Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/8mmBdykCzEIM52JXiTdiPJWkHxY.roa
File: 8mmBdykCzEIM52JXiTdiPJWkHxY.roa (raw, json)
Hash identifier: dS4BaSDiV6A+GV85ywhzaQUSuZT1bO8aU7zBP0tmuGk=
Subject key identifier: F2:69:81:77:29:02:CC:42:0C:E7:62:57:89:37:62:3C:95:A4:1F:16
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 018EEFD21446C6E2EDEC679062F133C1B2FC
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/8mmBdykCzEIM52JXiTdiPJWkHxY.roa
Signing time: Thu 18 Apr 2024 06:08:26 +0000
ROA not before: Thu 18 Apr 2024 06:08:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 31.222.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ef:d2:14:46:c6:e2:ed:ec:67:90:62:f1:33:c1:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Apr 18 06:08:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f26981772902cc420ce762578937623c95a41f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:74:b2:c9:8b:40:ce:9d:02:3d:d7:08:df:
10:ec:5c:bb:7b:bc:e3:0c:39:0b:ef:1c:b7:98:47:
e0:6f:f3:a4:81:78:02:49:21:c3:88:97:62:39:bc:
8a:95:28:83:e1:3d:c1:25:e8:78:ab:e7:dc:73:68:
ac:80:be:29:a7:59:b6:1a:5e:b2:83:66:ff:ba:3a:
98:84:e2:87:e5:7e:79:ce:fa:93:46:4c:55:e6:9e:
4f:28:9b:44:84:56:49:78:cc:30:19:76:70:30:9a:
39:f8:60:75:eb:06:08:94:84:1c:54:75:1d:84:e1:
94:60:14:27:e8:c3:21:67:3c:78:ed:51:58:fa:b4:
db:a1:1e:2b:e6:27:5b:71:a3:75:74:da:c1:79:f3:
c3:3f:06:07:d0:c9:b0:06:3c:e0:53:3f:9f:b5:ae:
7b:c9:60:8c:83:68:6f:96:71:e0:00:23:58:19:af:
28:91:7a:fa:35:80:11:61:85:bf:c2:36:00:b0:0f:
1e:9f:13:a6:95:e3:be:16:18:18:bd:72:49:42:61:
fd:00:fb:c0:eb:81:d0:f2:55:ab:bd:5d:2c:b8:e4:
a9:44:6c:c2:de:af:b4:e3:74:5f:3b:48:49:57:77:
ea:87:6f:85:ec:10:67:ea:44:5f:ff:f2:7d:9b:04:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:81:77:29:02:CC:42:0C:E7:62:57:89:37:62:3C:95:A4:1F:16
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/8mmBdykCzEIM52JXiTdiPJWkHxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:f8:a6:19:22:59:7f:8c:94:ba:80:f5:bc:da:3c:e7:52:50:
31:04:84:00:b3:6d:1e:39:f5:2a:17:3c:73:55:54:06:c4:b7:
d2:89:e7:88:b1:87:fb:e4:c8:b7:5d:23:ce:ef:96:85:6e:4a:
91:04:82:8c:f2:ce:ba:8d:ca:19:7a:d2:01:04:7d:0a:bc:25:
f5:a5:e2:80:cb:aa:4f:23:b4:e9:db:b7:31:1d:1d:a8:54:1c:
a3:47:a9:31:6e:61:cc:5c:f4:a6:3b:59:77:45:72:a3:f1:e0:
75:4d:d3:99:8a:ed:f4:8a:52:10:59:98:26:eb:72:52:e7:75:
8a:50:e3:b2:06:61:41:f0:8f:19:06:69:69:8a:3b:e3:a9:0e:
a0:02:1c:27:52:aa:80:df:44:cb:96:45:a4:e0:c4:9e:32:e2:
58:a6:ef:30:45:7a:13:75:53:a0:7e:12:a0:db:fb:43:2e:c7:
e8:9d:8e:2d:95:d0:f7:5b:6d:74:fa:4f:de:8e:a2:25:94:8b:
97:0d:55:f1:12:d7:57:be:a5:ec:33:55:40:bb:83:27:27:83:
55:95:fc:b6:2b:94:da:3d:aa:69:c4:db:b9:03:f4:4a:f2:e7:
17:08:23:7a:52:4d:92:ed:3d:df:56:ea:6c:d9:cf:c2:fb:c8:
4c:00:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:37:25 2024 by rpki-client on console-fra.rpki-client.org