Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/slLcykywc0rEcEfCoAkCm3iMRRo.roa
File: slLcykywc0rEcEfCoAkCm3iMRRo.roa (raw, json)
Hash identifier: qUJR3eyeQoW+ZaN1ha/7B5TaPA51YDwae+fntScRw0Y=
Subject key identifier: B2:52:DC:CA:4C:B0:73:4A:C4:70:47:C2:A0:09:02:9B:78:8C:45:1A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 018DFB2B31CF5F87B7200E42FDB46BBBD1F0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/slLcykywc0rEcEfCoAkCm3iMRRo.roa
Signing time: Fri 01 Mar 2024 17:58:48 +0000
ROA not before: Fri 01 Mar 2024 17:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fb:2b:31:cf:5f:87:b7:20:0e:42:fd:b4:6b:bb:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Mar 1 17:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b252dcca4cb0734ac47047c2a009029b788c451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:c6:25:33:33:cd:cd:e6:a2:a3:b8:cf:1c:
c2:28:59:fb:5e:a1:b6:77:14:48:13:4f:d0:08:ac:
5f:11:e3:f2:dd:bb:0e:75:8f:5f:0a:f8:80:2f:09:
31:ce:07:7d:9c:9c:a3:b9:fe:ff:33:10:45:be:14:
61:28:d7:00:52:36:38:fd:f4:44:32:5e:c6:57:9f:
f2:b1:aa:6b:ad:2e:32:ff:6d:e9:99:65:68:ed:ee:
49:b6:ac:21:a5:36:15:19:ff:28:1a:04:fe:10:11:
3c:48:dd:f1:0d:d0:9d:83:89:d8:f6:dc:13:b0:f8:
52:23:32:ec:5f:8c:4a:1b:ed:c2:3a:56:3c:a1:a7:
d0:74:40:28:b5:ff:2c:73:e2:4f:df:a1:82:10:d5:
dc:14:c5:43:8e:15:7c:e7:d5:af:56:37:9e:84:55:
40:76:67:36:92:0a:ff:6f:0e:01:7d:a1:18:e0:c2:
a7:b0:20:95:f1:38:c9:7f:0f:8e:e5:10:19:ad:89:
1f:2f:df:20:0d:a8:de:56:a5:f2:32:d6:73:8a:00:
73:60:43:5e:dc:17:55:70:3a:e2:05:c0:f3:d2:70:
ae:36:dd:ac:ea:d5:09:dd:90:d6:3f:37:79:60:95:
ae:69:04:b1:44:09:c1:34:d2:be:65:c6:d9:44:6c:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:DC:CA:4C:B0:73:4A:C4:70:47:C2:A0:09:02:9B:78:8C:45:1A
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/slLcykywc0rEcEfCoAkCm3iMRRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d9:33:48:a4:48:50:b5:ad:81:32:d7:f6:2a:e5:d7:1f:a6:
78:80:ce:51:23:2c:57:5e:39:91:b8:51:b5:b0:8f:c2:89:fd:
e4:09:7a:1f:52:b2:96:f0:e6:a8:6a:e3:54:1b:b8:28:76:63:
02:78:a1:60:19:1a:aa:de:41:6a:34:26:69:b3:0e:39:ea:55:
a8:e9:7d:77:30:de:b6:9d:fa:c2:3c:96:1b:58:7d:eb:a3:33:
4e:0c:1d:9d:52:8e:0f:8f:4e:7e:98:8d:cc:f5:45:95:e9:d9:
4f:f5:51:e1:e3:e7:8e:cf:52:57:6f:98:3c:6c:13:0a:f9:49:
ab:82:57:ab:0c:34:50:65:f0:be:83:52:ec:2e:7f:b3:59:e8:
fd:f7:63:d7:22:76:9e:08:62:61:b7:73:30:36:07:5d:ce:37:
7f:20:40:15:42:15:36:bf:22:d9:2c:9d:7e:0c:18:b8:19:9e:
72:a9:af:ab:23:25:d0:39:66:17:04:bb:57:9a:d0:47:f8:5e:
42:95:cb:db:5e:f1:9a:87:1f:82:97:ef:c9:f9:b4:20:23:d1:
9d:58:17:df:bd:ed:5a:62:96:db:c7:8f:d9:ac:5f:f3:e7:98:
b5:af:b6:83:d6:7e:36:d6:7f:89:d4:ee:e9:87:a6:5a:ab:88:
05:a2:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:33:29 2024 by rpki-client on console-ams.rpki-client.org