Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Vc51oYD00Ayj5dxzzLSxXlfL_LA.roa
File: Vc51oYD00Ayj5dxzzLSxXlfL_LA.roa (raw, json)
Hash identifier: ORdjLy64wb4elBqmsWac2hM7M7h5zmmfwOlQwvlFJFo=
Subject key identifier: 55:CE:75:A1:80:F4:D0:0C:A3:E5:DC:73:CC:B4:B1:5E:57:CB:FC:B0
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018E754A92495FF5EADE0DB3B9380850F921
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Vc51oYD00Ayj5dxzzLSxXlfL_LA.roa
Signing time: Mon 25 Mar 2024 11:06:45 +0000
ROA not before: Mon 25 Mar 2024 11:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207986
IP address blocks: 31.130.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:4a:92:49:5f:f5:ea:de:0d:b3:b9:38:08:50:f9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Mar 25 11:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55ce75a180f4d00ca3e5dc73ccb4b15e57cbfcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:8a:ac:fe:ce:3f:f8:76:48:5a:c8:b4:05:
10:45:e2:90:22:c5:d7:c5:d1:ea:98:60:34:9f:87:
10:f6:f8:1b:50:16:5b:72:a6:71:6a:d8:be:d3:0a:
10:fa:13:1d:81:9a:11:30:bd:00:c6:32:0f:f6:ee:
01:a5:6f:09:dc:9f:23:9a:c5:be:72:c5:db:d8:c9:
17:ac:e3:98:f4:04:ee:30:f0:a8:2f:36:e9:b0:ef:
5a:bf:09:28:b3:8f:03:27:44:b3:90:6c:d9:11:50:
f3:fc:81:f8:64:16:7e:11:3f:e9:ed:12:9a:92:de:
4c:74:21:0c:55:d5:7d:c6:7b:c5:43:97:14:b0:50:
a6:f9:d0:66:58:16:36:2b:0f:81:5e:1e:f1:22:c7:
42:c8:47:04:45:ef:c0:58:80:6a:58:35:99:9e:66:
a0:43:a8:eb:54:4c:e7:09:8c:91:75:9d:01:8a:c8:
9a:e3:e8:ed:41:b1:77:4d:34:a0:85:6c:00:d5:d9:
1a:50:88:f0:13:8b:81:2e:d1:13:79:d8:f5:54:f0:
37:b6:74:35:4c:7b:7a:fb:f2:5d:00:e7:b1:e9:30:
3d:24:cf:bf:5b:2d:9a:43:ff:d7:b8:b4:ac:08:0b:
27:7f:3d:52:74:f3:c1:2a:72:5b:70:a1:06:ae:21:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:75:A1:80:F4:D0:0C:A3:E5:DC:73:CC:B4:B1:5E:57:CB:FC:B0
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/Vc51oYD00Ayj5dxzzLSxXlfL_LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:08:3a:36:a2:5d:67:3b:10:5e:7d:c4:8f:f1:e3:3d:16:e1:
ac:c6:a1:a1:58:f8:c6:11:42:29:e2:33:03:7f:ca:74:bf:e8:
ae:b9:ff:8f:da:46:6f:ae:9d:fe:5e:28:0a:cb:ed:be:8c:ab:
91:51:49:5b:63:f0:5d:2c:3f:29:46:0b:28:24:7f:d9:f2:b3:
98:e6:1f:c0:95:f7:e7:14:b7:a2:a0:11:80:9e:7b:82:81:d6:
77:02:9e:c5:b5:87:04:6c:3b:fb:76:8d:ea:8b:88:90:81:00:
b4:25:81:8e:04:1d:35:36:7d:0d:5b:68:be:3f:cf:5e:c3:d8:
5d:89:ab:f3:c6:c3:7a:cc:c0:0c:b1:70:c7:82:97:1a:85:97:
2d:15:48:7e:e4:f6:f6:13:66:d8:b3:ed:9d:37:d3:0e:77:a4:
25:9e:52:e9:f2:b1:6e:97:3f:6f:dd:9e:c3:2b:a4:2d:89:b1:
58:2b:ac:ad:a9:e4:0c:3f:7d:81:39:ea:3c:a3:20:80:7f:72:
a0:75:7a:84:d6:6f:2d:09:61:b6:77:6c:22:be:89:cb:d7:70:
5f:d0:ba:e2:28:f1:c5:0c:4e:8d:30:b0:1f:54:b6:a7:99:8b:
df:79:bf:5a:5a:e5:d8:15:a8:72:39:95:4c:a3:ca:f2:fb:9d:
cf:65:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:16:19 2024 by rpki-client on console-ams.rpki-client.org