Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa
File: 0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa (raw, json)
Hash identifier: E0Kj+W6esVMqIKCGcUkEMei4ErKpGpaFSbg9mRjnHwc=
Subject key identifier: D3:E2:89:D1:BA:8B:7C:6A:D1:C0:DD:C9:4A:73:0E:84:5E:8A:EF:02
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 018CC802F2D65ADE48D29CE71EA4444A7E46
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207326
IP address blocks: 46.31.79.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f2:d6:5a:de:48:d2:9c:e7:1e:a4:44:4a:7e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3e289d1ba8b7c6ad1c0ddc94a730e845e8aef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:ef:80:9d:db:59:10:3d:43:80:9d:bd:81:
2a:5f:03:cf:d7:2f:c2:3a:44:46:d3:2d:3f:dc:78:
00:cb:08:53:08:ff:9a:9e:95:20:a4:94:3d:f2:d2:
16:30:bf:5b:8b:60:24:9d:79:c4:83:e6:97:d1:47:
8b:6d:b5:3a:27:1b:15:0e:a9:76:31:a3:4c:6f:f9:
db:45:c6:f1:d6:29:c3:48:1f:df:e9:81:37:09:f9:
06:cf:a4:1d:9e:ad:55:1a:3d:9a:68:4a:5f:af:84:
06:37:fa:c2:27:34:59:8d:2b:7a:5c:7c:c8:c2:0f:
d6:7f:b7:74:33:46:15:a9:d3:34:ff:de:57:7a:ae:
94:d7:ab:cf:2e:63:da:06:15:d4:7f:1f:5d:ee:0a:
33:41:2f:93:eb:18:99:24:ec:c0:b2:c1:94:8b:2d:
60:94:7d:55:9d:07:70:ee:3d:37:50:16:31:30:fc:
13:8f:fc:81:f1:1c:81:2c:9b:d4:2d:0d:05:5e:bb:
51:b4:1e:b9:2b:68:bb:64:24:c2:27:fc:ba:59:44:
ba:68:85:e5:21:b2:51:8e:d0:32:72:b7:7d:e4:ce:
41:4c:18:97:d4:da:73:8f:b2:70:b3:bb:7c:90:05:
e7:df:f1:87:40:ca:35:11:73:31:b6:e2:fd:32:53:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:89:D1:BA:8B:7C:6A:D1:C0:DD:C9:4A:73:0E:84:5E:8A:EF:02
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/0-KJ0bqLfGrRwN3JSnMOhF6K7wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.79.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:3c:b2:6e:19:99:81:d5:2b:c5:3c:f2:28:d7:01:4b:d7:
51:77:8b:4b:ce:06:49:dd:0b:11:1e:d2:24:02:b4:93:47:4a:
84:ae:0a:1e:e5:ec:11:a1:58:03:75:11:4c:05:d4:31:76:d0:
67:a7:42:e0:61:23:4a:05:e7:db:5f:80:9b:f7:6c:5f:6c:3a:
d0:57:cc:06:a8:a1:4e:c6:6e:30:b3:cd:f6:42:ba:9a:5f:e1:
53:59:5c:d5:3e:78:0f:6b:0a:b7:ef:eb:c5:02:71:58:be:2e:
6f:b3:c2:2f:7d:17:31:6f:8a:8b:0d:38:dc:92:53:d3:d3:9d:
f9:0f:d7:47:a4:69:d0:01:38:96:67:5f:38:cb:43:26:e6:87:
b9:c7:2e:cf:e3:f1:f0:d9:c1:15:e1:e0:f7:99:84:eb:a8:82:
87:ca:ad:53:63:a1:bc:ee:e7:63:ea:fb:3a:ae:5e:99:cc:20:
04:31:35:63:44:82:28:59:5d:07:20:72:72:7f:1d:ef:85:93:
0f:48:2b:b8:db:89:1c:44:6f:2f:12:35:99:c7:55:3f:d8:b2:
9e:39:22:b7:14:21:db:83:46:ae:e3:65:70:b5:76:71:6b:78:
2c:74:fa:d2:2c:89:b6:a3:d9:4b:37:44:4e:08:38:24:b5:f4:
4e:cb:de:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 20:33:22 2024 by rpki-client on console-ams.rpki-client.org