Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa
File: 8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa (raw, json)
Hash identifier: gOkaqBzPciks+NrpzUI0YJR74x7pdPDs14GcPhejgCE=
Subject key identifier: F1:90:FB:24:19:FD:DF:0B:D5:61:09:7D:D6:90:FA:AB:BA:58:9B:64
Certificate issuer: /CN=d5b8670ca93364f3443f82e3011eac1537197771
Certificate serial: 018CC3B7387C9DBBD0B80C536388044F81F7
Authority key identifier: D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 31.41.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:38:7c:9d:bb:d0:b8:0c:53:63:88:04:4f:81:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b8670ca93364f3443f82e3011eac1537197771
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f190fb2419fddf0bd561097dd690faabba589b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:bb:d8:b6:78:bd:b8:a4:c5:11:70:89:fb:
e1:29:83:08:24:f5:4c:25:fb:54:6e:63:a9:40:ae:
66:58:31:39:df:9e:a6:4a:4c:f6:03:56:b3:15:e2:
2f:6c:20:ff:6d:1b:13:8f:52:19:1a:fc:08:f0:3e:
f8:24:2b:11:66:93:3a:86:94:03:7a:79:70:91:ad:
0f:38:a6:b0:e3:af:25:cf:87:63:47:3f:6e:a7:8b:
4a:97:e3:a0:8d:06:57:cb:02:6c:10:c3:a0:0e:7c:
36:1c:a8:88:9e:4e:86:61:12:34:55:9d:bf:bb:ed:
22:06:8a:6f:f6:a3:4e:ca:d2:de:6a:a0:2c:82:fa:
9e:24:e8:7f:09:ec:37:21:82:63:bd:95:04:36:a2:
dc:13:bd:23:87:0e:d0:e6:3d:2e:e4:70:08:8c:e8:
79:9d:23:4c:4a:1d:fc:f3:3f:79:6f:3c:a0:7c:05:
20:bb:88:5d:04:ae:19:de:76:eb:58:31:35:43:d6:
1b:5d:5e:2e:43:b3:ba:30:37:f1:a4:31:04:88:4a:
c6:2f:8e:23:7a:35:80:5a:97:9d:5d:81:4d:49:93:
14:65:1e:1f:61:2d:b8:9f:2e:99:35:e3:87:c1:33:
ca:b0:5d:c6:7a:00:48:4f:e9:16:3e:77:10:31:e2:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:90:FB:24:19:FD:DF:0B:D5:61:09:7D:D6:90:FA:AB:BA:58:9B:64
X509v3 Authority Key Identifier:
keyid:D5:B8:67:0C:A9:33:64:F3:44:3F:82:E3:01:1E:AC:15:37:19:77:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bhnDKkzZPNEP4LjAR6sFTcZd3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/8ZD7JBn93wvVYQl91pD6q7pYm2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9ce5f0-a238-44e8-8f5b-c5ec68e589eb/1/1bhnDKkzZPNEP4LjAR6sFTcZd3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:43:f5:8b:6f:4e:b7:15:23:4a:2d:b3:b7:48:8b:10:dc:9b:
ae:38:76:1c:95:de:f4:1a:36:cc:20:b6:35:64:04:0b:a8:8a:
5b:3f:fb:57:c3:18:5b:25:16:92:99:73:35:16:d6:a1:fc:e1:
b8:42:7e:ec:8f:d1:d9:70:21:11:af:b1:04:63:ec:e8:a0:0b:
0a:9f:e6:69:3d:28:74:2f:90:7f:2f:a2:0b:d0:c9:7b:ed:f6:
ba:bf:07:5e:9a:06:7b:f8:f3:42:6f:7b:1a:7f:1a:e7:49:ec:
4f:6f:9d:54:7c:83:28:99:c9:f2:da:f0:12:39:db:b8:04:fc:
54:6a:5a:7f:92:ea:82:dc:52:67:37:0f:d8:cc:55:95:ba:30:
0c:25:f3:38:67:11:d6:9e:3d:70:08:dd:0a:2c:62:87:25:5c:
e0:ec:e4:ce:e1:0f:31:c0:69:00:f9:74:f6:6e:54:98:ef:d8:
93:1d:d0:9f:09:2a:88:d3:91:6e:b7:6b:a9:35:1a:e0:37:f3:
e1:51:bf:d2:14:ba:3e:42:c7:94:60:45:bc:fc:7a:32:60:a9:
58:be:d4:85:a9:ce:62:8c:4a:47:58:ee:34:24:80:cd:20:b9:
cd:52:f0:6e:af:99:46:a6:95:69:29:73:50:1f:f5:8b:e8:de:
f7:52:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:20:03 2024 by rpki-client on console-fra.rpki-client.org