Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/X0TEAeszgRB2Otcc1fBcMQN1rCk.roa
File: X0TEAeszgRB2Otcc1fBcMQN1rCk.roa (raw, json)
Hash identifier: kwWLkXaF6DHulc7W+U24Mw96j+L0Can30SfokLD0Kn4=
Subject key identifier: 5F:44:C4:01:EB:33:81:10:76:3A:D7:1C:D5:F0:5C:31:03:75:AC:29
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018CF7DCF06481351A12C6D6DF557FC84490
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/X0TEAeszgRB2Otcc1fBcMQN1rCk.roa
Signing time: Thu 11 Jan 2024 09:31:40 +0000
ROA not before: Thu 11 Jan 2024 09:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215947
IP address blocks: 31.130.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:dc:f0:64:81:35:1a:12:c6:d6:df:55:7f:c8:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 11 09:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f44c401eb338110763ad71cd5f05c310375ac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:e9:1b:b9:39:ba:fd:39:01:27:08:0e:39:
d2:ee:f9:2f:00:bc:8f:24:ff:23:ab:3d:50:de:09:
da:e1:3d:6a:13:7b:24:14:52:cf:36:ec:fe:de:34:
bc:9c:02:0d:37:f2:7d:c3:fe:01:12:ea:35:37:98:
d8:10:08:6c:6c:a5:2a:2d:58:c0:60:34:d1:53:31:
ce:33:34:72:e2:27:88:bf:de:1d:35:f2:5c:50:a4:
59:6b:49:25:1e:7d:ff:b3:75:c0:19:f6:e0:66:5b:
7b:67:bb:fc:07:88:f0:20:69:a5:f2:e2:2d:52:16:
5b:50:50:e0:fb:a0:62:20:f4:c8:56:9a:5f:be:92:
12:2c:67:d4:20:09:dd:71:0c:c6:99:db:12:6f:81:
56:9e:7d:ec:80:15:dc:ca:db:85:87:41:74:57:36:
58:46:3d:f2:f1:bb:b2:58:5a:3c:56:d2:d9:a8:1a:
e9:4d:06:92:af:d0:83:d1:3d:d4:f1:6e:38:ac:8d:
8a:07:78:90:4b:95:a7:74:1d:ab:f5:83:ed:5a:57:
1b:5c:0c:65:9c:20:a3:9f:00:19:11:82:72:dc:17:
1b:ab:f2:7c:34:4b:64:ee:05:2e:59:dc:2d:3d:d9:
ad:91:81:8a:c8:bd:e3:08:f0:f0:8e:7f:bc:53:b8:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:C4:01:EB:33:81:10:76:3A:D7:1C:D5:F0:5C:31:03:75:AC:29
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/X0TEAeszgRB2Otcc1fBcMQN1rCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c1:3e:20:8c:2d:7c:7a:dc:bd:8d:f4:8a:f1:ea:dc:af:fc:
06:78:4e:e6:b7:c6:0d:8b:03:16:53:3c:41:c7:44:5d:60:38:
c2:77:6b:e2:78:59:61:f8:f6:00:af:62:d1:ec:71:38:ee:dc:
af:72:b4:b8:46:6a:fd:f4:ad:40:22:20:8c:9f:94:63:ec:1b:
22:e4:a0:cd:a2:de:85:62:35:6a:a9:20:3c:65:05:3e:29:99:
5e:b0:aa:98:db:1a:47:67:d6:77:9f:b6:6b:34:b0:ce:6f:70:
5e:12:44:63:b9:07:93:93:ca:16:61:87:e4:15:11:9a:40:ee:
62:00:69:de:c8:d3:02:83:70:a0:bc:d6:44:e8:93:c5:b7:9a:
0d:e0:b3:1f:49:7a:13:e9:cf:da:46:dd:f0:26:68:98:c4:d6:
38:d8:2a:e3:48:d3:51:cc:2f:5b:93:04:bc:84:89:da:7b:24:
7a:48:37:5d:e2:39:31:d3:eb:67:a2:e1:fd:78:c2:67:0c:e8:
11:1d:47:44:6d:2a:92:ac:1b:3e:21:e0:82:f3:df:08:1e:61:
f9:9f:e1:b9:a3:c5:48:91:fa:d0:21:f8:ac:d9:b7:0a:eb:69:
19:08:c2:43:25:b0:cc:23:35:d1:8a:c4:59:4d:f0:0d:24:ff:
44:97:7d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:15:58 2024 by rpki-client on console-fra.rpki-client.org