Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UY7h428RXYRMu0fYgnZphwwdUMI.roa
File: UY7h428RXYRMu0fYgnZphwwdUMI.roa (raw, json)
Hash identifier: GN0TRtGFo+3vQth84qZKn5qpsG+n/2hnXP90mFwM9cY=
Subject key identifier: 51:8E:E1:E3:6F:11:5D:84:4C:BB:47:D8:82:76:69:87:0C:1D:50:C2
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B937C48FBC56E4B1015A1B4B45E983
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UY7h428RXYRMu0fYgnZphwwdUMI.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60096
IP address blocks: 31.206.32.0/24 maxlen: 24
31.145.70.0/24 maxlen: 24
31.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:37:c4:8f:bc:56:e4:b1:01:5a:1b:4b:45:e9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518ee1e36f115d844cbb47d8827669870c1d50c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:08:8e:c6:3d:e0:c2:97:c3:2b:34:0a:6e:
52:6d:bc:3c:8d:ef:05:eb:b7:2a:23:0d:fc:e3:39:
fa:b4:c9:ee:14:81:51:63:fa:02:45:88:bd:66:e3:
b8:6a:3a:0c:d8:dc:d5:e1:10:b1:c8:bb:f0:0b:91:
70:bf:a7:59:b7:37:f2:24:89:87:65:cb:32:36:89:
48:60:12:c2:78:83:81:b9:ff:35:c4:ac:9d:5a:8a:
ff:c8:55:9b:be:3b:cc:b3:68:e9:9c:f7:5e:5a:e9:
66:f1:de:88:f1:ca:0e:fa:80:3e:36:dc:d9:b8:6c:
17:61:6e:21:08:95:e4:e4:55:07:67:5a:ce:75:7d:
51:4b:9d:7f:3a:1f:05:a7:94:d3:83:5b:3b:30:95:
b7:7a:47:12:05:55:16:5c:49:8b:5d:03:78:b9:1d:
ec:97:f6:2c:4a:4d:1f:e3:f6:80:9e:a7:34:f3:86:
0e:96:f4:80:27:31:1f:71:6c:dc:0d:bd:5a:82:7c:
37:af:02:20:ac:c5:04:46:f0:d6:06:e2:d3:a7:23:
eb:a3:cd:5f:99:5c:2d:ec:1b:eb:10:51:55:f5:20:
c2:b8:82:8a:7e:46:20:55:73:5e:d3:66:e8:2c:80:
c4:29:0a:d5:04:fa:de:b3:22:3c:b1:75:4f:c1:c4:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:E1:E3:6F:11:5D:84:4C:BB:47:D8:82:76:69:87:0C:1D:50:C2
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/UY7h428RXYRMu0fYgnZphwwdUMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.70.0/23
31.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
83:db:fb:7b:d3:5f:7d:a9:27:be:93:02:e5:d5:79:14:77:88:
e1:d4:0d:8c:15:3b:63:5c:24:0a:d3:ff:e3:42:62:d5:45:10:
fe:1e:b4:95:78:83:a4:f3:7d:b1:9a:79:ac:41:b2:84:4a:ba:
f4:da:3c:07:f3:c4:02:be:4a:15:24:c5:12:22:45:a1:f0:01:
63:75:39:48:4e:b6:9c:4c:18:a1:ce:33:a0:22:40:b1:e0:a6:
0c:ae:8c:77:04:e7:c0:51:7f:ea:b0:26:a5:dc:0e:89:05:a4:
00:63:48:c4:a7:67:9b:5e:87:a7:48:aa:a0:fa:a5:9b:f9:bd:
c2:e4:45:b4:68:26:10:4d:72:2d:8d:ac:00:88:97:0f:cf:8a:
9b:d7:9c:e5:b3:51:c7:33:01:dd:18:07:db:83:6d:6a:ab:27:
58:62:11:eb:7c:a4:de:7d:f6:34:83:49:09:b6:c4:72:09:25:
b6:4b:a6:91:d6:24:21:ff:b2:0c:70:32:e5:e8:bb:c9:4e:8b:
35:6b:10:58:81:a8:88:d1:28:3c:56:e7:e5:61:ea:3c:5d:f7:
6f:7c:11:1d:08:a7:bf:ee:e2:07:f1:b4:ea:60:19:c5:87:06:
46:c6:6d:78:ab:25:3c:87:8a:07:6e:50:95:1e:70:94:cd:17:
c4:c6:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:23:01 2024 by rpki-client on console-ams.rpki-client.org