Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/RM42MZf-om6flmxmF3g-ZVsTyIo.roa
File: RM42MZf-om6flmxmF3g-ZVsTyIo.roa (raw, json)
Hash identifier: kCoyMgcpUqlSMhukOzFubi++1meruNY+uz3GFQGa9UA=
Subject key identifier: 44:CE:36:31:97:FE:A2:6E:9F:96:6C:66:17:78:3E:65:5B:13:C8:8A
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0192683AFB6DF82EC9B6C417A7235BABAF6D
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/RM42MZf-om6flmxmF3g-ZVsTyIo.roa
Signing time: Mon 07 Oct 2024 18:25:48 +0000
ROA not before: Mon 07 Oct 2024 18:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 31.24.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:3a:fb:6d:f8:2e:c9:b6:c4:17:a7:23:5b:ab:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Oct 7 18:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ce363197fea26e9f966c6617783e655b13c88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:f0:9c:68:06:ec:f9:54:02:a2:ba:84:82:
1b:5e:40:71:ba:8b:02:73:7b:33:fc:a6:37:46:d7:
f4:f2:6b:97:64:4d:67:f4:51:b8:55:69:85:90:e3:
dc:ca:ec:10:6d:ba:61:33:e8:cf:ab:e1:66:ba:f1:
e1:cf:4a:0c:e1:00:cd:60:6e:f9:28:51:4d:7e:ab:
81:2d:b1:49:b6:0a:f0:03:16:06:47:b8:bf:3c:bb:
9b:c1:9b:0c:72:b9:dd:2e:54:3b:6f:2a:fa:44:97:
ec:b4:1f:4c:1b:91:8e:98:ce:9c:84:14:77:1d:12:
c8:e5:29:8a:2f:b7:a0:1f:41:70:65:b8:42:48:4d:
7e:2a:c2:b9:60:ec:ab:0a:cd:69:ab:d3:aa:69:1e:
3f:1b:81:a5:29:89:63:d2:e7:d8:c5:f6:ab:23:c7:
99:e1:46:4e:41:dc:48:6e:fd:1f:c2:c7:bb:23:72:
22:b3:d4:8a:57:9a:b0:a1:b1:40:85:db:c4:33:0d:
56:c9:26:9e:84:c8:1a:e7:25:0a:a4:6f:6e:1d:a3:
56:d5:95:92:b0:16:c9:f6:c6:46:09:ae:15:08:90:
ed:f6:56:1b:06:c8:5a:83:14:fe:7d:af:39:0b:ae:
64:7c:e1:75:d5:97:b0:d4:43:df:b8:19:fe:93:ca:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:36:31:97:FE:A2:6E:9F:96:6C:66:17:78:3E:65:5B:13:C8:8A
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/RM42MZf-om6flmxmF3g-ZVsTyIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bd:63:f5:07:64:e4:19:a7:94:d1:79:b5:ec:ac:14:e0:58:
25:d0:08:44:3a:c5:bf:fa:0f:f4:d5:20:d5:7d:09:f4:9b:92:
ff:b7:8a:f0:32:4b:1d:b4:c1:42:b5:a7:a5:df:87:22:b9:ea:
d8:93:ae:6e:04:d8:e1:e0:09:dc:7b:04:f2:57:59:c4:3a:f1:
ff:e4:d1:29:94:ea:c9:48:ea:8b:8f:46:af:f5:b4:4b:23:59:
b5:42:8f:bf:4c:19:66:d9:87:12:0a:d8:b4:d9:e0:d8:22:02:
11:1d:8b:60:59:70:ec:0d:04:f7:b4:a1:c0:fd:da:81:02:5b:
26:c7:bc:b5:f0:9d:02:f3:50:5e:f6:84:5b:f1:e9:1b:42:b2:
91:2a:df:63:30:9d:55:e7:bf:20:3b:72:6f:ce:db:13:c5:14:
a1:67:6c:b0:72:af:e5:3d:79:1b:f0:30:64:4e:07:5e:30:dc:
36:04:70:b8:d6:eb:05:c7:d8:af:e3:59:04:32:c4:b3:51:2e:
3b:df:59:c8:25:f4:f9:0b:53:38:92:95:a5:e4:d7:d8:3b:97:
31:1f:e2:e6:ec:2d:be:cf:96:a0:9e:c5:9f:f7:05:fd:56:36:
b5:c0:64:af:f2:5a:97:4a:e4:66:12:bd:2f:c2:af:94:58:ac:
a1:5b:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:36:00 2024 by rpki-client on console-fra.rpki-client.org