Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/GqUrOlRGkcn8y17VsS6HY0pqNCw.roa
File: GqUrOlRGkcn8y17VsS6HY0pqNCw.roa (raw, json)
Hash identifier: MhYRCFUytSpSRs+iqJ9PJ6p6i3KXSkXAqyNDhbvdu4g=
Subject key identifier: 1A:A5:2B:3A:54:46:91:C9:FC:CB:5E:D5:B1:2E:87:63:4A:6A:34:2C
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 018CC49226B5816AA03480E74F070467AD30
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/GqUrOlRGkcn8y17VsS6HY0pqNCw.roa
Signing time: Mon 01 Jan 2024 10:29:21 +0000
ROA not before: Mon 01 Jan 2024 10:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56623
IP address blocks: 31.133.112.0/24 maxlen: 24
31.133.115.0/24 maxlen: 24
31.133.118.0/24 maxlen: 24
31.133.114.0/24 maxlen: 24
31.133.117.0/24 maxlen: 24
31.133.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:26:b5:81:6a:a0:34:80:e7:4f:07:04:67:ad:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Jan 1 10:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aa52b3a544691c9fccb5ed5b12e87634a6a342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:c2:c2:60:27:3e:1f:a9:06:40:7e:81:e9:
44:39:e0:4b:f7:bc:53:a3:2a:d1:72:4a:fb:ab:4f:
aa:65:75:49:b9:a8:62:6d:a5:33:d6:09:4b:52:f7:
e6:85:e1:cd:ee:03:45:d0:e9:3b:4f:9c:6d:51:c5:
e4:6c:1a:63:27:0d:16:51:b8:6b:b2:9a:b2:0f:6d:
98:f9:e7:07:59:27:cc:7b:c7:6a:ad:66:7f:d2:b3:
b2:75:21:8f:0b:27:ff:2d:50:dd:16:13:62:33:3f:
3a:4a:4e:a8:28:33:5d:39:bd:ca:9f:71:8f:50:1b:
23:88:9d:fe:f9:79:2a:72:5f:2b:ee:dc:b8:5b:b2:
0e:4d:78:d8:e0:cd:a5:72:33:d2:42:37:1b:1a:8e:
90:75:a3:c0:15:d6:48:09:c8:73:25:6c:e1:db:4b:
b8:82:30:6f:9d:2d:db:23:6a:c5:63:2c:ee:45:bd:
12:7a:00:20:b7:ad:11:5e:28:7c:5e:fe:29:9d:7a:
31:9b:ae:9a:71:96:62:a2:d3:a9:77:31:1e:c8:73:
d9:a5:8c:68:1c:1e:12:ab:e0:ff:8c:74:57:94:38:
05:fb:25:7e:89:2c:ff:f6:87:f0:12:ed:43:3f:8f:
37:57:a1:03:c8:c9:4c:d5:fe:c6:b3:5c:79:75:35:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:2B:3A:54:46:91:C9:FC:CB:5E:D5:B1:2E:87:63:4A:6A:34:2C
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/GqUrOlRGkcn8y17VsS6HY0pqNCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.112.0/22
31.133.117.0-31.133.118.255
Signature Algorithm: sha256WithRSAEncryption
a8:18:70:ad:76:2b:e0:85:ec:05:1b:de:74:21:a7:b5:fb:a6:
de:6e:9a:58:13:9f:13:c2:ab:ff:3b:62:ce:5e:67:4e:1c:f8:
93:09:86:9d:0d:df:10:f9:f6:74:65:85:6b:4e:f4:92:00:63:
b4:02:99:7f:8f:2d:05:c0:af:4d:e7:4e:ad:c0:ce:1f:85:db:
66:ae:be:21:db:f5:b5:bd:c7:01:c2:2a:da:b9:2c:ff:8a:c8:
bc:01:b8:cc:77:d3:fc:8e:cf:f9:e2:d5:96:e7:28:a1:f1:ef:
99:9f:d7:14:a2:0b:44:8a:bd:21:b5:24:be:c5:9d:b6:06:d2:
7a:7c:73:21:8b:52:a7:dd:d9:75:45:c6:e2:43:94:50:cc:c8:
7c:59:4f:e9:6c:6f:2e:b8:c0:df:60:68:e8:14:da:fe:05:d9:
9e:d3:3a:6d:47:32:c4:37:f7:d7:a4:c4:c1:ec:39:db:76:07:
f7:6a:15:34:5a:60:8a:18:a2:74:1e:ea:0c:31:bb:b0:45:77:
ff:69:ed:42:3e:21:7c:65:6d:33:ac:ca:87:e5:d9:4b:67:ac:
3b:c2:e6:0f:47:9e:98:9a:ee:09:58:90:a6:bd:55:f4:1b:da:
69:6c:50:4f:22:05:ac:13:5e:43:46:84:e9:83:d4:d4:75:95:
3b:6e:4f:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:20:12 2024 by rpki-client on console-ams.rpki-client.org