Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b4i-a5fIHX9P2rTm4z8f0ax9V_0.roa
File: b4i-a5fIHX9P2rTm4z8f0ax9V_0.roa (raw, json)
Hash identifier: q9zkYR12YjGzKMPmMvOjmhLYp7L2KHLXHCtcGslCODo=
Subject key identifier: 6F:88:BE:6B:97:C8:1D:7F:4F:DA:B4:E6:E3:3F:1F:D1:AC:7D:57:FD
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B93B614A1FB187DA7940130D949B69
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b4i-a5fIHX9P2rTm4z8f0ax9V_0.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206806
IP address blocks: 31.145.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:61:4a:1f:b1:87:da:79:40:13:0d:94:9b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f88be6b97c81d7f4fdab4e6e33f1fd1ac7d57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:0e:ef:a9:80:8f:47:13:f5:1c:65:a8:34:
cc:7b:8e:58:86:73:27:dd:80:91:6c:56:32:52:ce:
7e:ac:be:6b:b2:a0:d1:65:bc:59:b9:7c:e6:0e:36:
b3:c3:70:2b:5b:84:f0:a4:bc:85:a7:04:1f:82:45:
9f:8f:4b:14:20:0e:90:3d:3a:2e:a3:59:6a:f3:0d:
f9:ad:e2:f0:02:83:e8:3b:57:0a:e0:d2:aa:1c:44:
f3:71:8a:1d:6c:d6:5f:a7:5d:b6:bb:56:b3:40:f8:
05:22:ef:dc:6a:99:33:20:b2:a0:0a:8a:d9:fc:04:
5a:c9:af:a7:b2:99:fb:bd:65:48:54:b1:77:b2:a5:
8f:3e:30:bf:01:50:08:1e:64:4c:8b:28:d6:fa:80:
55:fe:8c:10:3e:a5:dc:a3:4a:0c:89:be:a0:4a:76:
94:77:96:d6:86:da:20:1c:39:93:39:37:9d:7f:05:
0e:ed:cd:95:0c:90:1c:18:26:99:b6:63:47:52:98:
35:6b:b4:31:0a:01:f2:2e:5a:e0:47:9b:41:a2:09:
bc:57:e1:7f:0a:8b:41:2f:dc:f7:bd:73:be:67:75:
04:b4:5e:94:3a:fb:2b:15:91:ca:e4:6a:02:d1:56:
60:65:13:69:9a:fc:3d:9f:cf:e9:1d:6c:77:f1:68:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:BE:6B:97:C8:1D:7F:4F:DA:B4:E6:E3:3F:1F:D1:AC:7D:57:FD
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/b4i-a5fIHX9P2rTm4z8f0ax9V_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:eb:d3:8e:54:5a:e2:f3:41:37:62:42:9e:e4:d4:2a:bc:70:
e0:72:eb:36:21:92:77:a3:71:ff:27:f1:8d:0e:96:15:23:42:
66:6f:43:b0:57:b7:88:aa:d0:e8:b4:47:f5:c9:fe:76:62:db:
9a:e2:f4:a0:c0:33:5d:8e:21:59:37:ad:79:3f:af:73:25:2a:
51:30:b1:98:e3:c9:bf:55:56:fd:72:a1:19:42:60:88:6d:63:
79:8d:32:3e:51:15:d2:82:de:54:78:48:64:92:64:47:ee:ca:
cb:26:d2:ef:f3:68:fd:97:af:5e:89:f0:75:7e:68:a4:ee:e2:
0c:6e:b6:41:7a:d0:3d:3e:0e:82:d0:c8:0f:a1:21:7d:47:02:
e5:8d:d5:ab:3c:4d:c7:87:6b:20:a0:65:16:c1:c3:8e:f0:01:
02:d5:6f:36:22:12:25:b1:48:b6:5e:31:be:4a:8a:b5:ca:53:
2e:a3:f7:eb:b7:c2:c1:c0:11:c4:11:75:66:ce:8d:a1:93:cf:
a0:fe:9a:38:29:d1:f1:01:ce:ac:c4:4f:78:c1:6e:93:09:d8:
6b:e8:22:49:f9:67:b2:4d:23:71:75:d6:43:e9:00:aa:71:17:
5b:2f:79:fc:3f:f9:c9:7f:4d:b4:17:11:1f:d7:85:c7:d2:38:
ed:25:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:49:25 2024 by rpki-client on console-ams.rpki-client.org