Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/LatRJHW5ni5Axv3hxt7ziKodGD0.roa
File: LatRJHW5ni5Axv3hxt7ziKodGD0.roa (raw, json)
Hash identifier: P4AbMocOwrwxko2rfnUdXKE02BKqEo8gxE07tgOj0SQ=
Subject key identifier: 2D:AB:51:24:75:B9:9E:2E:40:C6:FD:E1:C6:DE:F3:88:AA:1D:18:3D
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 01919EFCF16A21A206A6E00C46F2269FEB72
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/LatRJHW5ni5Axv3hxt7ziKodGD0.roa
Signing time: Thu 29 Aug 2024 16:34:22 +0000
ROA not before: Thu 29 Aug 2024 16:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48595
IP address blocks: 31.131.128.0/21 maxlen: 21
31.131.128.0/24 maxlen: 24
31.131.130.0/24 maxlen: 24
31.131.135.0/24 maxlen: 24
31.131.136.0/22 maxlen: 22
31.131.136.0/24 maxlen: 24
31.131.137.0/24 maxlen: 24
31.131.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:fc:f1:6a:21:a2:06:a6:e0:0c:46:f2:26:9f:eb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Aug 29 16:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dab512475b99e2e40c6fde1c6def388aa1d183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:22:ac:22:de:c9:46:72:a7:df:f2:be:c7:
d8:6e:87:b2:93:75:c3:34:b6:c2:9d:d7:19:00:fd:
63:35:73:65:55:99:39:a7:b7:63:4c:e1:e9:71:69:
ea:68:ae:82:35:1b:b4:ef:83:df:40:5e:6d:b1:e0:
8a:69:5a:fc:32:25:35:d6:99:15:3a:2e:c1:6b:44:
c6:c3:8d:29:34:26:99:1a:88:27:a6:6e:4e:82:d8:
ec:72:33:70:bb:88:c4:a6:b7:51:9c:01:e3:8c:af:
f5:07:bc:76:a0:1f:ae:d8:1d:91:a9:b7:06:a6:1f:
a9:a4:a3:58:55:10:9a:ad:18:28:52:43:19:2a:5a:
8f:ff:70:18:5c:e3:3f:75:cc:60:91:e4:37:48:aa:
33:d5:a4:70:bb:a6:07:7b:f8:b9:c3:38:0f:a7:51:
a6:45:c7:15:4a:b3:8c:8c:c5:8e:82:18:1e:84:8d:
09:1a:d8:9a:55:56:f8:53:f0:c7:20:c0:2d:5a:67:
62:0d:ce:e7:3d:e7:6e:25:97:85:94:4d:b5:58:90:
ec:ce:ab:69:80:1a:1c:dd:cb:3f:3d:85:54:d2:f0:
57:ac:20:9c:9b:b5:c5:38:96:dc:ca:ec:06:36:1e:
39:14:01:09:d7:3c:fc:c9:79:76:ee:18:b5:ad:9f:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:51:24:75:B9:9E:2E:40:C6:FD:E1:C6:DE:F3:88:AA:1D:18:3D
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/LatRJHW5ni5Axv3hxt7ziKodGD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.128.0-31.131.139.255
Signature Algorithm: sha256WithRSAEncryption
64:af:b5:03:a0:9d:31:f6:eb:49:72:91:c8:a6:dc:b8:cd:17:
64:73:47:e0:f9:f0:bf:0a:30:d9:bd:d8:c8:f5:20:78:c1:fc:
c7:b2:d3:6f:cb:56:ac:cb:cb:11:e1:3c:6f:2e:48:6f:a4:b0:
22:24:3f:79:66:ff:be:d3:07:8b:ce:4c:9b:23:66:df:bc:93:
03:39:7c:1c:a4:6d:07:e9:f0:41:be:b8:59:bd:d9:d9:ca:46:
ba:b8:ff:09:a7:8c:d7:19:91:71:b1:b5:28:63:00:39:be:e9:
d2:79:d0:f2:e6:62:e5:94:73:b7:2f:90:aa:70:f1:38:72:53:
30:00:67:9b:ac:00:5d:6e:79:c1:33:07:15:60:73:e8:2c:5a:
c6:07:d0:8c:32:09:46:51:f2:f8:70:78:cc:18:ec:69:38:36:
7b:20:11:92:60:82:44:f8:d3:89:ac:de:91:db:51:c0:d7:79:
5f:aa:24:81:84:47:6b:47:0c:d7:21:ce:16:c0:44:bc:72:27:
6e:93:2b:a9:37:4e:2f:94:c0:d1:c1:d1:db:e5:94:b6:1a:6f:
c8:40:49:7e:6f:3e:4d:04:63:61:05:96:f6:80:17:27:e6:17:
fc:ab:51:42:19:a8:2e:ee:64:57:d7:93:83:45:30:25:3e:e7:
dd:a8:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:35 2024 by rpki-client on console-ams.rpki-client.org