Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kteVmTMD1T-8cGuJExgciGLkyM.roa
File: 5kteVmTMD1T-8cGuJExgciGLkyM.roa (raw, json)
Hash identifier: SDDtGE8uztvoQtOKYCSWV1YerFVb+auE68o/Jo6yPCY=
Subject key identifier: E6:4B:5E:56:64:CC:0F:54:FE:F1:C1:AE:24:4C:60:72:21:8B:93:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191303E7342D090A5DA016B39664F0577C1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kteVmTMD1T-8cGuJExgciGLkyM.roa
Signing time: Thu 08 Aug 2024 04:28:04 +0000
ROA not before: Thu 08 Aug 2024 04:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211407
IP address blocks: 31.56.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:3e:73:42:d0:90:a5:da:01:6b:39:66:4f:05:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 04:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e64b5e5664cc0f54fef1c1ae244c6072218b9323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:29:5f:42:52:34:78:ad:5d:03:db:0f:59:
ef:bd:05:ec:d4:37:d1:5e:72:6f:cd:25:18:d6:e2:
03:c2:be:b6:c9:e2:99:57:8a:74:a8:d7:85:80:77:
73:5e:ec:7d:d5:a6:ca:5f:58:21:92:e7:55:59:7b:
46:6a:18:77:43:7e:dd:ed:8d:e5:24:ff:db:cd:be:
68:eb:3c:3a:47:66:cb:ee:c1:35:3d:65:b9:d6:be:
f8:d0:b2:27:10:0b:8d:5b:f2:a0:e8:ef:1e:df:a8:
95:b7:68:1b:74:56:44:07:39:9b:bc:27:b9:46:eb:
1e:22:52:78:da:60:3b:5a:36:d4:70:3f:36:f9:dd:
72:cc:d7:38:de:97:86:34:3b:dd:e3:47:0e:bc:16:
9f:1a:93:3a:27:73:34:20:b2:d1:8c:4d:98:43:2a:
65:61:3b:19:1a:ab:5e:c5:c5:0a:19:5c:0a:fa:32:
21:91:1d:e9:25:dc:2b:7d:03:69:0e:be:56:d1:18:
ba:5b:dd:3b:be:b2:f8:12:fa:c0:c5:04:e8:04:e7:
48:d7:8d:0b:9c:48:6e:11:bb:56:e3:40:11:16:fe:
50:5d:76:d4:07:7c:d1:02:e3:1b:cc:71:4c:f7:69:
ba:d5:55:55:05:e1:44:b3:89:fb:2e:af:dc:3f:0b:
d2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:5E:56:64:CC:0F:54:FE:F1:C1:AE:24:4C:60:72:21:8B:93:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5kteVmTMD1T-8cGuJExgciGLkyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e6:9c:69:97:47:67:31:67:eb:bb:8a:47:15:74:41:4e:25:
03:3b:7c:86:68:57:a7:57:c7:ce:e8:19:67:98:e8:19:f0:fe:
6c:9f:c5:c8:93:20:72:8e:4f:13:bd:49:dd:f8:82:be:45:61:
ae:0a:a9:c8:a8:47:b1:f8:4f:55:ce:51:81:53:16:4a:2f:7c:
8d:72:b8:cd:7a:0c:48:d0:1d:7b:d6:ee:b0:56:58:9a:3f:49:
7d:1a:f7:0d:ae:ed:2c:46:6a:e8:00:6b:48:2b:d9:e4:c8:9d:
63:60:79:9d:3b:5f:5e:02:04:ca:80:53:43:fd:0e:45:a7:57:
48:05:8d:9e:e1:24:90:5d:aa:d9:0c:fe:af:20:51:1a:46:47:
df:34:f1:88:b8:84:b4:a6:5a:68:02:59:08:0b:0b:68:ff:4e:
a9:dc:68:64:16:7b:ac:e9:2d:07:a5:0e:b6:ff:5f:c3:11:4a:
f9:e2:57:e1:1e:82:3f:3c:a5:46:3a:30:f0:4b:c4:d2:49:70:
a1:59:b3:6f:6e:04:ff:c4:92:1a:c8:ed:01:d4:d9:e5:17:17:
4c:cf:e5:02:75:d8:88:60:20:ec:16:fb:a3:7b:13:bc:fe:8f:
d9:7c:96:d2:4f:b1:00:ed:f6:ad:7a:b3:ab:24:f2:78:41:dd:
8a:5f:73:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:03:11 2024 by rpki-client on console-ams.rpki-client.org