:
ac:c5:aa:8b:4a:54:87:bf:5a:7d:86:46:c2:31:2d:06:a2:92:
20:c0:98:73:76:e4:14:4b:39:27:3a:04:99:08:e8:59:7c:67:
50:81:08:f3:6d:14:6d:77:a7:a2:c4:44:07:1f:80:1d:a4:10:
5d:7e:68:ef:9d:91:22:36:6a:65:9a:4d:b2:fb:d7:df:1e:e6:
75:84:09:4e:78:1f:5d:f0:14:df:48:29:98:85:69:74:ff:ab:
de:0d:bd:bc:af:01:5f:b3:f3:53:55:23:0b:d7:1b:e0:be:37:
ed:1f:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:31:58 2024 by rpki-client on console-ams.rpki-client.org