Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/5MjDloOkMbroSjLN8OzGXX38UjE.roa
File: 5MjDloOkMbroSjLN8OzGXX38UjE.roa (raw, json)
Hash identifier: L0hZ+BoOXuQp96fricRnYxcU8ZRBC0PWbP4x5O8AaUg=
Subject key identifier: E4:C8:C3:96:83:A4:31:BA:E8:4A:32:CD:F0:EC:C6:5D:7D:FC:52:31
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 018D9D5E56BDD54F17B70288A2ADFE9B084E
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/5MjDloOkMbroSjLN8OzGXX38UjE.roa
Signing time: Mon 12 Feb 2024 12:50:21 +0000
ROA not before: Mon 12 Feb 2024 12:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31082
IP address blocks: 31.207.91.0/24 maxlen: 24
93.189.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:5e:56:bd:d5:4f:17:b7:02:88:a2:ad:fe:9b:08:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Feb 12 12:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4c8c39683a431bae84a32cdf0ecc65d7dfc5231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:32:07:b7:e2:6d:d2:fe:04:16:14:b1:51:
ea:2e:6b:b0:f2:25:a2:03:c3:f6:2f:bf:2f:96:95:
05:31:c3:f6:56:64:ef:1e:83:5d:f4:5d:54:59:73:
17:12:eb:c2:65:df:5e:ba:4e:02:a0:d7:fa:ea:77:
28:f4:b0:0d:0f:41:0b:e6:e7:be:b8:d2:69:8e:c8:
05:ac:95:08:a9:01:72:e9:26:f9:2f:54:95:98:d5:
09:7c:77:bc:bd:55:30:8f:f8:63:aa:3c:fe:79:19:
99:10:2f:d9:1d:95:ee:12:37:8a:42:23:1a:93:c5:
74:4f:d4:c3:12:68:bc:aa:9f:d5:7f:d5:3d:4e:81:
a0:74:57:d5:0f:15:65:3e:54:0d:f8:43:98:30:a7:
3d:ae:8c:24:cc:d7:74:65:02:58:06:6b:cf:54:93:
79:9a:60:37:2d:4c:45:7e:41:35:cc:84:61:f8:ef:
0b:7a:8a:c1:51:49:e6:bf:87:3b:30:d8:4e:dc:76:
ed:65:f4:f7:8d:e4:2d:8d:ca:e3:ab:97:b1:b0:bc:
77:52:97:a1:ac:3f:db:37:9e:c7:66:51:52:6b:ac:
23:7a:ea:97:6f:fd:43:21:e5:5a:39:50:6d:01:8b:
c5:04:cd:84:69:80:77:06:5e:06:40:8f:5b:c5:02:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:C3:96:83:A4:31:BA:E8:4A:32:CD:F0:EC:C6:5D:7D:FC:52:31
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/5MjDloOkMbroSjLN8OzGXX38UjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.91.0/24
93.189.39.0/24
Signature Algorithm: sha256WithRSAEncryption
82:47:f8:a3:0b:d6:e0:bc:c7:56:6d:7c:e2:0f:53:17:89:31:
cb:82:30:d0:00:09:28:a3:7a:55:c8:31:3d:af:5e:bf:00:7b:
1a:48:d6:20:05:b4:80:6d:b8:a9:c3:90:c8:ac:e7:cf:d0:aa:
a9:e9:f8:f6:f1:b8:21:36:36:3a:de:0b:e9:04:bd:6b:fe:44:
7b:50:a9:83:26:bd:6f:3a:1e:12:8b:82:02:f4:c3:c8:09:33:
76:2f:f5:f0:64:80:26:f7:1e:60:c4:13:20:d6:e3:73:ba:98:
c9:2a:bb:a4:09:b7:49:75:ea:0b:e7:78:8b:45:e9:fc:d3:d8:
0b:69:b4:f1:02:9e:a9:ef:bd:2f:90:0f:1f:4a:83:dd:cb:f0:
38:75:81:cf:1a:90:47:73:41:99:b8:59:bb:d8:11:a1:78:fe:
47:20:12:bc:29:c0:92:94:e2:b6:0d:90:57:26:97:3e:81:ab:
15:c1:7e:00:2d:3f:15:47:de:5a:c4:ee:2a:4c:98:41:a2:2f:
a8:c3:bc:d0:14:74:88:2e:0c:05:90:95:f1:66:1f:ae:e0:b1:
25:ad:db:cd:71:c0:17:09:a0:c0:e8:96:32:04:97:3e:e5:f7:
cc:e8:77:b6:c6:1e:58:f2:b8:c2:3b:cb:a4:96:82:2e:1e:6c:
4e:ed:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:29 2024 by rpki-client on console-fra.rpki-client.org