Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/rMdqTX2R1PYzRIj3t7nWp2NcxB8.roa
File: rMdqTX2R1PYzRIj3t7nWp2NcxB8.roa (raw, json)
Hash identifier: C7f4vA+U7QJWz0AhCNk68dlmhpZgu2WVK/p8XolWi6g=
Subject key identifier: AC:C7:6A:4D:7D:91:D4:F6:33:44:88:F7:B7:B9:D6:A7:63:5C:C4:1F
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018CC7271EF7CE3ECC99C36DE5301FBC80A1
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/rMdqTX2R1PYzRIj3t7nWp2NcxB8.roa
Signing time: Mon 01 Jan 2024 22:31:18 +0000
ROA not before: Mon 01 Jan 2024 22:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 31.169.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1e:f7:ce:3e:cc:99:c3:6d:e5:30:1f:bc:80:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 22:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acc76a4d7d91d4f6334488f7b7b9d6a7635cc41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:bc:2e:ce:e6:73:0a:bf:2a:d7:6f:8b:2f:
a3:90:e6:ca:bd:06:69:e6:5a:8d:6d:61:ff:e7:7f:
09:b9:1b:e8:eb:7c:e8:33:2d:e1:22:37:84:97:9c:
bd:d8:84:70:1b:c4:f8:e3:8b:da:7b:84:9f:d9:1f:
4f:dd:0d:7e:21:a9:70:75:f2:54:b6:5c:fa:52:bb:
f3:ee:65:f3:94:41:1e:8c:5c:aa:b8:9a:3c:0b:bb:
dc:7a:16:f7:77:b8:ee:3c:5f:f9:76:ff:ad:84:ec:
83:26:b7:65:12:48:ee:af:87:28:4a:4a:f9:5e:6e:
fd:1d:ef:1d:ae:7f:f0:9e:de:b9:e1:7f:e3:db:83:
9b:a4:6e:4f:8a:75:3a:7b:9a:db:e0:a2:15:c7:29:
e0:b9:0c:fa:c3:16:a5:ed:a5:09:d3:7d:09:75:eb:
ff:55:ab:78:de:64:16:fd:fb:dc:51:43:a4:d2:0a:
6a:34:e8:20:48:d1:1d:50:75:3a:6c:44:52:64:4e:
bb:51:9b:34:7c:ed:8c:ec:6d:77:6e:93:45:c9:8e:
5c:de:d8:a9:d8:8b:a5:d0:9e:bb:71:01:29:98:a1:
bd:56:2d:7d:50:5d:ae:c2:60:cf:78:a1:e2:f5:8c:
3b:ca:78:d8:70:9a:32:1b:b8:e1:84:69:28:8f:82:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:6A:4D:7D:91:D4:F6:33:44:88:F7:B7:B9:D6:A7:63:5C:C4:1F
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/rMdqTX2R1PYzRIj3t7nWp2NcxB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.89.0/24
Signature Algorithm: sha256WithRSAEncryption
58:47:e8:9b:63:52:6d:15:63:1a:0c:db:54:87:44:2c:cf:30:
4d:a2:48:e4:57:3f:57:cd:d9:ae:d2:32:31:9c:27:cd:b9:cf:
49:32:6e:04:09:34:ec:fb:02:ca:0b:09:e5:fa:1f:67:05:d4:
43:c4:3b:48:c8:47:4d:0e:ae:e2:bc:d8:41:c6:72:54:36:bb:
de:42:10:ba:04:5b:3b:05:a0:f4:54:e8:09:e3:b6:3a:53:7f:
bf:83:2b:1e:78:22:4f:bd:06:df:68:93:4a:65:9f:1f:39:35:
89:d5:1b:a1:65:57:85:92:85:e9:60:8e:61:77:96:ea:51:36:
98:12:28:02:01:1a:f1:f6:0a:22:d9:1a:d7:e4:02:fc:ef:93:
b4:34:4c:37:38:ab:01:33:ef:a4:af:c3:8e:6c:c7:1d:c8:a2:
92:f1:f0:de:54:0d:c8:8f:96:d9:d4:b9:15:45:3a:9b:57:4c:
fc:8e:97:ef:2c:09:97:94:58:76:8d:7c:d9:b8:4f:ad:7d:b2:
49:2d:2c:2d:e0:36:ff:e9:0b:bc:f8:5a:a6:c3:e4:f7:24:48:
9d:11:4f:f8:37:65:6d:8e:13:32:e5:c5:c9:dd:2b:1b:2f:33:
df:92:89:19:b4:6e:70:30:19:6d:7a:b4:43:7b:17:4c:a0:73:
ab:7c:15:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:06 2024 by rpki-client on console-ams.rpki-client.org