Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_zNVX_kYqAw89MPQCqmUUuVbmE.roa
File: z_zNVX_kYqAw89MPQCqmUUuVbmE.roa (raw, json)
Hash identifier: 2ki1NM8sQJ3GhwmIpMxIWjZSNK0roT6tjm/w7oLzPm8=
Subject key identifier: CF:FC:CD:55:7F:E4:62:A0:30:F3:D3:0F:40:2A:A6:51:4B:95:6E:61
Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial: 018CC6B8B1C5E2128BDED6D2C7B9930C5885
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_zNVX_kYqAw89MPQCqmUUuVbmE.roa
Signing time: Mon 01 Jan 2024 20:30:42 +0000
ROA not before: Mon 01 Jan 2024 20:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198086
IP address blocks: 31.44.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b1:c5:e2:12:8b:de:d6:d2:c7:b9:93:0c:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
Validity
Not Before: Jan 1 20:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cffccd557fe462a030f3d30f402aa6514b956e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:de:59:20:db:d0:80:47:12:10:5b:60:1e:
98:35:47:75:42:d4:4c:eb:78:6a:c9:9e:4a:01:e4:
c0:9f:aa:9c:ea:fb:08:45:e4:07:1f:0d:22:fc:d2:
8e:2c:f4:db:17:d9:99:d5:f5:b3:86:28:fd:6d:d8:
47:be:05:60:85:17:3a:12:68:43:13:ae:a9:63:e1:
6b:2f:4b:61:fc:ce:14:70:78:9b:57:54:56:08:94:
a2:cc:0d:42:ee:cf:8a:51:df:75:ff:37:fb:d4:60:
3e:94:bd:37:a2:7d:23:5a:82:db:f3:47:1f:5f:5a:
8d:ac:cd:ea:9b:8f:70:f5:11:e8:0a:8c:37:00:31:
80:1c:52:bb:39:c3:ce:03:8e:2c:5e:e7:6a:71:f3:
9d:ec:80:e3:c5:02:d9:df:5d:72:1c:c8:5e:27:92:
14:6b:33:ae:79:d3:48:95:df:dd:cd:85:b5:7e:33:
e8:60:76:cf:97:82:a5:c2:23:f0:8e:ac:3d:87:2e:
d2:79:d7:bc:b0:a4:66:1f:86:3a:17:9b:cb:55:1c:
64:db:e2:dc:1a:02:41:c7:6b:dc:94:87:03:a8:29:
aa:27:61:4c:9d:da:7b:87:6e:1b:01:35:35:1f:cf:
de:dc:bf:67:f6:1b:4e:90:da:1e:f2:7a:cd:11:33:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:CD:55:7F:E4:62:A0:30:F3:D3:0F:40:2A:A6:51:4B:95:6E:61
X509v3 Authority Key Identifier:
keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_zNVX_kYqAw89MPQCqmUUuVbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.249.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b8:92:b2:02:0a:47:c9:4d:0b:0c:a4:42:ae:a5:88:8b:6f:
ff:40:76:df:0b:8c:ee:e1:5f:64:8b:7b:fe:86:a5:83:37:ac:
16:ae:92:46:f7:64:f9:46:c0:34:5c:65:28:92:93:e2:0a:df:
60:d5:7b:c5:24:5a:04:72:ba:24:c5:d9:9a:b9:e9:fa:40:cc:
a9:77:4b:6b:34:3a:84:02:85:13:39:2c:c2:77:8a:79:11:2c:
41:d1:4a:cc:32:de:d9:10:a6:f4:65:21:c1:d4:66:97:0d:11:
bc:2a:1b:e3:fb:0f:c2:55:3e:c3:dd:07:f9:3d:09:77:fa:06:
13:bc:b2:c2:05:63:0c:38:d3:f8:aa:24:de:cd:8a:fc:b7:c7:
c2:2f:4c:18:d7:cc:68:b8:de:6a:3f:83:25:e7:b8:1d:c2:9a:
f3:78:28:06:6d:bc:9e:ff:7c:84:28:30:cb:65:8e:06:db:75:
2a:2c:88:eb:41:8f:a3:af:cd:91:fc:fa:cf:23:57:51:12:7d:
7e:eb:3a:23:79:58:3e:71:b8:58:93:03:e1:96:98:58:b3:86:
d0:54:8e:44:96:1c:e9:1b:2c:03:92:3a:ce:72:eb:49:ca:16:
7b:75:d1:02:33:7b:76:5b:19:ee:83:4f:3d:8d:ea:e3:8a:6f:
b9:91:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:36:18 2024 by rpki-client on console-ams.rpki-client.org