Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Bv0vZdAupj1HGgLi2psWKoqz2tM.roa
File: Bv0vZdAupj1HGgLi2psWKoqz2tM.roa (raw, json)
Hash identifier: c734MOTAD1JZod7/AQwj/uDqQLF4jQnAxs+/5qzBi9Y=
Subject key identifier: 06:FD:2F:65:D0:2E:A6:3D:47:1A:02:E2:DA:9B:16:2A:8A:B3:DA:D3
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 018CC56EF4267DDBE7ABA04F998CA2CB1DA7
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Bv0vZdAupj1HGgLi2psWKoqz2tM.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 81.31.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f4:26:7d:db:e7:ab:a0:4f:99:8c:a2:cb:1d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06fd2f65d02ea63d471a02e2da9b162a8ab3dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:9b:19:2f:4e:6a:b8:20:23:17:fe:27:31:
c7:33:8d:c7:ad:39:5d:d7:63:b9:92:ae:aa:d4:aa:
98:92:b2:66:2e:52:87:16:89:34:1b:73:ef:46:eb:
5b:1b:34:d8:e8:18:32:aa:1a:51:95:be:a5:e5:6b:
63:0e:46:de:44:31:87:46:b2:1b:79:65:71:da:f1:
bc:4a:3d:4c:05:31:37:e1:04:41:8b:81:2f:a9:91:
18:ff:da:25:45:1e:49:18:4e:d6:4c:ee:af:c9:10:
80:12:ac:6b:58:fd:74:69:7d:ef:81:af:55:45:42:
b2:5e:8b:22:d6:02:bb:c5:47:3a:40:75:46:ea:59:
ba:dc:72:75:a2:1c:47:be:60:6e:27:7a:61:94:c0:
7f:90:d8:dd:94:7a:c7:76:40:94:19:8f:c4:63:ee:
90:6e:e4:5e:f0:b2:3b:ab:07:8d:3d:17:2e:59:ef:
0a:36:9f:b0:a1:37:31:10:10:e3:54:5a:a8:a5:2b:
82:d6:e0:aa:7f:09:81:60:12:b4:0a:fd:e9:c5:e6:
dd:b6:d5:f7:81:98:c0:a8:33:17:a5:dd:8e:a4:69:
15:0d:68:a2:31:92:a9:dc:b0:78:c0:3a:f8:9d:6b:
a0:bd:d1:df:27:48:15:42:24:de:56:bb:0a:da:38:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:2F:65:D0:2E:A6:3D:47:1A:02:E2:DA:9B:16:2A:8A:B3:DA:D3
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/Bv0vZdAupj1HGgLi2psWKoqz2tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.199.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b5:75:2a:76:81:3c:1c:5b:56:52:ad:42:8f:16:20:17:e4:
20:7e:d1:9f:9d:93:d5:34:48:21:ac:01:04:c6:b4:5a:cd:ea:
d9:bd:65:b1:24:e9:fd:e4:bc:27:3b:37:ee:72:fe:c3:90:e2:
86:1a:97:d8:52:9e:ac:04:a4:a3:2e:a5:2c:a2:8c:f5:e4:72:
29:90:6d:37:87:f5:b2:56:7c:76:93:da:40:15:b1:f1:b9:48:
38:bb:49:5f:fd:a2:66:a8:ee:28:17:e9:fd:55:9b:39:3d:82:
6a:3e:88:a7:a9:f8:a9:86:7c:44:72:d2:79:6a:50:8e:e9:a9:
bd:5a:ad:9f:b9:36:03:fd:5e:a0:d9:e3:d1:6c:6a:c7:8c:7b:
75:63:93:6a:7b:06:23:3a:e0:21:08:17:5c:e6:aa:36:0f:10:
89:e4:87:09:2e:76:8f:40:c5:a5:be:76:a2:22:86:5c:f8:64:
3d:a4:8d:b8:9c:f4:1e:bb:91:a4:93:80:ba:39:8b:8f:73:55:
5c:48:41:6c:ec:ac:9d:27:fd:91:63:57:a7:07:09:4b:c8:38:
59:71:86:c2:85:86:c4:7a:3c:76:f9:cb:7e:42:26:ed:b5:38:
0f:87:cb:8d:04:e4:a9:94:cf:77:1a:aa:72:ab:1b:dd:bf:ad:
5a:c5:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:49:09 2024 by rpki-client on console-ams.rpki-client.org