Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/D0Cjq46m4cRRxlluMjP2Df9UdaU.roa
File: D0Cjq46m4cRRxlluMjP2Df9UdaU.roa (raw, json)
Hash identifier: ENrSElbqcVgFkpLxxQ3YKH2XNxUNMn8lPjDdW+0scYg=
Subject key identifier: 0F:40:A3:AB:8E:A6:E1:C4:51:C6:59:6E:32:33:F6:0D:FF:54:75:A5
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 018CC86F1B012EB4EFFDECC1CE3FCD332E6F
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/D0Cjq46m4cRRxlluMjP2Df9UdaU.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48024
IP address blocks: 31.22.104.0/22 maxlen: 24
31.22.104.0/24 maxlen: 24
31.22.105.0/24 maxlen: 24
31.22.107.0/24 maxlen: 24
31.22.106.0/24 maxlen: 24
2a02:7080:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:1b:01:2e:b4:ef:fd:ec:c1:ce:3f:cd:33:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f40a3ab8ea6e1c451c6596e3233f60dff5475a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:3e:93:7f:c8:b6:71:1c:c6:a1:2b:01:27:
9f:b9:31:51:65:16:a2:27:7a:25:7c:3a:54:12:a3:
62:ae:07:d0:72:f7:55:48:d5:07:d0:1f:60:00:54:
b5:44:22:b5:63:4b:0f:60:f3:b4:e2:ac:33:ee:b5:
58:60:56:4a:8b:8a:cc:0a:1a:68:6b:e4:0d:68:51:
16:ab:4b:c8:38:a3:8b:fa:27:a3:f9:fc:bf:2f:7e:
75:f1:1d:3e:4e:4a:69:5f:4b:68:74:f8:c7:13:f6:
58:8a:d3:d3:f2:71:68:f5:d2:fa:9c:d3:9b:01:27:
b5:6c:f8:91:eb:d5:34:42:56:93:7f:d1:a7:5d:93:
28:51:72:d3:63:97:15:f4:fa:82:8d:83:e6:e3:df:
87:bd:be:bd:87:c4:27:69:dd:c9:09:c2:0e:00:6c:
8f:eb:f8:1b:3a:e7:56:fc:31:4b:67:67:71:87:5e:
26:1b:2e:53:5f:b1:0d:5d:61:50:b3:3e:61:c2:69:
99:07:17:a8:8c:2c:b2:84:de:97:3d:ac:0c:6a:44:
bc:c8:8d:d0:a6:cf:a0:94:75:1d:25:88:81:6f:a1:
fd:44:8e:47:84:f9:a0:89:05:f0:4c:83:04:28:0c:
75:3d:95:42:2b:c6:2a:85:20:30:8d:5d:f1:9e:54:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:40:A3:AB:8E:A6:E1:C4:51:C6:59:6E:32:33:F6:0D:FF:54:75:A5
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/D0Cjq46m4cRRxlluMjP2Df9UdaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.104.0/22
IPv6:
2a02:7080:3000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:4b:95:37:10:d0:44:cb:c4:cd:be:eb:e0:a8:1d:cd:c1:a6:
63:4d:f8:3c:8b:54:22:6f:5c:fe:c0:81:0b:ba:22:6f:16:e8:
97:96:76:51:69:f1:3c:d3:b0:3b:d8:17:fc:fd:8d:92:ea:35:
95:ec:27:8b:15:81:de:24:3e:ee:af:a6:81:11:aa:87:39:a5:
a2:9d:14:d3:b3:e3:ed:5e:2f:dc:fc:87:ef:97:6d:5b:80:97:
ff:f8:d9:b5:1b:0d:c3:0c:d9:f9:f9:61:f7:cb:db:91:7d:f0:
0b:56:5b:51:54:cb:f2:55:fa:03:58:39:f1:16:62:57:00:bd:
9d:59:91:f9:49:f9:dd:d1:26:9f:7a:3e:05:e6:31:21:a0:1c:
b0:7e:99:ab:30:d4:99:35:37:09:c9:57:85:69:ba:41:e1:cb:
d1:81:76:b0:eb:b3:6a:7d:0c:f6:f1:bc:61:48:50:1a:bd:4e:
9f:8f:c8:22:a7:b4:4e:ca:85:28:d4:64:e7:51:eb:4b:4f:e2:
70:24:71:df:67:45:5e:1c:69:93:04:63:67:ad:59:6b:a7:d7:
ed:49:18:c7:be:37:86:0a:62:53:85:d8:86:42:0e:fe:05:f2:
d1:45:b7:81:1b:cc:c8:9d:fb:50:9f:ac:49:51:b4:a0:ae:ad:
e1:bc:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:23:56 2024 by rpki-client on console-fra.rpki-client.org