Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/pBsWpQD-vmbUxsqTN30uJT-COcA.roa
File: pBsWpQD-vmbUxsqTN30uJT-COcA.roa (raw, json)
Hash identifier: 3yn06mdg3AqgVAXJh+5Yxl3OKZwzDmymp3kyGrQJp3k=
Subject key identifier: A4:1B:16:A5:00:FE:BE:66:D4:C6:CA:93:37:7D:2E:25:3F:82:39:C0
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018F0B82BDD2C7C17E08A1E8A2834A669F52
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/pBsWpQD-vmbUxsqTN30uJT-COcA.roa
Signing time: Tue 23 Apr 2024 15:11:08 +0000
ROA not before: Tue 23 Apr 2024 15:11:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56940
IP address blocks: 31.131.40.0/22 maxlen: 22
31.131.46.0/24 maxlen: 24
31.131.47.0/24 maxlen: 24
91.229.12.0/23 maxlen: 23
91.229.14.0/23 maxlen: 23
91.239.164.0/23 maxlen: 23
91.239.166.0/23 maxlen: 23
176.113.100.0/22 maxlen: 22
176.114.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0b:82:bd:d2:c7:c1:7e:08:a1:e8:a2:83:4a:66:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Apr 23 15:11:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a41b16a500febe66d4c6ca93377d2e253f8239c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:93:e5:2e:4b:40:58:1f:17:08:10:e9:d8:
74:85:04:ee:24:38:64:19:b3:1c:40:ed:34:3a:6c:
a3:bf:4b:88:e5:40:d1:ae:01:41:21:5f:c1:28:83:
1a:f2:e6:55:e2:8a:85:64:20:b7:d6:b0:38:73:45:
3c:bc:84:e0:f5:72:fe:16:5a:8b:ed:38:34:bf:0e:
ba:6c:ca:d5:b5:2b:8e:d6:ce:7d:bf:99:63:ff:da:
ff:bf:4e:16:7b:5d:3c:81:22:75:c7:84:ce:85:97:
c6:42:31:79:11:bf:1b:73:ea:7e:07:af:37:f7:fe:
84:4f:92:32:e4:9e:98:f2:db:00:cc:61:a5:6f:1f:
a8:cb:54:92:68:03:e2:28:aa:7b:57:e4:e9:57:4d:
58:3a:15:46:cf:f5:26:b2:f5:83:85:66:cc:cd:3a:
4f:c5:d9:95:ee:7f:2d:dd:a7:fc:46:d2:97:95:92:
54:02:f4:40:37:27:97:64:ee:b7:fd:b5:e6:d7:4b:
aa:1b:5f:39:32:48:43:25:e3:4c:b1:25:32:c3:a8:
53:9c:b5:f3:b8:d2:99:69:40:20:4b:06:ce:c1:83:
17:1c:2b:35:ca:6a:a3:16:51:14:ce:dd:fa:16:95:
3c:18:95:b0:95:33:b6:13:fc:08:ba:f5:0c:ec:cf:
bb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:16:A5:00:FE:BE:66:D4:C6:CA:93:37:7D:2E:25:3F:82:39:C0
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/pBsWpQD-vmbUxsqTN30uJT-COcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.40.0/22
31.131.46.0/23
91.229.12.0/22
91.239.164.0/22
176.113.100.0/22
176.114.56.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:4f:ed:45:7c:c0:80:52:a9:b0:41:0a:56:e4:99:67:9d:9e:
f8:c3:f5:0e:dd:d2:f9:0d:62:06:6f:19:c4:4b:a5:c9:1d:12:
ff:10:85:9c:5f:92:4e:34:98:a5:f2:af:8a:95:52:14:2f:0a:
25:43:36:f4:65:be:8b:dd:f3:64:83:95:17:13:39:da:89:25:
60:50:11:f1:ab:06:b3:d4:b7:36:a7:8c:0f:85:56:88:0a:0a:
22:a2:63:51:03:f8:8d:42:a4:17:a0:8b:09:28:5c:7c:df:29:
2f:da:47:2f:8e:42:2a:34:86:6a:26:b7:ec:36:33:15:e4:6e:
e6:63:27:fe:61:67:1b:8f:a9:bf:e4:fa:1d:fc:e8:12:21:f0:
72:99:c9:f1:02:f0:46:8f:60:34:f7:53:f6:9c:93:0f:0c:f5:
3d:c8:f1:5e:20:03:50:49:da:3a:3c:8d:6a:43:9d:22:23:56:
af:25:88:b6:7e:2f:0c:cb:2e:f6:2c:f3:e5:c1:50:05:ca:a5:
a7:7c:45:c5:92:32:4e:a7:46:45:fa:b1:42:bf:87:32:57:3f:
73:c6:cf:93:de:1e:dc:ff:bd:ef:92:e1:64:41:90:4c:f8:7b:
df:c8:89:df:cf:37:e8:29:06:3a:f5:51:72:35:a9:21:fb:f0:
46:a8:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:28:05 2024 by rpki-client on console-fra.rpki-client.org