Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ogGsqto0Wa08mTtMZag2UFzObzQ.roa
File: ogGsqto0Wa08mTtMZag2UFzObzQ.roa (raw, json)
Hash identifier: 5yDa5XNtJZDFsdOvdTHZRczGKB8Ol62Uy9f9HgO8eaY=
Subject key identifier: A2:01:AC:AA:DA:34:59:AD:3C:99:3B:4C:65:A8:36:50:5C:CE:6F:34
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0190E57A6FD2771FCE6C71F7F39CEF45DEBD
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ogGsqto0Wa08mTtMZag2UFzObzQ.roa
Signing time: Wed 24 Jul 2024 16:02:04 +0000
ROA not before: Wed 24 Jul 2024 16:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57456
IP address blocks: 31.24.87.0/24 maxlen: 24
185.124.64.0/24 maxlen: 24
193.26.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e5:7a:6f:d2:77:1f:ce:6c:71:f7:f3:9c:ef:45:de:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jul 24 16:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a201acaada3459ad3c993b4c65a836505cce6f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:ea:71:98:f0:f3:3f:b6:f0:5e:c0:83:68:
88:d5:4c:71:a3:b9:5a:5c:53:c9:86:bd:ac:62:e4:
0a:2c:76:d4:21:fb:42:3f:97:ca:bd:bc:70:53:a3:
9b:8c:0f:50:97:a7:b9:5a:a5:0b:bf:77:1a:dd:91:
3e:9a:c5:13:bb:1a:74:9a:e5:2f:9c:97:90:62:4c:
25:18:41:ad:69:6f:19:9b:69:b4:e1:8f:e6:14:ed:
6c:d9:34:c6:4e:91:46:65:69:12:51:c7:1c:1d:e1:
41:69:88:f9:87:5a:36:28:c1:0c:14:8d:e2:18:73:
69:74:86:98:37:f9:a9:f2:26:4c:4a:0b:7b:5d:65:
6d:f7:9b:51:90:77:3d:01:0e:c3:67:81:ba:85:92:
c9:c8:27:a3:41:4c:5d:0a:23:a9:4c:c9:d9:89:85:
b0:ed:3c:94:38:54:1e:f2:dc:22:95:2b:b8:15:c6:
71:05:40:f7:d0:d4:2b:7b:6e:0c:55:ac:22:25:47:
25:c9:a9:fc:e0:e2:06:fd:ab:b7:d0:ea:69:ad:85:
db:32:36:4c:2f:f5:a1:ec:ae:91:b5:f0:f3:1e:70:
db:0b:4c:1f:5a:49:04:c0:33:f1:0a:cd:ea:4b:e4:
7f:b3:bf:81:c1:4a:19:04:6d:77:00:94:6e:53:e9:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:AC:AA:DA:34:59:AD:3C:99:3B:4C:65:A8:36:50:5C:CE:6F:34
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ogGsqto0Wa08mTtMZag2UFzObzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.87.0/24
185.124.64.0/24
193.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1f:d9:e0:bc:c0:20:90:7d:8d:b9:e2:bd:9d:69:ac:27:6e:
74:d4:a7:4f:52:1c:23:e5:bd:30:74:d5:14:4f:76:c2:f5:fe:
08:c9:e7:54:3c:c9:46:08:d7:d4:30:0a:3f:b9:b1:b0:90:67:
a0:41:f4:62:85:40:cb:ae:2b:37:27:af:e1:0d:b9:b8:f2:ca:
da:08:0a:2d:b9:95:8a:a0:77:2f:90:f1:0f:b9:da:07:3a:ca:
85:d2:4b:c2:ad:09:ca:ef:69:77:0a:25:73:27:19:19:b5:22:
95:41:73:3f:9c:fe:40:98:21:01:9c:1e:49:64:77:3d:7a:8e:
a3:68:12:44:c5:ae:59:9a:ae:f8:28:62:aa:5b:47:e8:54:35:
08:3b:5e:9f:f6:bc:5e:35:4f:f8:24:4c:08:2c:6e:8a:61:7a:
ca:28:c4:7d:cc:b7:37:87:0b:58:d8:e4:89:a4:8b:12:59:ac:
29:99:ed:07:c7:a8:78:a0:42:36:37:d1:16:33:d1:9f:1b:95:
53:ba:4b:7f:1a:47:ef:33:7f:28:d9:76:f5:88:f6:97:ea:f2:
a8:82:b7:52:d3:16:89:b5:33:0a:1a:45:13:08:52:7d:f7:f6:
b4:5b:15:dc:13:22:d0:98:e1:2d:46:fe:6d:60:17:43:ac:65:
a0:da:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:57 2024 by rpki-client on console-ams.rpki-client.org