Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/PN8-yVdFuiRyCS02_A2OMr4WNC8.roa
File: PN8-yVdFuiRyCS02_A2OMr4WNC8.roa (raw, json)
Hash identifier: g87SLH+ryN8lkFkwy0tMoHeizYBNOG7lUO/OBg/otLU=
Subject key identifier: 3C:DF:3E:C9:57:45:BA:24:72:09:2D:36:FC:0D:8E:32:BE:16:34:2F
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 018CC79429255E6578A6F6BC69295CEBB8DF
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/PN8-yVdFuiRyCS02_A2OMr4WNC8.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207617
IP address blocks: 45.159.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:29:25:5e:65:78:a6:f6:bc:69:29:5c:eb:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cdf3ec95745ba2472092d36fc0d8e32be16342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:fd:36:b2:3f:3d:40:39:f9:28:65:48:a9:
59:1e:1c:7c:a4:a5:5d:7d:ca:c6:e8:26:08:d5:f6:
97:90:f5:41:9b:8f:6d:61:1c:bb:7c:1c:48:fc:f2:
66:28:0e:90:e8:d5:6f:17:ae:b0:a7:3e:c5:e7:49:
24:05:ad:fa:9a:ad:14:3d:ee:b9:1a:db:1f:37:2d:
d3:2b:af:67:11:eb:56:35:f2:96:32:39:4c:aa:86:
e7:05:8b:86:b9:d5:92:b7:39:d1:f6:b8:5b:2f:65:
d3:50:2f:8b:a7:89:b9:7e:c2:af:91:d3:91:0c:f8:
ff:c3:98:e2:b8:44:60:7b:b2:01:06:5e:18:f0:68:
31:95:92:c1:df:ca:9a:97:2a:9c:eb:74:e6:a6:48:
55:cb:f6:dc:27:e4:40:f7:62:82:62:8f:2e:f9:93:
3a:12:60:eb:d5:05:6f:84:b9:ed:f0:c4:d3:ce:67:
90:fb:1d:4f:c6:e4:04:73:3d:18:6a:21:1d:34:91:
73:be:1d:cb:66:b2:c4:90:32:67:ef:15:16:f1:b3:
5c:82:71:be:43:76:7b:0e:de:e8:07:62:23:d2:27:
49:56:ff:b0:d8:1c:38:ff:6b:c3:4e:62:23:32:86:
ad:87:f8:6d:a2:0a:ad:c7:c2:96:a6:3d:51:35:29:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:3E:C9:57:45:BA:24:72:09:2D:36:FC:0D:8E:32:BE:16:34:2F
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/PN8-yVdFuiRyCS02_A2OMr4WNC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:64:d1:28:6a:36:7c:f6:8c:97:60:e3:e6:16:7f:22:06:02:
84:52:0d:9a:e4:ed:9d:fc:da:0d:6f:29:16:c2:d6:43:52:4e:
68:e3:06:0f:a5:f9:71:e3:45:6a:41:60:eb:6e:93:00:93:5d:
32:7d:43:88:c4:11:e9:a6:fe:3c:58:fb:da:ab:89:d8:b5:ff:
f5:fe:6e:86:70:2d:31:97:09:b6:18:5b:5b:1b:69:5a:41:4f:
a1:9b:f4:3a:59:c8:10:1b:7d:e5:87:be:e8:6f:63:b1:98:b0:
0d:12:3f:e2:78:50:04:45:64:54:e2:1d:8b:f3:ac:92:50:e5:
5f:cf:8f:98:c9:03:d9:b3:19:41:30:04:e8:57:2f:f4:23:ce:
ca:5b:59:5a:60:ef:31:6c:22:54:af:a7:6b:c5:53:f8:82:9b:
af:98:57:25:3c:5d:70:7a:ed:61:20:cf:48:aa:37:0d:29:9d:
a6:fa:32:7f:05:98:50:49:24:ad:3f:dd:a6:56:1f:97:6d:f2:
2f:1f:b0:4a:a7:e6:e6:cd:07:58:55:35:0d:47:cb:6d:b3:ae:
da:7e:5c:6f:f9:86:da:a0:5c:7e:d5:78:77:a3:6b:3d:dc:eb:
ff:72:f0:26:9d:c9:87:a5:00:68:63:88:fe:46:dd:c0:a7:96:
e0:85:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:15:40 2024 by rpki-client on console-fra.rpki-client.org