Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/onu9yqD5BtWVVTYbk4RC5dyQDE8.roa
File: onu9yqD5BtWVVTYbk4RC5dyQDE8.roa (raw, json)
Hash identifier: ATcPJPN3Ai9B1m++DKj44UIKmcvJs9hPXjHxlyiJDTE=
Subject key identifier: A2:7B:BD:CA:A0:F9:06:D5:95:55:36:1B:93:84:42:E5:DC:90:0C:4F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955984D2B0A40B451E2CDCF1A31502
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/onu9yqD5BtWVVTYbk4RC5dyQDE8.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57098
IP address blocks: 31.14.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:59:84:d2:b0:a4:0b:45:1e:2c:dc:f1:a3:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a27bbdcaa0f906d59555361b938442e5dc900c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:1a:7d:3b:d3:ba:2e:9d:3d:22:4c:d0:35:
68:5a:a3:be:e7:ad:52:59:2a:6d:03:b5:f8:80:c1:
ed:06:fa:8b:09:40:b3:2b:e4:0d:05:96:60:51:f8:
62:7f:90:84:f3:6b:53:c9:1d:aa:ac:2f:fc:d8:79:
7d:b8:bc:92:79:5f:b6:63:f7:f0:2f:d9:75:8c:52:
11:a8:25:8e:b3:bd:56:7d:4b:a9:2d:f1:11:32:dd:
17:0d:08:41:d0:63:1c:98:e8:61:a0:be:a6:6d:39:
a8:1a:83:61:bf:13:81:81:8d:23:71:2a:67:a7:8d:
26:7c:25:43:c7:3a:d6:f7:61:17:ef:52:d0:47:2d:
94:ff:b1:2e:fb:c7:a4:1b:5d:5a:37:35:92:60:d2:
6a:22:88:70:31:f4:18:df:c5:fc:fc:dc:20:94:3a:
80:e8:c1:eb:8a:9e:66:58:f0:f0:5f:a8:26:1e:47:
cb:9e:e6:b6:47:42:d7:56:87:37:40:92:9d:99:a8:
32:65:6d:fd:49:45:af:65:e3:fa:5d:91:2e:e3:84:
23:f8:a6:34:96:1a:55:17:24:f5:16:54:cd:bb:c0:
59:9e:93:fd:6c:b4:5b:20:cd:07:91:1a:79:68:2a:
0f:05:10:2b:63:37:db:c8:c7:4d:10:28:59:2d:29:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:BD:CA:A0:F9:06:D5:95:55:36:1B:93:84:42:E5:DC:90:0C:4F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/onu9yqD5BtWVVTYbk4RC5dyQDE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.18.0/24
Signature Algorithm: sha256WithRSAEncryption
80:92:17:96:9a:60:67:ec:cf:17:a0:38:47:ae:b3:b1:21:be:
9a:15:47:8b:57:b8:3d:42:9c:af:74:9d:a9:4f:26:b7:d8:6e:
2f:3c:4c:6c:91:36:82:ce:13:06:e9:11:ed:ac:08:c2:16:77:
af:65:d7:e8:06:e5:76:fe:0d:a6:2a:c8:45:42:fc:ee:70:dd:
90:2f:15:d3:19:cb:07:6b:ea:a6:18:d8:cb:a8:43:00:38:f3:
0b:be:b0:6a:cc:95:8b:90:02:9f:c6:a6:53:3c:77:57:16:51:
79:46:02:76:51:6a:02:32:da:9f:a2:c1:38:d7:a1:84:eb:c5:
e8:3e:ce:1b:40:26:4a:8e:33:8a:1c:5c:02:76:39:da:39:57:
96:2b:b5:62:5b:d8:5e:d8:47:89:de:81:e4:4f:70:70:ea:c5:
eb:0d:99:b0:59:6a:38:1c:e2:64:27:21:1b:12:d6:bf:2e:da:
9a:78:9e:93:aa:46:cf:6b:f0:61:7d:5e:d1:b7:82:55:a8:16:
05:73:9d:d4:3f:f9:28:d7:aa:4b:9f:12:2e:e4:21:61:14:c9:
8e:fa:38:4b:06:15:00:2e:2e:ae:d5:af:89:7c:8a:97:92:21:
90:de:77:a2:cc:15:00:f5:64:31:e1:72:e4:e3:9e:5f:3f:a2:
dd:10:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 05:09:30 2024 by rpki-client on console-fra.rpki-client.org