Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/uCtFu8A1Oe6gFi9YzdLYiFqsulg.roa
File: uCtFu8A1Oe6gFi9YzdLYiFqsulg.roa (raw, json)
Hash identifier: JDVBQljIWbqGPdqKLdYS/MxJAhx5u3o5ab8hGjgGmf0=
Subject key identifier: B8:2B:45:BB:C0:35:39:EE:A0:16:2F:58:CD:D2:D8:88:5A:AC:BA:58
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 018CC348FDD587B67824C2BCC0D7062A47A3
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/uCtFu8A1Oe6gFi9YzdLYiFqsulg.roa
Signing time: Mon 01 Jan 2024 04:29:49 +0000
ROA not before: Mon 01 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12985
IP address blocks: 31.41.136.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fd:d5:87:b6:78:24:c2:bc:c0:d7:06:2a:47:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Jan 1 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b82b45bbc03539eea0162f58cdd2d8885aacba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:cf:43:22:2b:76:90:18:7c:55:70:61:7e:
d1:04:11:45:f5:f2:ac:02:9c:cc:ac:95:23:af:4c:
c2:2d:b2:59:7f:84:0a:30:61:b0:01:47:eb:47:35:
17:b5:c3:68:b8:bb:af:44:78:19:7b:87:25:33:71:
7f:54:79:c1:e8:7f:2f:ee:70:d9:0c:78:46:b0:03:
a5:30:74:a4:bb:dc:52:58:80:04:06:fd:79:41:12:
44:db:27:e4:86:a0:1e:95:0a:43:6f:99:ae:aa:12:
a7:44:b9:7b:fd:d7:bc:28:89:46:14:90:ae:6d:d0:
3d:1b:2a:a5:88:ec:d1:fc:81:25:f9:0c:71:a9:8d:
c6:97:63:83:58:5e:c9:ab:21:d0:d2:3e:e6:af:ea:
21:01:55:0e:cd:2e:22:b1:02:6c:29:f3:b0:2b:1e:
07:51:aa:0d:37:28:c9:09:d1:c1:30:6b:7f:34:f5:
ce:4f:2f:79:7c:14:b9:d8:c9:d7:15:6f:d7:c5:80:
0f:0e:3e:b3:a3:2a:ac:c8:5c:cf:3a:b8:2e:61:7f:
f1:aa:32:32:e8:46:af:31:04:6f:eb:94:58:2f:11:
a4:53:b1:0f:d0:b8:a8:76:64:63:39:25:7f:bc:5b:
74:e4:d4:6e:07:61:02:54:d3:b7:42:7f:f4:24:39:
61:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:45:BB:C0:35:39:EE:A0:16:2F:58:CD:D2:D8:88:5A:AC:BA:58
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/uCtFu8A1Oe6gFi9YzdLYiFqsulg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.136.0/21
Signature Algorithm: sha256WithRSAEncryption
14:bb:cb:b7:1b:bb:38:83:66:c6:56:fa:cc:9e:0e:d0:7e:fb:
6a:96:5a:06:9b:10:6a:49:a9:5d:91:17:7f:c8:6b:7e:c3:1e:
37:2b:b1:f8:ee:4f:06:ff:7c:ec:44:7a:8c:8d:6c:ab:72:a4:
b2:48:e8:41:42:cd:5b:35:64:77:1e:51:a3:c4:c1:64:14:88:
b4:f2:5e:25:46:78:b4:ed:f4:91:76:6d:47:aa:f9:25:a2:02:
34:50:c0:11:00:20:04:18:fb:7d:91:4a:23:54:0c:38:80:ae:
5e:26:c6:b7:8e:5a:35:b4:13:33:a1:e6:e0:f0:22:a8:fd:fd:
cf:38:ed:7a:d8:26:a1:10:23:93:1d:31:50:7b:72:3d:d5:6a:
85:fd:e1:e8:96:c5:72:0f:44:03:9f:22:ef:fc:84:03:2d:f1:
68:06:24:4a:39:9f:2d:24:fe:f9:59:e2:be:7f:1b:95:f9:71:
07:7b:1a:a3:f0:b4:4a:e3:f4:63:98:b6:b3:38:ac:bd:04:69:
84:94:54:a5:c7:73:ea:66:ca:76:66:af:6d:37:b2:b5:19:7b:
41:5f:54:39:bd:6d:48:8a:d1:a8:d7:26:22:1e:f5:64:7b:e6:
cc:7b:d5:ef:d4:53:61:9c:d4:69:ad:81:b3:dd:22:ce:81:e5:
2d:2e:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:52:59 2024 by rpki-client on console-ams.rpki-client.org