Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/Yx4xe80VPk4Z468rCAzaleNclfI.roa
File: Yx4xe80VPk4Z468rCAzaleNclfI.roa (raw, json)
Hash identifier: cJznuRdnD9+Vk/7pR2Z/hcujuy1O+maGzXqXO8rX2F0=
Subject key identifier: 63:1E:31:7B:CD:15:3E:4E:19:E3:AF:2B:08:0C:DA:95:E3:5C:95:F2
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 018CCA96DD8AFEA529B0E597ACC54C9B5255
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/Yx4xe80VPk4Z468rCAzaleNclfI.roa
Signing time: Tue 02 Jan 2024 14:32:13 +0000
ROA not before: Tue 02 Jan 2024 14:32:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56635
IP address blocks: 31.7.192.0/19 maxlen: 19
45.147.136.0/22 maxlen: 22
2a03:a100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:dd:8a:fe:a5:29:b0:e5:97:ac:c5:4c:9b:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jan 2 14:32:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=631e317bcd153e4e19e3af2b080cda95e35c95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:e9:df:ed:a8:cf:5b:bc:6d:33:49:42:e5:
38:ea:4e:c0:b5:c8:e1:c6:db:5d:54:7d:cc:c7:f7:
94:dd:f2:61:01:9c:a0:c1:1a:6e:9e:9b:7a:eb:1d:
91:d1:ae:ef:f4:65:7c:cd:79:ba:48:31:27:a9:1d:
0a:41:1f:26:5a:2e:77:b4:a1:d3:c4:ab:91:a9:07:
b1:c7:73:5f:72:18:9a:9f:3c:8d:83:29:43:ef:ca:
8f:af:be:d6:30:9c:29:92:f0:c6:5f:84:c5:48:a6:
4b:e6:0d:72:39:6e:41:12:a9:80:a8:75:90:45:55:
bb:09:96:40:ab:f9:e1:2b:b6:07:74:e2:e7:ea:51:
39:3e:fe:d8:b6:6f:8c:6a:8a:be:d5:c5:50:9d:cd:
6f:cd:8f:a0:b0:9a:fc:85:17:5c:e2:0d:79:ad:3b:
89:60:eb:bf:b6:11:90:42:e0:b0:08:cb:0b:7b:63:
e6:6a:ba:27:ff:b7:59:6b:49:b2:31:52:96:16:f5:
59:39:d6:7f:c4:24:e9:51:6e:48:5e:8f:24:c0:36:
54:2a:c6:d3:fd:53:8c:f5:ac:e1:be:de:38:2e:1e:
c5:39:15:f4:64:7f:a5:81:47:93:0c:dc:61:16:f2:
f1:55:dd:d9:81:7b:f5:72:ab:51:aa:61:84:8f:92:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1E:31:7B:CD:15:3E:4E:19:E3:AF:2B:08:0C:DA:95:E3:5C:95:F2
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/Yx4xe80VPk4Z468rCAzaleNclfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.192.0/19
45.147.136.0/22
IPv6:
2a03:a100::/32
Signature Algorithm: sha256WithRSAEncryption
3a:c3:ff:ad:9d:4c:a3:78:95:1f:13:6f:6d:0c:dc:37:ad:ab:
57:fc:1e:52:b6:d7:f2:bd:e9:46:51:26:21:a7:d4:cb:51:f4:
c5:b2:6e:53:9b:73:81:5b:ce:75:e3:79:75:89:b9:91:90:f9:
0d:d9:b3:42:79:57:9f:4d:ba:88:f0:1e:23:f5:fb:12:7e:ae:
f9:51:3a:e4:30:fc:85:c0:95:30:87:39:6b:8b:3a:19:17:81:
d4:83:42:cb:93:8c:04:dd:1c:f3:75:c4:7a:10:d0:a6:8a:d0:
22:f3:d4:af:b4:3f:3c:f1:71:9f:ae:a8:13:b0:c7:31:34:71:
46:6a:5c:85:01:d4:4e:ef:83:72:33:b2:bd:58:3e:0e:6e:7a:
a5:36:66:c8:04:e8:c8:ba:63:5b:7a:7a:39:d9:48:bb:d3:d2:
a7:81:13:47:03:67:c6:7e:b9:51:38:a6:5c:85:61:8d:df:5c:
87:65:cb:9a:df:72:2e:06:e1:5f:15:99:69:17:74:06:9b:21:
e4:16:ae:7b:95:cf:cf:22:5e:65:9d:66:b4:ba:e4:47:41:13:
ad:b9:2a:8e:24:d2:d8:9a:1f:45:ff:67:b9:4f:e8:0a:6a:63:
0b:a5:88:d2:c1:2f:3a:d5:8f:0d:bd:c9:fe:bb:db:81:89:0e:
37:76:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:27 2024 by rpki-client on console-fra.rpki-client.org