Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9Jw07okXiwlkg22BxjiBh4V_e-0.roa
File: 9Jw07okXiwlkg22BxjiBh4V_e-0.roa (raw, json)
Hash identifier: aVDJietIl76wUR+9HnjQsphTy88s8y81OABcBEB3t3M=
Subject key identifier: F4:9C:34:EE:89:17:8B:09:64:83:6D:81:C6:38:81:87:85:7F:7B:ED
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 018CC26D5A98D4A0B68EA1B3596BDAE55D4E
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9Jw07okXiwlkg22BxjiBh4V_e-0.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51411
IP address blocks: 178.236.32.0/22 maxlen: 22
178.236.32.0/24 maxlen: 24
178.236.33.0/24 maxlen: 24
178.236.34.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:98:d4:a0:b6:8e:a1:b3:59:6b:da:e5:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f49c34ee89178b0964836d81c6388187857f7bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:7f:1a:bd:97:90:cb:f8:87:0a:43:77:23:
56:08:69:ca:eb:a8:a2:20:de:75:a9:30:a6:54:e3:
f4:80:da:6b:45:1d:f3:dd:81:ce:f0:b5:fd:3f:12:
67:f3:a7:43:70:3b:7e:03:e2:02:42:d6:d3:42:2e:
17:3c:43:8b:71:54:60:3e:b5:3e:1f:35:95:07:03:
3a:af:d1:76:34:6e:62:53:b2:80:57:d6:53:fe:2c:
53:e3:fc:41:2a:80:af:1d:1e:4b:e8:5f:e1:21:a8:
ed:64:44:ae:de:66:9a:0c:1d:77:3e:0d:4e:90:30:
34:ee:dc:4d:6e:86:d4:de:2d:2b:49:bd:25:53:70:
a1:ca:69:bf:df:e5:25:ba:81:1d:37:9b:1a:e5:0c:
9b:ab:f2:92:88:99:9b:24:76:15:6b:eb:c4:5e:46:
99:d5:49:73:c4:ba:6d:5f:17:06:ec:10:10:d7:ca:
26:11:10:4f:8a:9d:26:82:f8:4b:72:b8:9e:09:1d:
e0:ce:32:8b:f9:7c:56:af:ad:09:15:1a:12:57:ec:
bf:ae:fa:28:d7:76:d7:74:7c:bb:22:cd:47:7e:c7:
70:7c:14:18:f1:b8:d9:24:0b:79:1e:33:e0:5c:9a:
9d:6f:9e:ea:d9:a4:ef:e7:21:9c:22:30:59:d6:ee:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9C:34:EE:89:17:8B:09:64:83:6D:81:C6:38:81:87:85:7F:7B:ED
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/9Jw07okXiwlkg22BxjiBh4V_e-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
72:4c:c4:bc:27:2e:4b:cb:67:6e:f5:e4:d7:1e:5e:e8:40:b9:
7e:6a:51:f8:a5:d2:f0:07:76:66:fc:c0:32:5b:dd:ef:75:c3:
82:1b:7d:f9:b1:49:d0:60:11:8b:fe:09:c7:8f:2e:34:9d:82:
b7:c0:2a:30:1f:96:38:17:ac:de:ee:5c:6a:36:e8:5e:62:14:
2e:89:41:07:e7:18:b9:36:ee:99:b7:4a:d1:0f:39:0a:6d:bb:
59:7d:93:3b:9d:ce:90:7e:c4:50:33:67:af:43:03:ae:ac:cd:
7c:97:e0:96:80:9b:4a:c5:36:53:57:fc:e6:e4:72:2d:9e:8a:
19:3b:d2:c9:30:ed:be:3e:fb:ce:45:8b:3d:ea:60:54:f7:aa:
aa:6f:26:63:f9:bc:14:c5:87:a1:1c:ef:bd:a5:ba:97:3a:77:
4f:19:7c:30:d2:62:b6:5c:34:f1:51:47:b6:94:00:e3:52:11:
b3:c3:99:7e:af:50:39:96:c0:06:de:40:3b:fe:87:8a:a5:ef:
77:c4:18:fa:98:32:e8:dc:c2:a7:dc:31:a6:a4:5f:ff:0c:56:
10:e4:85:17:4f:00:7d:ba:a8:df:b3:1d:92:2a:65:e0:12:db:
29:6d:84:e5:62:26:18:cd:5d:b9:f6:d8:1e:d6:52:3b:e2:0d:
da:f6:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:42:35 2024 by rpki-client on console-fra.rpki-client.org