Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/smEg4fAndHFFltU8sCVhLyw7mjI.roa
File: smEg4fAndHFFltU8sCVhLyw7mjI.roa (raw, json)
Hash identifier: AFxddHlqsB3qgD7wBSg3tHRm2p6yswMjuHW5pS8/yI8=
Subject key identifier: B2:61:20:E1:F0:27:74:71:45:96:D5:3C:B0:25:61:2F:2C:3B:9A:32
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 0192AE250E3FFD62221E56C451C8E8DE56C2
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/smEg4fAndHFFltU8sCVhLyw7mjI.roa
Signing time: Mon 21 Oct 2024 08:15:16 +0000
ROA not before: Mon 21 Oct 2024 08:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51048
IP address blocks: 31.25.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:25:0e:3f:fd:62:22:1e:56:c4:51:c8:e8:de:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Oct 21 08:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b26120e1f02774714596d53cb025612f2c3b9a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:07:d3:89:fd:39:4f:ed:e0:d9:84:d7:2e:45:
6a:b0:da:2a:df:d5:2d:0e:a2:d1:e8:7d:f2:1b:b6:
bc:c9:0e:3c:a2:eb:cf:f2:af:4d:ca:17:64:e0:0a:
c4:3b:41:8a:15:2c:29:32:a0:af:13:52:ab:f3:7b:
1a:11:1b:61:4e:f3:55:a2:52:34:91:80:0f:18:11:
7e:53:b8:b0:52:7a:71:2a:a9:45:14:b8:d4:a4:2a:
74:a8:bf:e7:8d:de:28:dc:57:d3:82:e1:cf:90:80:
ae:4a:44:f2:dd:2a:7e:ad:c9:a2:23:c0:38:1c:c7:
df:6f:f1:6d:ca:04:88:66:48:67:36:52:cf:69:9c:
e1:d1:45:5f:c5:56:5d:a0:99:40:21:38:60:16:66:
be:6a:ba:d0:f4:98:e7:f5:e0:d3:0b:ac:69:35:24:
4d:50:79:32:91:98:60:2c:28:d8:62:d2:9d:48:ac:
72:fb:c3:0f:41:fd:0c:dd:61:c4:a6:a4:8a:ae:02:
1d:95:ae:c8:17:04:20:68:12:ad:d0:a4:e2:d0:a3:
9a:db:89:33:cf:a2:02:87:06:2b:f9:97:ec:9c:bd:
8b:af:b7:38:77:9c:54:17:84:43:46:a1:8d:ee:5d:
d4:3d:e4:1a:b9:49:70:39:e4:eb:90:5e:20:ff:b9:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:20:E1:F0:27:74:71:45:96:D5:3C:B0:25:61:2F:2C:3B:9A:32
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/smEg4fAndHFFltU8sCVhLyw7mjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.58.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e2:51:05:b5:3a:c0:f1:6b:93:9b:90:6e:d0:4f:ca:e2:59:
d4:f8:d9:90:b5:61:94:6a:55:ae:bd:aa:7d:aa:38:04:f0:cb:
64:53:16:20:83:41:73:83:c6:44:09:0a:16:a1:3d:7b:d1:16:
73:f6:6b:95:26:db:6d:cd:8f:fa:d8:f2:72:f5:e0:b7:54:64:
09:fb:f3:db:cf:9b:5d:26:bd:dd:c4:f0:4e:b5:da:49:75:fa:
62:1a:f5:b1:48:d1:50:db:04:7d:f4:b3:84:b0:5e:67:64:08:
39:6b:fc:ee:18:30:51:da:01:5e:3f:d8:8f:f5:4e:78:6f:07:
80:d3:cc:3b:6b:ff:3c:5e:d4:84:e5:34:d0:2a:6a:1c:bc:59:
7d:74:a1:91:54:25:de:ae:57:4d:55:d1:32:f5:cd:96:26:28:
61:c1:75:39:95:1c:88:92:c4:2b:ab:e7:41:a3:d8:00:50:ee:
61:68:0b:3c:7a:80:de:a7:2c:55:a4:da:7c:d0:a0:95:77:57:
b6:d5:bf:af:14:14:0c:30:52:86:d3:1b:f0:4b:56:7c:a9:03:
e5:a0:d0:dd:aa:7e:a4:ed:fd:b9:0d:2f:4a:87:b7:a0:90:75:
7c:09:a2:a2:a1:a5:33:a9:86:45:7b:d1:5f:46:a0:72:65:92:
e2:e7:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:00 2024 by rpki-client on console-fra.rpki-client.org