Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/otQj9ttnAX2PiHI-R5kL047zHvM.roa
File: otQj9ttnAX2PiHI-R5kL047zHvM.roa (raw, json)
Hash identifier: EqmlSpUBRrTnC3qmFzcQacBT38aBsVh7P0EEv7lmWso=
Subject key identifier: A2:D4:23:F6:DB:67:01:7D:8F:88:72:3E:47:99:0B:D3:8E:F3:1E:F3
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 018CC5DD3D6CDDA5CDAF57BC5D3E6CF602C7
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/otQj9ttnAX2PiHI-R5kL047zHvM.roa
Signing time: Mon 01 Jan 2024 16:30:59 +0000
ROA not before: Mon 01 Jan 2024 16:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41628
IP address blocks: 31.15.24.0/21 maxlen: 24
89.31.144.0/21 maxlen: 24
193.38.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:3d:6c:dd:a5:cd:af:57:bc:5d:3e:6c:f6:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jan 1 16:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2d423f6db67017d8f88723e47990bd38ef31ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:50:4f:bf:e8:ec:0f:a6:9c:58:fa:f0:f7:
38:fc:74:83:a6:16:95:05:45:16:71:18:f1:c2:16:
31:ee:f1:55:1f:07:f8:39:62:a5:ee:f8:f0:ef:8f:
25:bf:75:cd:e4:b3:45:b9:af:f7:bd:30:cc:bc:f1:
80:b1:d3:a3:33:87:83:0a:4b:12:93:fd:f3:d6:fd:
8f:16:ca:c0:05:38:3d:14:f9:6e:ee:b5:25:fe:c9:
89:95:8c:92:1c:93:18:c9:cc:74:e5:86:05:1c:3d:
c7:6b:cf:15:bf:b4:b5:ee:17:92:5b:1b:37:54:59:
6d:b4:45:b4:13:b0:6a:35:34:bf:23:e8:ba:2b:ab:
4e:b2:f1:84:5f:99:32:4a:19:4a:72:1d:23:bc:65:
77:97:ae:46:09:85:8d:64:56:f5:d7:ae:a9:d0:f7:
ab:3b:b8:2d:61:95:20:f1:20:83:b6:44:c2:7e:72:
45:b1:2a:d3:8a:7b:da:31:25:ef:5e:5c:b9:b1:c6:
0c:36:16:e0:47:64:16:e9:11:d4:e1:59:a8:7d:ec:
ac:b0:bb:a6:04:76:ba:3b:29:d3:bc:bf:c6:48:49:
a7:29:37:d2:ed:14:7a:80:51:b5:bc:c4:09:1f:84:
55:6d:c1:9e:7c:5c:c8:59:fe:77:a2:2d:72:94:6c:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D4:23:F6:DB:67:01:7D:8F:88:72:3E:47:99:0B:D3:8E:F3:1E:F3
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/otQj9ttnAX2PiHI-R5kL047zHvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.24.0/21
89.31.144.0/21
193.38.128.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:ae:47:bd:35:39:19:d5:93:94:8f:89:b2:f7:90:c8:b2:8a:
9e:e0:21:2b:23:9f:87:07:04:4c:4f:73:2d:07:44:ce:87:e6:
59:a6:de:f8:32:b5:eb:48:dd:98:7a:8f:70:a3:c1:25:87:fa:
af:98:80:7d:51:20:b4:95:d2:3e:53:5b:a0:56:56:e5:14:f6:
87:96:96:f8:0a:f0:c1:49:87:6a:bc:8e:aa:58:7f:30:51:07:
04:4f:99:d5:5f:1e:b9:4e:0f:26:a3:3b:29:65:47:3d:79:46:
49:e0:52:94:eb:44:a6:2f:c7:44:7e:2b:a6:20:cd:e6:a5:9d:
53:0f:2a:11:b4:51:78:70:9c:cc:d0:f7:12:55:1c:97:2d:fa:
b6:2f:2f:cf:cd:32:ac:17:77:96:8b:f3:de:57:16:f4:bf:b5:
94:12:a4:16:d5:8b:69:87:7d:6a:cb:cd:4b:51:5e:3c:cf:1f:
8e:af:b8:51:06:7e:e6:c6:e1:95:fa:cd:24:3a:a3:60:7c:dd:
e5:48:09:b5:c0:ed:41:9a:8b:3f:12:e1:bd:f1:4b:a9:46:ca:
bc:b9:de:d2:81:eb:03:4b:6c:b5:5c:89:a1:a8:39:0a:16:ed:
d6:3c:21:2c:8f:d0:7c:8b:7c:9c:63:e1:5d:3c:a8:8d:a2:19:
26:bc:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:29:57 2024 by rpki-client on console-fra.rpki-client.org