Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa
File: jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa (raw, json)
Hash identifier: hG++HUML6bsn16/tDvQN2S8grWblRsqRCPRXMdONRJg=
Subject key identifier: 8C:C0:3D:73:8B:58:07:D3:96:B3:B4:B1:3A:74:B8:84:07:F1:1B:FD
Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial: 019428274A5C2547EB0232BD58090DA97232
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa
Signing time: Thu 02 Jan 2025 17:54:11 +0000
ROA not before: Thu 02 Jan 2025 17:54:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198689
IP address blocks: 31.7.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:4a:5c:25:47:eb:02:32:bd:58:09:0d:a9:72:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Validity
Not Before: Jan 2 17:54:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cc03d738b5807d396b3b4b13a74b88407f11bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:a2:50:8a:8b:09:24:05:c9:57:b9:89:57:
0b:76:14:6f:74:ea:39:c4:b9:5c:8d:3e:c6:6d:43:
4e:cc:be:dc:62:97:48:11:1e:88:e3:c6:58:f4:2c:
b3:19:28:21:c4:6f:ca:f6:00:92:a0:c6:23:af:a3:
3d:be:2b:07:e3:b3:4f:96:0f:49:55:7b:8d:d6:83:
73:a6:d9:1c:7b:69:1e:ae:4d:3d:2d:07:98:01:fc:
fe:84:a9:f3:c4:9b:47:4b:77:a4:c4:3a:e8:89:b7:
49:d9:8f:e2:4e:2d:bd:db:b3:76:61:2c:57:c4:19:
0e:1f:ab:67:a3:54:67:e3:41:b4:cc:ff:7d:3e:bc:
66:15:a6:96:b9:c1:de:2b:11:73:65:28:03:17:d7:
75:04:f8:26:89:94:bf:b2:64:1e:b6:69:81:2f:a8:
4c:d8:ca:aa:e9:a2:f0:a7:3f:d7:fd:cb:af:3c:e8:
fe:a4:30:7b:27:5b:b4:d9:ef:87:b5:8a:9c:31:27:
f9:aa:c7:2b:15:cb:8c:f7:05:e0:ff:db:2b:f9:94:
e2:36:7a:38:69:3a:23:cb:41:2a:09:34:f3:85:37:
81:7f:85:0c:45:d8:30:be:d1:05:3f:3f:7f:29:28:
9b:7a:57:22:b2:e1:ac:8c:82:62:bd:be:0d:e0:24:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:3D:73:8B:58:07:D3:96:B3:B4:B1:3A:74:B8:84:07:F1:1B:FD
X509v3 Authority Key Identifier:
keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/jMA9c4tYB9OWs7SxOnS4hAfxG_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.84.0/24
Signature Algorithm: sha256WithRSAEncryption
23:49:bd:e1:a7:d7:9b:3e:aa:8e:a9:c3:95:fe:44:d8:89:92:
e8:f4:3d:64:b1:8f:31:8a:17:c8:c9:6f:cf:54:42:5a:b4:02:
68:f1:f0:4a:4a:ee:77:4f:36:17:7a:be:d6:c8:6b:1f:92:3f:
69:c8:db:4b:d4:59:4e:cc:c7:27:7f:b1:07:f7:e3:cf:57:a3:
4c:a5:2e:13:36:0b:56:7f:f6:9d:71:4b:60:d9:2b:61:51:a5:
11:26:b2:cf:66:3e:29:1b:05:d5:75:da:83:cd:e0:c1:a9:2c:
f8:04:07:3d:f0:c2:53:f6:89:5d:59:5a:87:84:7a:d7:f8:e6:
b0:da:86:81:b6:7e:2a:db:0b:7b:7c:62:70:8d:1f:f0:f3:ad:
8f:8e:91:c2:16:3f:db:6c:24:4d:1c:5b:a0:b3:33:b1:05:76:
1c:87:3b:64:f1:71:b2:ab:f7:75:fe:1b:c5:96:47:bf:e2:84:
6b:61:78:e8:b3:c2:d8:ea:77:15:a7:8b:51:2a:3a:8d:43:85:
bd:10:12:7b:d8:75:10:61:7a:5a:d8:e3:58:e2:59:bf:1d:3e:
b3:e1:87:cf:2d:d7:fa:31:a7:de:32:42:54:2a:67:0c:41:8d:
0f:c6:ae:33:0a:8f:f1:45:7d:5c:57:04:98:c6:f9:ba:b5:1a:
70:91:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:54 2025 by rpki-client