Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/3q1itMbFui44nBJsKaLgDLNVtX0.roa
File: 3q1itMbFui44nBJsKaLgDLNVtX0.roa (raw, json)
Hash identifier: YhfZdmd9WdUngCRaheiecQTZd4Il1X7xddupn/bFUGo=
Subject key identifier: DE:AD:62:B4:C6:C5:BA:2E:38:9C:12:6C:29:A2:E0:0C:B3:55:B5:7D
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 01916F2999157C5800282C4AAE6E21CD61C1
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/3q1itMbFui44nBJsKaLgDLNVtX0.roa
Signing time: Tue 20 Aug 2024 09:41:22 +0000
ROA not before: Tue 20 Aug 2024 09:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 31.7.32.0/24 maxlen: 24
31.7.33.0/24 maxlen: 24
31.7.34.0/24 maxlen: 24
31.7.35.0/24 maxlen: 24
31.7.36.0/24 maxlen: 24
31.7.37.0/24 maxlen: 24
31.7.38.0/24 maxlen: 24
31.7.39.0/24 maxlen: 24
185.140.124.0/24 maxlen: 24
185.140.125.0/24 maxlen: 24
185.140.126.0/24 maxlen: 24
185.140.127.0/24 maxlen: 24
2a0a:9f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:29:99:15:7c:58:00:28:2c:4a:ae:6e:21:cd:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Aug 20 09:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dead62b4c6c5ba2e389c126c29a2e00cb355b57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a7:61:19:c5:0a:35:73:85:ea:50:91:bf:30:
82:08:91:45:b5:a0:5e:8b:c4:48:fb:5c:12:b8:d0:
5c:af:1a:09:44:fd:86:9c:0b:a5:eb:ba:0e:4a:fb:
59:2d:ce:36:73:05:7d:6a:47:84:a8:b6:29:63:c3:
72:c5:2d:5e:c1:53:5c:60:0d:c8:49:c9:e8:fc:10:
91:24:64:b1:ab:a4:fc:db:62:1c:41:97:09:bf:8f:
93:45:bf:0f:f3:0e:75:e0:75:33:61:44:88:6b:7d:
fc:c1:6f:26:53:e6:8d:26:80:03:c6:c9:73:23:21:
69:e9:c8:36:c1:d2:a4:f4:06:80:b8:34:d2:82:17:
a4:e7:cb:1e:2e:33:87:fe:79:89:0b:fc:65:ac:10:
f8:e8:4e:76:06:c9:0c:db:0e:bf:5c:1c:a3:2c:7e:
80:4e:e6:9a:b0:29:69:d5:1b:df:e3:24:5f:15:71:
f5:6e:26:3e:6a:5e:53:f8:66:aa:69:e6:5b:79:46:
60:a5:65:d5:45:3b:d9:48:08:cf:1d:6e:2d:0c:cb:
5a:f8:5e:b0:ea:ee:e2:59:2d:49:eb:30:c3:83:ca:
e9:72:0d:a2:18:df:93:f2:f1:3d:dc:e8:c0:64:77:
7b:15:39:50:24:40:3a:d2:b8:0d:43:91:15:73:ac:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:62:B4:C6:C5:BA:2E:38:9C:12:6C:29:A2:E0:0C:B3:55:B5:7D
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/3q1itMbFui44nBJsKaLgDLNVtX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.32.0/21
185.140.124.0/22
IPv6:
2a0a:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
34:b4:3e:30:4f:10:97:78:99:2d:5e:26:04:7a:46:5f:26:4d:
3d:39:fa:d7:f8:52:11:9d:22:75:d0:84:7c:07:f2:07:6d:eb:
89:91:26:fe:28:4a:5d:0e:72:b7:20:f1:9a:38:15:94:fd:bb:
7e:b3:96:a5:35:26:bf:e2:c8:dc:35:5d:19:64:8f:65:2b:60:
66:d5:d9:b1:f4:32:69:3b:28:75:3b:43:b7:84:29:a7:ec:40:
2b:14:ca:eb:87:76:da:dc:87:55:bc:c2:cf:ed:11:16:a1:d0:
89:ff:d0:8f:14:a4:18:bc:e9:94:bc:b5:55:8b:f0:78:c0:5a:
28:b4:b5:c9:d0:e4:b0:24:79:41:8c:32:a3:85:dc:39:66:49:
09:7b:d6:3a:2f:04:8b:d3:c2:66:85:0a:c9:29:f0:51:d9:72:
9a:15:19:c0:ac:09:01:1f:af:cb:eb:32:50:87:25:f3:c9:d0:
14:12:51:f5:34:3e:b5:7c:0e:8c:6f:74:0f:ad:0c:fc:51:37:
e5:cb:29:26:9e:a7:6a:cc:e8:9e:ea:46:b7:2b:45:4a:22:ed:
d8:ea:5c:bd:74:eb:3b:5d:6f:6b:4d:aa:62:a9:55:13:ea:99:
56:c3:01:53:f3:cf:b1:cc:c3:e0:1f:39:8d:21:85:fb:f6:45:
d0:51:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:52:42 2024 by rpki-client on console-fra.rpki-client.org