Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/V7bHv19pW1PXiDl3iSHoE1ISBjA.roa
File: V7bHv19pW1PXiDl3iSHoE1ISBjA.roa (raw, json)
Hash identifier: cJpKKpTcMgfbUrk+6tVd/xCAxzITuGV43CspOgClDVQ=
Subject key identifier: 57:B6:C7:BF:5F:69:5B:53:D7:88:39:77:89:21:E8:13:52:12:06:30
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 018CC64B0C72C3AFDD4561D402A32FE6260A
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/V7bHv19pW1PXiDl3iSHoE1ISBjA.roa
Signing time: Mon 01 Jan 2024 18:30:56 +0000
ROA not before: Mon 01 Jan 2024 18:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197667
IP address blocks: 31.41.82.0/24 maxlen: 24
31.41.83.0/24 maxlen: 24
31.41.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:0c:72:c3:af:dd:45:61:d4:02:a3:2f:e6:26:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Jan 1 18:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57b6c7bf5f695b53d78839778921e81352120630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:d2:67:60:91:b1:61:16:e3:c4:b7:14:9a:
3f:da:61:ad:97:c0:7a:c4:9d:77:18:0a:b9:fe:e4:
2e:0e:c0:55:84:e9:13:ce:0e:f7:05:d0:8d:ea:60:
dd:d5:85:00:91:8b:8d:df:39:b5:9d:77:76:00:f5:
a4:89:c0:12:68:4f:c9:49:2f:fd:74:4d:ca:18:c9:
c7:c3:62:81:72:24:82:33:79:b2:59:29:14:d0:16:
36:ac:d3:db:a6:a8:ae:14:a4:f5:6c:8b:d7:e3:a2:
56:d2:e2:38:53:92:0c:c7:f4:9e:f8:8e:77:93:8d:
d3:4c:1c:93:0a:fe:8e:85:7c:94:91:f0:5f:c6:bf:
ca:28:27:b2:22:fd:cc:52:7a:ac:81:59:12:7c:51:
f7:9f:51:a5:04:7e:80:5d:34:b4:3f:18:7a:31:31:
5b:13:21:ba:f4:d3:b0:d4:36:81:c0:4b:44:d5:60:
cc:8d:44:2c:38:34:ff:f8:40:3d:65:54:a9:6a:ba:
20:77:d5:1f:99:0c:b3:30:ce:11:ba:8d:6e:3f:1b:
12:cb:1a:12:ff:f5:94:b6:4f:b9:41:a4:32:fb:ac:
00:b9:24:26:ad:53:da:ab:3a:d9:8b:cd:cb:c6:ad:
81:fc:44:13:1c:5c:03:d0:fb:3b:b7:f8:13:3f:9f:
b1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:C7:BF:5F:69:5B:53:D7:88:39:77:89:21:E8:13:52:12:06:30
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/V7bHv19pW1PXiDl3iSHoE1ISBjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.80.0/21
Signature Algorithm: sha256WithRSAEncryption
57:83:0a:f0:94:12:5e:4d:bd:c3:11:3d:84:b4:9d:9c:eb:50:
2e:1d:78:4a:11:bd:e5:7e:f0:8d:2d:e8:0f:af:5b:f3:e1:0c:
f1:c4:51:cf:4b:91:7c:5f:1d:e2:ad:95:04:2d:f2:ae:b0:ee:
1e:01:c8:64:97:2b:b8:d6:a0:1c:c1:dd:3a:84:c3:e5:4b:29:
fa:11:8f:0a:0c:1c:f8:e1:c7:3b:e0:75:7a:50:73:11:bf:a8:
7e:08:6a:f4:98:21:0a:58:a5:7d:1f:68:a3:bb:98:91:59:cc:
0a:c2:b8:38:6d:bd:4b:ef:1e:ab:dd:6d:dc:97:78:53:eb:4b:
d9:6e:4f:58:3b:a7:8e:1f:6f:6c:d1:b5:6a:a3:0b:6d:41:59:
cd:e6:90:c1:1d:2b:6f:b2:2a:75:ba:bb:58:35:f1:f8:b2:d8:
d6:09:ab:41:bd:58:bf:a2:4a:ce:b9:c3:6d:69:0a:c6:04:b6:
4f:e7:b8:d7:28:3b:c9:2d:00:13:8a:bb:5c:0b:b1:68:f1:bf:
cf:67:4f:d2:ab:92:fd:f0:85:1d:26:27:d0:c3:2e:59:40:a0:
0d:f6:8f:a0:21:3e:b8:74:fc:b4:eb:03:de:2b:92:82:ea:ca:
00:2f:92:29:96:5d:f0:ad:90:14:4c:69:34:2d:91:cd:a5:2a:
56:96:de:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:52:17 2024 by rpki-client on console-fra.rpki-client.org