Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/49aTmhDYzXLAyR12gVzi2I8mLLQ.roa
File: 49aTmhDYzXLAyR12gVzi2I8mLLQ.roa (raw, json)
Hash identifier: H18UXwiiAGRCmHT4O0Suosn3A2Lo64+OBbO6WiJzT7A=
Subject key identifier: E3:D6:93:9A:10:D8:CD:72:C0:C9:1D:76:81:5C:E2:D8:8F:26:2C:B4
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 018CC802F37C1DBAD636BAFB68C90DAFDE41
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/49aTmhDYzXLAyR12gVzi2I8mLLQ.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 46.31.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f3:7c:1d:ba:d6:36:ba:fb:68:c9:0d:af:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3d6939a10d8cd72c0c91d76815ce2d88f262cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:8e:d3:35:58:b9:2a:13:3c:1f:65:d7:26:
13:2b:d8:18:9d:b8:8c:ea:94:d7:0b:20:94:98:21:
0f:c2:52:71:d5:01:6c:a0:82:35:61:0f:91:5a:88:
8c:0b:a8:94:10:59:03:b5:aa:35:49:3a:7e:21:06:
55:e8:79:e4:9f:d1:0a:2a:ee:8b:eb:e5:45:85:e8:
7c:bc:62:e8:0a:44:c4:25:e4:05:d7:a7:32:14:83:
16:69:7f:c5:5f:4e:f0:26:e8:08:1b:96:b0:b0:cf:
df:3f:c8:fd:f6:86:5c:44:de:b5:94:c2:45:e5:43:
14:ac:0b:35:52:a9:07:c9:13:4b:e6:6f:dd:a5:30:
fe:ea:15:7f:d5:a9:3b:ff:7a:2f:67:5e:76:22:26:
8f:90:74:fe:4a:28:53:82:fd:40:99:37:11:eb:8c:
3d:23:4b:88:89:c8:b7:8e:12:a2:26:f9:73:93:88:
99:aa:9f:ad:ed:2b:4e:8c:f2:22:cb:62:4e:bc:45:
fd:94:b5:d8:88:06:cb:bd:0f:67:35:32:77:d5:a4:
bd:52:06:93:19:71:51:ae:36:d5:3e:c9:f0:d1:29:
53:a8:80:86:bd:b3:c9:62:70:61:68:f5:30:b3:7c:
73:2a:9c:10:25:e1:e8:81:14:ba:6b:00:35:11:96:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:93:9A:10:D8:CD:72:C0:C9:1D:76:81:5C:E2:D8:8F:26:2C:B4
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/49aTmhDYzXLAyR12gVzi2I8mLLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
01:55:c8:8d:3a:18:d6:96:9b:8a:b8:24:93:a1:a8:cd:7c:f7:
dc:97:11:d5:7d:32:81:ac:13:58:46:d8:32:b0:38:2c:7b:69:
49:a5:a5:5d:c9:b6:ee:df:42:7c:8a:f4:b6:f2:86:df:d1:fe:
54:0c:58:51:aa:54:b5:b1:4c:f7:52:87:79:7d:0b:4b:01:b2:
a6:5b:6e:47:97:74:6b:72:82:5c:4c:e7:12:1c:02:74:9c:0f:
5e:9c:65:09:cb:dd:b6:7f:ce:ee:ae:95:20:9b:fe:d8:67:db:
45:bb:a0:2d:81:b9:94:43:2a:96:f2:dd:04:f4:f3:61:15:ad:
a6:91:f5:e2:c6:ce:9f:2c:12:16:97:bd:ea:38:0a:6c:51:90:
e6:58:13:6c:ab:5c:60:5b:21:44:9b:18:cc:1b:bb:a9:33:15:
8a:3e:f6:70:53:30:2d:0c:d6:89:4f:1c:ec:fe:2e:d2:b1:c3:
29:47:57:52:b7:ca:6d:03:a7:41:8a:57:3e:9d:22:8c:3f:18:
a7:66:71:e8:55:b1:45:f0:72:cf:dd:13:ed:a3:2a:05:01:22:
83:d6:56:74:0c:ea:26:b3:ff:5a:50:23:97:2e:82:ae:7c:ae:
40:64:5d:a8:33:10:40:d2:12:aa:22:27:05:50:c5:a6:60:48:
fb:02:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:05:29 2024 by rpki-client on console-fra.rpki-client.org