Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1PJiwLtaX4mhuD5FCr0-JVhJG9g.roa
File: 1PJiwLtaX4mhuD5FCr0-JVhJG9g.roa (raw, json)
Hash identifier: 0EhppOKhMqXBjGCa5owIs2yR/Qd9cVgtUvIiOQYzmhU=
Subject key identifier: D4:F2:62:C0:BB:5A:5F:89:A1:B8:3E:45:0A:BD:3E:25:58:49:1B:D8
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 018CCA2849942011CD8882566A7DC957DA6C
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1PJiwLtaX4mhuD5FCr0-JVhJG9g.roa
Signing time: Tue 02 Jan 2024 12:31:27 +0000
ROA not before: Tue 02 Jan 2024 12:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198689
IP address blocks: 31.7.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:49:94:20:11:cd:88:82:56:6a:7d:c9:57:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 2 12:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4f262c0bb5a5f89a1b83e450abd3e2558491bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:42:1a:4d:23:99:2d:31:b9:08:5e:8e:9c:
07:8c:e9:b9:91:ec:15:6c:06:be:ba:79:c6:66:0f:
02:a0:7b:41:61:db:50:92:38:6a:38:32:c5:cc:35:
ba:5c:8c:74:a6:09:5b:0d:7b:ce:c0:ed:43:d8:02:
92:41:8b:46:bc:c6:c4:19:4e:af:de:f4:d2:a3:aa:
f0:a8:ec:e8:6a:61:ad:f5:30:5a:ef:c5:21:a5:49:
32:df:99:29:b0:35:29:3f:a0:6f:5c:e0:47:3f:17:
be:d1:02:48:2c:33:a2:54:1b:35:38:02:f9:2c:23:
6d:2b:56:fb:ca:b7:2f:85:78:45:45:13:88:25:3b:
b5:b8:3a:ac:65:b8:47:4b:c8:18:6c:3c:9c:c3:48:
89:7e:81:34:63:a2:69:fd:69:f4:54:1b:a2:45:01:
7d:df:36:e9:71:d4:2b:87:28:62:2f:47:47:5c:16:
f9:02:79:1f:ca:27:85:57:9f:fb:7a:5e:9d:7e:20:
04:c3:b4:77:1f:55:33:27:76:c1:30:30:10:d1:05:
c4:f0:02:4a:0f:9d:b1:d7:7d:0e:e2:17:52:75:13:
18:34:cf:6a:4f:30:79:ad:34:00:05:fa:6b:f9:1d:
d5:bd:76:81:02:4a:a9:56:ea:61:36:cb:08:19:1f:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:62:C0:BB:5A:5F:89:A1:B8:3E:45:0A:BD:3E:25:58:49:1B:D8
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/1PJiwLtaX4mhuD5FCr0-JVhJG9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.84.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c3:65:63:1c:73:34:e9:d1:c9:5b:d3:36:89:d8:42:b0:8b:
e5:78:66:ba:2f:ca:b5:b7:73:73:07:8c:b4:fe:8c:e3:49:e2:
2b:81:ef:78:c0:86:08:19:22:49:22:d9:33:f4:f4:59:21:f6:
2b:8e:d7:e3:13:43:c2:88:10:6c:c8:65:a5:90:70:88:59:93:
46:9b:bc:63:01:3e:17:9d:f7:c0:44:ad:3c:0a:92:ed:8c:63:
60:32:30:a9:16:64:2f:d4:d2:a1:4c:15:bc:8e:ec:a2:03:42:
72:1c:ef:ab:66:79:60:a8:2d:2a:0e:06:d8:74:ae:2b:15:54:
cf:bf:05:28:56:c8:66:8e:40:8d:e8:90:83:cb:59:07:9e:43:
2d:7f:c8:8e:f1:b6:c6:94:d3:88:3b:3f:aa:13:fc:b6:81:f9:
de:79:af:58:05:1e:cb:a6:01:c9:64:91:65:5b:89:4d:3c:5f:
21:2e:f8:63:97:89:e9:56:36:c1:5c:dc:b1:40:17:3d:28:f9:
92:95:95:02:f1:44:95:d9:f2:24:6f:2b:65:be:33:72:49:c4:
9a:38:f6:da:b0:58:96:35:3e:b6:f3:0f:1b:b3:46:ef:92:30:
ac:57:23:05:3b:ff:0a:91:8f:e1:a4:c8:6b:6b:d3:7c:1d:f3:
23:f9:20:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:21:26 2024 by rpki-client on console-fra.rpki-client.org