Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/yRIziGP6HhvzEfcwPUIi7wFuoag.roa
File: yRIziGP6HhvzEfcwPUIi7wFuoag.roa (raw, json)
Hash identifier: 94zPDP4YDDQcf+rnaWv3e2i7w0IFV1U0e+gK8gAgxiY=
Subject key identifier: C9:12:33:88:63:FA:1E:1B:F3:11:F7:30:3D:42:22:EF:01:6E:A1:A8
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 0192499E11263B117B8278D7A703FBE7F7DA
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/yRIziGP6HhvzEfcwPUIi7wFuoag.roa
Signing time: Tue 01 Oct 2024 19:45:48 +0000
ROA not before: Tue 01 Oct 2024 19:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214761
IP address blocks: 195.191.31.0/24 maxlen: 24
2001:67c:1420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:9e:11:26:3b:11:7b:82:78:d7:a7:03:fb:e7:f7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Oct 1 19:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c912338863fa1e1bf311f7303d4222ef016ea1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:d6:0b:c5:4a:e8:be:f3:ad:6f:01:b7:50:
ec:51:22:3b:90:33:5d:96:46:ac:6c:b9:be:c7:0b:
9b:b5:a4:ab:8d:c7:aa:75:58:60:41:05:7e:2e:50:
6b:c1:8d:7b:4b:22:02:04:3d:b6:e5:fb:b8:5d:8a:
63:60:b3:d3:58:44:99:87:76:c7:e0:da:2c:a5:a1:
de:75:46:17:cd:9b:7b:64:bf:d0:18:01:dc:92:1a:
41:76:f4:4c:17:02:6c:84:ff:6a:72:84:2c:49:91:
5f:80:49:27:61:ac:0c:f2:40:11:a8:64:da:93:d1:
6a:52:be:c5:49:84:cb:22:3e:f4:90:0f:af:90:59:
5b:3f:30:db:9b:16:cf:94:49:14:53:f2:7a:27:1a:
09:85:0e:a3:c8:69:68:e0:ca:60:08:23:b8:61:a0:
0a:bc:50:cc:c0:0d:bb:54:8b:37:31:39:bf:64:54:
bc:9c:f3:b5:d0:84:1e:09:cd:20:90:a3:cc:83:8e:
cf:6d:f1:fa:61:a0:e1:e4:a1:ad:e8:b8:f4:6a:24:
a6:dd:73:0c:c6:cf:0f:a1:1d:67:eb:0e:b7:1e:e1:
66:7f:fd:e3:9d:40:9e:6c:43:91:86:87:5d:60:ee:
88:32:03:af:8c:9d:72:82:7c:7a:00:b1:4e:08:8a:
f4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:12:33:88:63:FA:1E:1B:F3:11:F7:30:3D:42:22:EF:01:6E:A1:A8
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/yRIziGP6HhvzEfcwPUIi7wFuoag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.31.0/24
IPv6:
2001:67c:1420::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e5:9f:e4:e8:35:3c:aa:7b:2b:2a:04:f2:1c:51:78:0c:29:
62:5c:a9:03:3b:ba:ae:d9:c1:62:17:d3:07:95:26:84:f7:2f:
36:08:b7:85:57:1c:d5:25:a5:67:97:d8:6d:41:cf:b0:e9:c1:
26:80:49:31:b4:24:85:ee:2f:20:45:d5:25:df:c5:58:33:41:
e8:b7:97:78:f2:4c:41:5a:3a:70:28:f4:c2:0e:5e:20:2d:ee:
df:bf:65:5c:9d:0e:c1:62:a7:41:34:c5:52:1f:5f:2c:0c:2e:
53:08:af:18:49:05:9f:41:27:88:26:77:4d:ce:41:a0:27:86:
9e:1c:e2:c5:70:5c:26:9c:b1:a9:c4:32:fa:83:b0:9e:09:aa:
e2:d3:68:dc:f0:aa:e1:7a:e6:f3:0b:a2:a8:ee:cc:0c:d9:39:
e1:87:19:3b:0e:6f:f4:c9:fc:33:73:90:f1:23:53:af:a6:70:
15:f2:37:69:90:b4:7a:b1:a3:83:84:4b:e6:16:66:b3:2b:c6:
f3:e6:96:6f:32:9b:6a:32:b3:74:19:72:ee:bb:91:09:8e:d2:
2a:e6:68:01:3b:0d:01:d0:36:f0:fe:b2:de:2a:0a:92:d8:b5:
20:fe:2d:5b:d9:29:30:c7:ee:5b:9f:7f:9a:16:5b:f5:ee:63:
f8:84:4f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:25 2024 by rpki-client on console-fra.rpki-client.org