Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/Jt1t1FY8eDOZ29nu5ChLLJSCQck.roa
File: Jt1t1FY8eDOZ29nu5ChLLJSCQck.roa (raw, json)
Hash identifier: v1HSH909suwgaBkrCAqSBAW+eBrwLdtFLfXjC0z2myU=
Subject key identifier: 26:DD:6D:D4:56:3C:78:33:99:DB:D9:EE:E4:28:4B:2C:94:82:41:C9
Certificate issuer: /CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Certificate serial: 01935B1B834192A1D87C7730BAFE1DF3B7B4
Authority key identifier: 65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/Jt1t1FY8eDOZ29nu5ChLLJSCQck.roa
Signing time: Sat 23 Nov 2024 22:19:09 +0000
ROA not before: Sat 23 Nov 2024 22:19:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 31.22.107.0/24 maxlen: 24
31.22.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:1b:83:41:92:a1:d8:7c:77:30:ba:fe:1d:f3:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659375cfe748a9e413894f2e4f85fbd64fd1c776
Validity
Not Before: Nov 23 22:19:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26dd6dd4563c783399dbd9eee4284b2c948241c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:ba:c6:67:de:63:1f:60:f6:de:86:bc:ef:
41:65:00:54:42:80:df:c6:7b:74:14:6e:18:1a:61:
eb:28:cd:66:9c:43:34:99:0f:ec:d6:f0:6f:e1:08:
cd:f8:91:2f:e3:50:a5:e3:c2:24:9f:69:46:53:f6:
47:95:8e:53:46:96:41:1a:cb:39:5e:cc:30:d1:5b:
b8:5a:ea:63:5a:11:57:64:b8:f2:ab:dc:1b:d7:5d:
84:02:ed:6d:d3:3a:d9:60:db:6d:b3:a8:0a:e2:25:
81:48:44:7b:53:86:f1:c3:c2:47:a4:85:4d:1c:52:
f3:90:cc:7d:9c:7f:f1:fb:fe:8e:4c:91:ed:ee:17:
51:f9:39:75:cd:4f:29:1a:63:b7:cf:b2:d0:ab:28:
9b:47:c6:77:06:bb:5f:b4:9f:f5:08:c2:62:55:23:
8d:a4:1c:ce:ab:af:81:72:e2:69:e1:20:e9:ff:86:
42:e2:af:1f:35:1c:5a:30:83:18:bb:04:9f:23:55:
ab:cf:25:90:3d:e8:fb:e7:7f:45:df:58:9c:7d:13:
56:90:62:57:93:b9:03:e6:6e:26:d8:d5:3b:d1:58:
cd:cd:e8:c6:30:03:e0:df:52:6d:66:f7:78:24:fd:
c5:de:73:58:d2:ae:a4:26:25:ad:d1:10:62:4f:1a:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:6D:D4:56:3C:78:33:99:DB:D9:EE:E4:28:4B:2C:94:82:41:C9
X509v3 Authority Key Identifier:
keyid:65:93:75:CF:E7:48:A9:E4:13:89:4F:2E:4F:85:FB:D6:4F:D1:C7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/Jt1t1FY8eDOZ29nu5ChLLJSCQck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b57800-39e1-41d0-bd41-fe9ef8ff0cc1/1/ZZN1z-dIqeQTiU8uT4X71k_Rx3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.107.0/24
31.22.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:15:f6:69:d6:55:e5:df:aa:42:03:0f:dd:dd:87:03:ef:ae:
93:a2:0a:f5:67:d8:04:f3:31:81:e0:fc:be:2f:0e:a7:1c:14:
d0:43:2e:c4:88:c3:01:8b:55:4b:90:a6:32:18:d2:9e:58:8b:
0e:f0:c0:87:0a:48:3b:7d:23:e8:2d:fc:6e:38:01:3f:c1:44:
90:ff:4c:01:51:61:c9:20:49:e3:32:71:8e:4e:71:98:75:cf:
0f:7b:21:99:5f:69:e3:d4:58:93:57:3b:a4:dc:d2:3a:aa:3a:
4f:6c:4a:f1:19:86:3c:9d:b3:32:25:72:00:0d:d6:1b:63:b9:
c7:89:44:50:52:01:df:6b:60:ec:44:f5:7e:2c:d0:3c:a8:3b:
80:6e:65:ac:62:af:1e:ff:34:82:ef:8d:1f:de:b9:06:18:b8:
36:f8:ca:85:88:86:19:f3:b5:d7:6e:51:60:1c:2e:4b:47:1c:
c5:be:3d:dc:94:ee:df:62:9e:7a:af:8d:f2:c0:7e:f0:ee:a9:
b5:55:98:1b:50:22:7d:a9:d9:e5:8a:6b:e3:e3:4d:31:55:d4:
23:2c:e2:c5:e9:3d:59:53:93:b7:8a:51:15:79:62:fb:ab:6f:
7d:28:32:33:b6:58:4e:a6:84:50:83:58:a6:45:9b:f9:74:2f:
8c:ce:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:51:10 2024 by rpki-client on console-ams.rpki-client.org