Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/2J9K2FUlpVlcpkAGKDiXseJyyCg.roa
File: 2J9K2FUlpVlcpkAGKDiXseJyyCg.roa (raw, json)
Hash identifier: cxiu71fn6O5GUI9ovPHE7VnEOxABH145Di8EU0jUuGE=
Subject key identifier: D8:9F:4A:D8:55:25:A5:59:5C:A6:40:06:28:38:97:B1:E2:72:C8:28
Certificate issuer: /CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Certificate serial: 018ED759BFA6E0E479548F07F9247E333ECC
Authority key identifier: 24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/2J9K2FUlpVlcpkAGKDiXseJyyCg.roa
Signing time: Sat 13 Apr 2024 12:06:06 +0000
ROA not before: Sat 13 Apr 2024 12:06:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
2a12:4040::/29 maxlen: 29
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:59:bf:a6:e0:e4:79:54:8f:07:f9:24:7e:33:3e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2437736e6f55900adbfb0456c4164f67b453ac8f
Validity
Not Before: Apr 13 12:06:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d89f4ad85525a5595ca64006283897b1e272c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:75:d8:52:22:e2:59:e9:a9:ef:a4:db:b5:
52:a4:83:8e:04:99:34:dc:0b:1c:da:a2:58:9d:8a:
d4:37:ac:73:5c:66:d1:2b:8a:0a:16:e4:79:ac:71:
07:3d:79:13:c5:11:01:f5:a9:b8:10:cf:3d:d0:93:
79:73:fa:c1:37:71:20:28:ac:5c:15:02:10:7f:8a:
bf:25:28:68:ea:7b:0e:4c:08:bd:bd:a3:07:2f:f1:
27:e0:69:4d:b3:9e:c8:fa:25:80:3e:cf:05:4d:15:
c2:54:f7:ca:dc:d9:3f:e5:ca:1d:a9:7f:ea:aa:05:
56:89:e4:eb:fe:ff:5a:7e:ac:74:1b:8b:5f:4d:18:
8e:5c:f6:8f:74:b5:76:0b:02:b2:83:2d:f0:7e:71:
e9:ca:b0:fe:b2:37:c8:f4:5c:3c:15:fd:97:40:a2:
04:67:bc:c6:ba:01:ce:46:49:0c:ec:5d:e2:1b:15:
d4:f6:7d:4c:bf:7d:ee:5b:38:6f:68:38:46:cd:a6:
e9:fb:e7:fe:6b:b5:8e:7e:2e:ac:1e:bd:c5:9b:6e:
4f:50:9f:0d:48:f9:1e:ad:a7:cb:a9:e0:0b:c0:45:
a8:6d:94:fa:36:62:fb:8b:cd:70:32:04:f3:ec:5d:
24:5f:79:45:69:7a:06:a6:9c:bc:48:e8:1d:66:85:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:4A:D8:55:25:A5:59:5C:A6:40:06:28:38:97:B1:E2:72:C8:28
X509v3 Authority Key Identifier:
keyid:24:37:73:6E:6F:55:90:0A:DB:FB:04:56:C4:16:4F:67:B4:53:AC:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDdzbm9VkArb-wRWxBZPZ7RTrI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/2J9K2FUlpVlcpkAGKDiXseJyyCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/52bbe0-4cf3-4e31-9273-31668ae3b166/1/JDdzbm9VkArb-wRWxBZPZ7RTrI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
91:46:da:c2:16:af:34:77:18:59:4a:a5:5c:05:f6:85:42:42:
8e:ee:1b:a0:f7:ab:f2:a6:51:ac:13:b5:46:83:04:e4:ac:9f:
d9:12:0a:0d:c5:d0:e2:70:84:20:6c:16:77:9a:a1:ee:d4:6d:
8b:43:2b:0d:5a:0f:6e:68:4f:9a:3f:ac:a6:56:04:d7:ce:af:
09:c0:54:9a:77:05:66:0b:15:e4:a8:c7:97:f3:19:9b:6f:89:
40:47:83:c4:c1:6b:c0:6d:2f:3a:b4:74:ec:de:69:fb:35:52:
8c:c4:61:e8:2b:44:64:8c:18:bb:15:d7:c4:e4:15:0f:54:d4:
7a:1c:1c:81:c1:63:d5:70:5d:5b:ae:2c:9b:11:4a:53:a1:c9:
63:16:5a:06:8e:32:95:20:69:7e:7d:88:6b:d9:6c:8e:5d:95:
fb:26:ae:7a:6b:fd:dd:24:67:00:c3:4a:ba:6f:56:01:6a:2a:
63:63:32:05:d9:3e:92:5f:b4:44:2d:a9:c8:35:76:eb:bd:99:
12:10:b9:cc:bc:cb:f0:9f:d7:6d:6d:45:39:98:1f:16:74:c5:
14:d5:6f:ea:aa:fa:b8:99:f2:37:c2:eb:7a:43:4a:ab:69:2b:
4f:15:d1:24:12:80:c0:b8:db:eb:c6:4c:b9:d9:0a:99:a3:37:
88:28:39:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:35:22 2024 by rpki-client on console-fra.rpki-client.org