Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/is5gPCQNO23LrvMel4aW1wk-F_o.roa
File: is5gPCQNO23LrvMel4aW1wk-F_o.roa (raw, json)
Hash identifier: 3ihvyRbyKrDkcbMbSg3lfe5D0a6u8R2WDYdnQtftPDY=
Subject key identifier: 8A:CE:60:3C:24:0D:3B:6D:CB:AE:F3:1E:97:86:96:D7:09:3E:17:FA
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 018CC727039FFC9D39A22FF7C2B3B4350783
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/is5gPCQNO23LrvMel4aW1wk-F_o.roa
Signing time: Mon 01 Jan 2024 22:31:11 +0000
ROA not before: Mon 01 Jan 2024 22:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 31.41.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:03:9f:fc:9d:39:a2:2f:f7:c2:b3:b4:35:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jan 1 22:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ace603c240d3b6dcbaef31e978696d7093e17fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f1:56:3c:36:46:0d:86:f1:34:c7:bb:b8:17:
32:7b:e4:f0:d2:5a:0d:f4:d5:68:7d:a6:d8:aa:37:
c4:c3:6a:27:78:5f:aa:9b:9c:7d:d8:34:b9:64:4b:
a9:0c:4d:be:70:bb:36:1b:f4:01:1d:cb:39:22:28:
66:b9:3e:4d:13:0d:0e:af:3a:84:d0:4a:81:5c:09:
25:30:a5:2d:23:40:f1:c2:7f:9e:52:65:b5:67:f6:
95:f0:5b:c9:b5:94:3a:5e:ac:ab:73:6d:4e:f6:c5:
ef:81:41:6f:04:6d:7a:cd:47:c7:51:89:6e:08:d0:
4e:27:23:ce:43:d3:a9:1e:68:45:1b:20:af:19:32:
e5:77:0a:05:41:e7:34:2e:23:66:c9:ea:ba:02:d4:
7f:98:78:ed:22:35:c2:31:22:83:0e:a4:7c:5d:9a:
8f:db:a9:c1:32:cd:8a:eb:52:52:64:3a:a6:14:65:
18:b0:0f:20:31:86:b2:38:08:ce:07:23:d5:b4:26:
f7:0b:57:97:61:ae:67:23:1e:79:10:06:7c:7e:7d:
4e:66:57:2f:7d:1e:1c:c6:ff:58:8f:16:35:2f:dd:
16:7f:41:f3:2b:c5:22:b5:88:80:55:c8:58:74:0c:
96:0d:bb:8f:dc:df:83:3b:39:a2:75:62:44:65:18:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:60:3C:24:0D:3B:6D:CB:AE:F3:1E:97:86:96:D7:09:3E:17:FA
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/is5gPCQNO23LrvMel4aW1wk-F_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d3:3e:54:39:62:87:11:ac:26:e3:13:11:50:95:52:13:ba:
b3:d1:67:b5:b7:43:83:46:e2:77:75:fd:a7:c1:b2:b5:91:56:
bd:56:bc:d0:e6:2a:e5:b6:8e:03:7f:ee:0a:95:dd:9b:ec:79:
57:fc:f6:03:2f:bb:19:78:74:a5:f4:cc:bd:65:07:26:22:c3:
cd:64:99:7c:73:85:11:5f:ba:93:30:8e:b3:0b:04:14:8c:e6:
f3:1f:de:e7:3a:f8:da:2c:e6:1c:13:e7:00:b2:4b:38:46:5f:
dc:ba:9e:cb:02:a2:87:b4:ce:e5:ea:7d:b6:4d:51:72:1f:26:
5c:99:1f:af:4a:e1:9f:e6:68:48:c3:b0:8b:62:d6:03:65:78:
60:b4:c6:27:c0:62:72:a3:8f:a3:df:d6:ee:9e:9d:48:db:df:
98:66:95:94:97:db:ae:90:cf:c1:0d:f7:26:a7:2a:a4:80:3a:
88:56:37:20:f3:fe:4a:05:c2:b6:0e:6e:1e:e8:25:5d:54:20:
70:2c:30:6b:86:2c:00:b4:97:f3:df:7a:60:bd:ef:01:f9:d7:
bb:80:92:f1:e1:77:b1:f7:78:d1:40:bc:7f:05:b9:e3:78:99:
b9:bd:dd:f7:7f:37:59:6d:d2:44:4e:2a:4c:55:be:96:62:6f:
08:c2:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:11 2024 by rpki-client on console-ams.rpki-client.org