Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rrripexqqD0GXDADs1RuY5f0jkM.roa
File: rrripexqqD0GXDADs1RuY5f0jkM.roa (raw, json)
Hash identifier: LNIJG4/3eC49LM/IPF+AmM1eJhQq0quBhjg1YqhmNu0=
Subject key identifier: AE:BA:E2:A5:EC:6A:A8:3D:06:5C:30:03:B3:54:6E:63:97:F4:8E:43
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBD0CB86837A5AD2D5D80C47F33B97
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rrripexqqD0GXDADs1RuY5f0jkM.roa
Signing time: Tue 02 Jan 2024 10:32:58 +0000
ROA not before: Tue 02 Jan 2024 10:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51120
IP address blocks: 31.46.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d0:cb:86:83:7a:5a:d2:d5:d8:0c:47:f3:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebae2a5ec6aa83d065c3003b3546e6397f48e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:26:c3:9c:89:79:d1:87:2f:eb:0d:43:23:
b5:d1:dc:92:b4:c9:01:f6:01:f2:6c:c9:e7:49:35:
65:23:cf:6b:73:e1:55:00:2e:e7:c3:91:7d:31:e9:
45:6a:bb:0a:88:8e:dc:0d:4c:50:c7:8c:f5:15:93:
62:99:48:7d:9a:6f:3e:a3:2a:de:95:77:bc:89:9b:
9b:4a:4d:05:c7:03:5c:0a:ce:ca:58:2f:76:54:d4:
9d:58:a9:b4:b6:4a:c3:e4:c9:eb:64:8e:ab:1b:85:
3b:57:99:15:58:2f:aa:2a:50:e4:df:09:a4:bb:99:
10:ab:d5:c6:60:6f:ba:3d:c9:0b:89:6f:28:41:5e:
51:86:43:a2:94:fc:d2:f5:86:e0:a0:ca:69:f8:84:
13:25:51:4f:54:fb:f0:3c:7b:7c:51:10:18:d3:ca:
1f:6c:49:12:66:ce:82:97:f0:7d:24:5d:98:a4:a4:
7b:7e:0b:08:db:a7:3d:24:d6:56:94:84:f2:9c:64:
89:c7:f6:68:6f:77:05:c2:62:f9:00:1e:1b:e1:bf:
45:83:d8:34:44:ea:36:07:78:74:88:de:2d:d3:a6:
04:9f:9a:b4:71:f7:a3:70:5e:23:e6:aa:a8:cf:02:
89:ac:f3:8a:e1:f4:fa:84:e7:eb:7a:76:ec:91:cb:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:E2:A5:EC:6A:A8:3D:06:5C:30:03:B3:54:6E:63:97:F4:8E:43
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/rrripexqqD0GXDADs1RuY5f0jkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.46.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:94:d3:3e:4d:4a:54:03:4d:87:f3:63:a7:5e:fe:e2:09:73:
8c:a5:b9:ba:ad:1d:0d:44:79:20:65:26:66:e3:32:a3:02:f7:
3a:31:27:55:97:b5:70:71:fa:76:40:93:3a:39:a0:c5:1f:0e:
48:5b:85:91:11:85:00:14:d3:e7:28:49:23:20:50:a6:90:03:
74:87:83:72:fb:b7:18:d0:ea:c9:b7:84:97:72:87:c6:ca:ac:
a4:3e:f3:81:7c:53:50:ec:43:ec:58:d3:a9:81:6b:e6:d2:46:
98:ca:2f:52:6c:6f:81:74:bc:3b:9d:b4:2d:00:84:19:b5:16:
d6:83:68:60:9f:db:6e:92:a9:9f:6f:1e:85:34:5f:9a:36:d3:
d6:01:0d:ba:8a:16:6d:d7:e8:f7:03:74:e0:8d:a8:b2:82:78:
ea:ae:91:1f:d5:04:4c:f4:e0:68:4a:ae:ff:be:15:02:80:b5:
0b:59:c8:ed:78:49:25:f1:e4:7c:4a:36:b0:ba:ff:8b:6d:6a:
5e:11:d5:f0:e2:24:43:56:f2:c0:e6:38:14:57:1a:e7:2a:be:
d4:26:21:e8:19:68:a0:04:23:7a:b0:0f:55:c0:95:18:a3:b8:
a8:be:c0:59:82:44:2e:f2:27:49:e8:bc:57:ac:70:b1:3a:5f:
e9:64:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:27 2024 by rpki-client on console-fra.rpki-client.org