Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/yZbsj1wmSOu-twGphUFA1M59koU.roa
File: yZbsj1wmSOu-twGphUFA1M59koU.roa (raw, json)
Hash identifier: IqMJgJAJDGiDeqOWLD6/N2yy3HivuiKR0m+jSo8jsBQ=
Subject key identifier: C9:96:EC:8F:5C:26:48:EB:BE:B7:01:A9:85:41:40:D4:CE:7D:92:85
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 018CC3B73AC775E5A37A8B829C7CBCC040B7
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/yZbsj1wmSOu-twGphUFA1M59koU.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61328
IP address blocks: 194.31.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3a:c7:75:e5:a3:7a:8b:82:9c:7c:bc:c0:40:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c996ec8f5c2648ebbeb701a9854140d4ce7d9285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:af:3c:78:37:94:5b:81:58:a1:fc:56:de:
28:08:5c:96:21:50:7d:a9:f9:cb:00:35:62:27:c5:
db:5f:bc:9a:fc:e8:f6:37:71:ad:f5:ce:5d:b4:f7:
5a:c3:5a:a4:66:28:4a:6f:ac:de:56:cb:5f:6e:03:
1c:83:ae:ca:cd:87:f3:c3:9f:8b:0d:28:1b:08:9d:
fc:05:98:0d:bc:62:6b:48:a6:b5:19:af:d7:d2:b7:
ac:ad:6b:1b:e6:f3:92:02:f5:6e:01:70:46:28:36:
14:b6:ca:2d:da:38:9d:0a:4e:e0:09:c9:a3:c6:fa:
37:81:a3:32:87:2a:55:3a:c8:e6:41:d5:51:31:25:
80:0b:3c:26:6b:b6:10:ab:04:1d:9b:c5:f1:c7:b2:
88:48:64:6e:ee:05:a3:e9:3c:90:3c:ea:a8:97:8b:
e9:fe:f8:ff:4d:98:70:29:bc:ab:83:0e:b3:27:35:
55:86:72:a9:82:f3:99:35:53:fd:60:f3:b1:3d:42:
ca:28:85:67:ca:fb:fe:37:13:50:3b:f0:9e:cd:5a:
c2:36:5d:d1:07:d3:0c:a8:43:78:50:47:b5:8c:13:
d9:4d:14:b4:de:1c:26:f5:0a:f2:40:87:1e:97:8b:
bb:f9:58:9f:a3:36:ee:7f:d8:1c:89:6b:01:a8:52:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:EC:8F:5C:26:48:EB:BE:B7:01:A9:85:41:40:D4:CE:7D:92:85
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/yZbsj1wmSOu-twGphUFA1M59koU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.56.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0b:86:42:b8:eb:d9:af:ee:37:92:a6:38:1f:98:b5:f5:b1:
62:2b:07:76:7f:84:b2:53:11:83:45:ec:79:df:35:f4:b1:53:
56:c1:c5:ca:71:6b:18:3d:59:c3:9a:de:76:e1:e3:cf:39:4a:
3c:3b:14:be:37:b5:02:9b:c4:9e:a4:c6:8d:12:b8:d7:03:28:
2a:32:56:43:c4:de:dc:55:7f:2d:87:e7:d6:36:94:23:74:6b:
8e:df:87:78:31:d8:9a:52:74:9f:80:e7:31:19:dd:95:66:fe:
d1:5c:06:8e:0d:89:f7:bd:5f:6f:a2:22:8b:dc:88:1f:4a:e2:
d1:6c:be:9d:fa:d4:03:03:7d:a7:0a:b9:81:8b:19:09:bf:18:
3b:23:47:a4:d1:81:90:c5:ec:02:fc:5e:96:27:08:6b:02:62:
f6:8d:8b:98:eb:0c:bc:52:28:0f:9f:09:b0:e1:8e:ef:37:bd:
0e:72:96:d6:1c:93:1e:0e:13:8a:91:3c:63:d2:66:09:0d:c7:
7d:90:92:66:a8:ef:7b:d5:a6:a1:18:3a:f4:0b:6b:94:ac:9a:
f0:9f:2f:92:21:d9:d4:ec:9a:fd:dd:92:31:c7:2d:4a:28:7f:
23:01:5a:6b:b6:81:a6:e6:b1:aa:75:fa:2a:f3:d6:36:49:78:
03:8e:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:49:27 2024 by rpki-client on console-fra.rpki-client.org