Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/Gr3ysqBQ81u1mm-HMvEzVWUT8Fc.roa
File: Gr3ysqBQ81u1mm-HMvEzVWUT8Fc.roa (raw, json)
Hash identifier: r1bF027MNnbCkSLaWdDrCN0El3GKvGa+yXdgKXy+eJE=
Subject key identifier: 1A:BD:F2:B2:A0:50:F3:5B:B5:9A:6F:87:32:F1:33:55:65:13:F0:57
Certificate issuer: /CN=0b1027ace17f0067f697c65361488192eaf64138
Certificate serial: 018CC4922783772A5E8C55AB1F497038A9ED
Authority key identifier: 0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/Gr3ysqBQ81u1mm-HMvEzVWUT8Fc.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209919
IP address blocks: 31.40.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:27:83:77:2a:5e:8c:55:ab:1f:49:70:38:a9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1027ace17f0067f697c65361488192eaf64138
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1abdf2b2a050f35bb59a6f8732f133556513f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:60:70:ff:fc:34:72:46:5b:77:d4:8c:c9:
86:7d:8e:c2:02:74:d8:a1:03:dc:c2:b4:71:9e:25:
82:af:07:ec:a6:91:cb:d1:4c:b4:da:c4:fd:f1:4e:
6b:0e:45:93:4b:95:bf:82:f6:5e:34:b5:53:44:b5:
f5:46:1d:f4:40:77:72:0d:c9:49:84:f3:04:f2:47:
bb:91:15:16:7a:f6:93:92:ff:4c:0f:7b:e4:89:ef:
ac:da:48:c6:40:05:8b:96:3c:62:ad:a5:e1:76:03:
5f:22:bf:c3:81:9a:56:2e:09:9a:71:3b:5b:95:c4:
b8:5d:f6:7f:da:a9:a1:55:fb:c7:af:25:a2:9f:ea:
da:41:59:7e:ea:29:d1:d4:a9:9d:95:b7:38:15:25:
04:35:9e:12:44:d7:53:39:82:de:c0:c9:b2:7f:d4:
8d:30:ad:84:3a:e8:9c:49:48:5c:45:18:f4:50:40:
96:70:15:e7:98:24:ce:30:f9:1a:c7:ca:9a:d8:0c:
e4:0d:82:15:4c:27:e7:8c:fb:56:95:31:b6:8a:85:
64:bb:07:87:34:9e:ae:86:51:fa:f5:8e:ac:b4:d0:
47:4f:8a:ac:c8:54:d2:34:e0:86:53:a7:69:1f:ad:
ca:af:5e:e6:68:0b:dc:67:8a:d2:9e:09:0a:b7:a9:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:F2:B2:A0:50:F3:5B:B5:9A:6F:87:32:F1:33:55:65:13:F0:57
X509v3 Authority Key Identifier:
keyid:0B:10:27:AC:E1:7F:00:67:F6:97:C6:53:61:48:81:92:EA:F6:41:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxAnrOF_AGf2l8ZTYUiBkur2QTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/Gr3ysqBQ81u1mm-HMvEzVWUT8Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b311d4-e358-4721-ab8d-6e6a5f172be3/1/CxAnrOF_AGf2l8ZTYUiBkur2QTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:27:9a:2a:0b:a8:7f:73:1f:94:90:ec:30:54:bb:70:c1:8c:
ba:2f:8a:7e:e8:7e:b2:9f:1c:bb:46:ae:f4:e2:a8:64:a4:30:
58:3b:90:27:3e:82:68:03:5c:e4:6e:0d:40:da:15:98:e5:08:
cc:71:30:35:5a:2f:a9:62:44:b2:d3:07:49:39:20:6c:58:d5:
6d:c9:f1:41:a8:e7:d0:15:7d:4d:d7:d9:e6:85:52:bf:d1:d3:
b1:9d:cd:83:a5:76:15:ab:51:3b:9c:fa:8e:ac:28:34:f2:f0:
16:60:6f:d9:12:2b:27:88:3b:4d:74:d9:3e:78:24:37:06:35:
6d:79:eb:74:d9:f3:31:c6:bb:44:d5:94:4e:0b:88:52:37:a8:
14:cf:8d:5c:a6:cd:15:c4:8d:a1:ad:ba:01:85:a7:99:8e:d2:
3b:0e:d6:24:d5:9c:b3:59:e0:b1:14:0b:f6:1e:11:d6:37:98:
11:c2:41:c3:31:08:e6:82:f4:63:e4:53:8e:48:6e:b1:59:3e:
b9:b1:55:02:dc:c3:02:4f:93:c7:fd:e5:4f:e4:bd:12:8e:58:
39:2b:7e:a0:91:4e:c4:c4:d1:5c:08:5c:27:9b:4a:5f:e1:5d:
a3:bf:d5:d4:7e:5b:b8:4e:a2:4a:10:3b:f2:73:e5:1b:a1:85:
ba:77:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:38:52 2024 by rpki-client on console-ams.rpki-client.org