Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mAw2K8ekYV1vsQjG7q6bPXqMZb8.roa
File: mAw2K8ekYV1vsQjG7q6bPXqMZb8.roa (raw, json)
Hash identifier: Zl4U4nWcWicwHOz3tmGtMH99SAV9lmt0lvkNaXWIWPA=
Subject key identifier: 98:0C:36:2B:C7:A4:61:5D:6F:B1:08:C6:EE:AE:9B:3D:7A:8C:65:BF
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236991388B33F4BB268706A0866BAE43
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mAw2K8ekYV1vsQjG7q6bPXqMZb8.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39543
IP address blocks: 31.14.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:91:38:8b:33:f4:bb:26:87:06:a0:86:6b:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=980c362bc7a4615d6fb108c6eeae9b3d7a8c65bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:50:53:33:eb:2b:b5:e2:ae:e4:4a:21:cb:
bf:10:60:ca:d8:70:22:ed:10:1b:92:93:f8:71:73:
e1:ad:1e:34:b0:ed:cc:32:c2:87:88:19:8f:5f:67:
e0:f1:46:f1:7d:17:52:22:f3:ac:92:94:bc:c4:d7:
8b:e5:e4:38:58:09:4f:fa:67:af:dc:42:ef:0a:26:
fc:dd:c2:1c:68:eb:28:cf:1c:fc:8e:1e:6b:f6:2d:
85:db:e4:e1:e8:6b:90:e6:74:30:4a:da:95:8f:08:
e6:c4:d0:ad:a6:c1:28:2e:e5:ad:2b:8d:10:73:8c:
13:74:30:d9:8d:67:e5:f9:5a:ad:99:fe:f9:ba:22:
d3:c0:1c:0b:50:13:32:65:82:6c:13:98:93:0b:39:
57:ff:12:ea:f8:0b:9e:3a:e3:20:59:34:48:9d:d0:
81:3a:17:67:1e:f6:62:5b:bb:76:24:25:ac:bb:6e:
44:9e:a3:de:c3:1c:95:e8:6b:01:e3:1a:6c:80:ae:
a1:fa:81:1d:b0:07:39:d8:ef:8e:5a:de:77:d3:af:
87:e1:57:bc:d6:26:74:34:13:9d:5c:97:43:9d:01:
1d:08:ba:7f:a3:67:9e:8c:bd:6a:b6:40:4c:94:6c:
99:87:c1:e0:49:1b:3b:a8:62:93:4c:54:65:6e:5e:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:36:2B:C7:A4:61:5D:6F:B1:08:C6:EE:AE:9B:3D:7A:8C:65:BF
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/mAw2K8ekYV1vsQjG7q6bPXqMZb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.49.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:26:4b:d9:bf:9e:b1:83:53:8c:3f:ce:e2:e0:7e:f5:be:cf:
8b:29:75:85:56:58:12:0b:71:ee:0f:2f:dd:e8:13:b9:00:9b:
48:df:6d:06:45:87:2a:86:3f:df:a7:23:8c:b5:76:8b:67:a1:
d5:d4:84:10:44:26:fb:a5:73:06:58:df:ba:6d:7d:77:61:63:
1d:54:10:d3:8b:ba:a2:22:22:35:15:f8:98:4c:22:7a:55:89:
43:12:2f:71:1b:91:53:89:13:7c:94:af:af:97:b9:82:88:ec:
c9:5a:e0:ea:0f:ac:7b:d3:fd:5c:08:73:07:48:17:20:03:9b:
a9:6b:1d:e1:39:48:29:7e:16:fd:57:b4:1c:8b:38:27:44:d4:
a1:02:5d:c2:b2:36:1c:c7:ab:11:2f:13:ef:57:79:3c:eb:42:
f3:c1:02:0e:28:c3:95:ad:8d:9d:fe:d4:9a:0e:bb:67:f7:76:
ea:95:9c:20:48:c4:c2:e1:bc:b2:54:8c:6f:99:48:d7:04:a1:
2c:44:a6:2c:e0:0f:03:f2:73:c9:11:eb:cd:f6:f3:47:78:a8:
61:dc:7c:ce:8e:2b:8d:f1:9b:97:b3:6c:49:84:97:8e:09:eb:
93:5f:e4:a0:ed:09:ef:8c:dc:c8:ab:34:3c:da:51:58:26:0d:
13:1a:9b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:01 2025 by rpki-client