Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ZnqT5k43OEA-QV9-Slz8EeyeO6k.roa
File: ZnqT5k43OEA-QV9-Slz8EeyeO6k.roa (raw, json)
Hash identifier: sbr3/6qZwnqpv+9/PNLMYFP5pJWlpNGGcoEfIiDlOH4=
Subject key identifier: 66:7A:93:E6:4E:37:38:40:3E:41:5F:7E:4A:5C:FC:11:EC:9E:3B:A9
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 018EE18CD43A05D3DF240B682171B940C37A
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ZnqT5k43OEA-QV9-Slz8EeyeO6k.roa
Signing time: Mon 15 Apr 2024 11:38:06 +0000
ROA not before: Mon 15 Apr 2024 11:38:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51683
IP address blocks: 31.40.241.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
185.115.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:8c:d4:3a:05:d3:df:24:0b:68:21:71:b9:40:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Apr 15 11:38:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667a93e64e3738403e415f7e4a5cfc11ec9e3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:48:96:31:f0:15:a2:be:4b:a3:9b:59:c8:
f8:1e:2d:06:c0:e8:c4:5c:f8:16:8b:68:92:00:18:
d7:5d:19:ee:aa:54:a5:7c:9e:d8:34:af:7d:3f:f0:
d1:1c:dc:6d:65:af:25:66:16:2c:35:db:2b:ad:48:
7f:56:ea:fc:56:24:47:6f:1f:57:9d:63:ee:dd:ab:
04:af:82:5b:06:f4:b6:de:1c:6c:e6:16:69:8f:18:
84:3c:8d:0f:51:34:06:b6:53:8c:c1:8c:63:f0:0a:
f1:7c:d2:f6:5e:64:18:ba:0f:1b:a0:d3:4a:eb:a4:
44:35:11:23:94:6c:c1:cd:72:64:6d:17:27:f6:ba:
c5:c4:e2:6c:0d:b9:04:f4:1d:c6:2e:50:e3:b1:d8:
ab:13:de:37:09:b3:cf:ad:e1:1c:d3:aa:20:13:24:
ed:0f:90:a3:6d:f3:1d:ed:71:e2:63:c5:9f:63:3d:
4b:c5:09:ab:f8:e5:fc:55:b7:84:7a:f1:8d:3a:30:
59:da:82:ed:f3:77:05:82:71:5a:ee:43:17:b9:67:
19:df:ff:9e:a8:aa:3f:61:da:b0:38:de:c6:20:6f:
a7:24:aa:53:e7:3b:45:ca:03:74:5b:0f:6b:66:d3:
4b:2e:23:2c:d2:60:38:4a:07:b8:d6:98:41:10:d9:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:93:E6:4E:37:38:40:3E:41:5F:7E:4A:5C:FC:11:EC:9E:3B:A9
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ZnqT5k43OEA-QV9-Slz8EeyeO6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.241.0/24
31.40.243.0/24
185.9.138.0/24
185.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:0a:f5:c7:e5:73:67:aa:1c:fa:64:ff:45:67:ed:c4:11:c1:
f9:f6:ba:ee:cd:06:c9:37:96:41:f9:a1:66:12:96:51:3b:d8:
ed:7e:da:9b:46:51:27:03:e6:08:ef:d8:54:36:e7:68:b6:2e:
b8:9d:98:b7:62:91:6b:8d:74:b4:b6:44:b9:67:86:94:4d:9e:
e1:b9:33:c1:f2:78:d1:01:99:a5:9f:1b:80:41:9c:d0:3a:e6:
5e:21:98:d4:85:35:05:6a:05:07:1e:ab:09:ed:c0:6c:f5:01:
05:1e:ec:14:2b:4e:1f:44:35:5d:57:8f:be:2c:39:63:b5:15:
ca:0c:b6:42:ed:95:72:cb:bf:2a:6a:48:36:52:21:3f:98:c7:
3c:96:98:38:3d:c7:37:82:58:8f:2c:8c:b5:06:dd:3a:16:64:
db:b0:dc:9a:49:0a:1a:45:dd:0d:81:e5:52:14:38:18:00:79:
c2:0c:00:3f:65:13:7c:5c:70:3a:16:4f:76:99:0c:9a:d2:73:
a7:88:13:66:73:8d:83:8e:9e:a1:85:15:9b:02:8b:c6:25:55:
19:38:56:46:bb:b1:cb:11:61:d7:84:89:77:f3:4d:7b:b7:6a:
ec:1b:af:f5:94:d7:c6:f7:e2:5c:c6:d2:e6:8e:a4:66:5d:18:
ee:a1:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:41:30 2024 by rpki-client on console-ams.rpki-client.org