Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/YhkOnqRvLrzX5UJmI8dD_0YE1X4.roa
File: YhkOnqRvLrzX5UJmI8dD_0YE1X4.roa (raw, json)
Hash identifier: 7/RDzcmO1u3qEguY4vDQxIPU0+psovzgJ3GTZCHfGfE=
Subject key identifier: 62:19:0E:9E:A4:6F:2E:BC:D7:E5:42:66:23:C7:43:FF:46:04:D5:7E
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 018CC8DE2E26367EE2451ADF478B7A6CA758
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/YhkOnqRvLrzX5UJmI8dD_0YE1X4.roa
Signing time: Tue 02 Jan 2024 06:30:53 +0000
ROA not before: Tue 02 Jan 2024 06:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198392
IP address blocks: 31.217.227.0/24 maxlen: 24
31.217.230.0/24 maxlen: 24
31.217.229.0/24 maxlen: 24
31.217.228.0/24 maxlen: 24
31.217.231.0/24 maxlen: 24
31.217.226.0/24 maxlen: 24
31.217.225.0/24 maxlen: 24
31.217.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2e:26:36:7e:e2:45:1a:df:47:8b:7a:6c:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62190e9ea46f2ebcd7e5426623c743ff4604d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:f6:1b:2f:6e:56:3f:6a:ce:d7:48:bf:e1:
6e:6e:14:f1:47:21:d0:a0:db:cf:5d:b8:d4:12:ea:
eb:01:49:75:15:80:92:21:aa:e2:32:7d:48:e9:5e:
ea:e5:e9:02:81:15:5f:12:e7:a6:77:51:3d:ae:fd:
38:c3:28:a9:e4:95:d0:37:99:db:86:64:dd:3b:46:
c8:1b:96:8e:4b:67:f8:15:87:c0:7b:98:3e:2f:86:
fc:66:da:c7:ab:99:c7:cb:9d:36:f0:69:bc:c4:6f:
97:15:67:3a:97:56:e4:9e:ab:2a:8a:de:fd:86:6c:
5e:5f:3f:07:91:81:0e:cc:1f:c6:7d:01:77:67:3c:
31:22:5e:14:69:6b:5a:71:34:96:0e:d2:78:f3:5c:
e6:c8:e3:60:d1:58:55:b1:97:e0:25:04:2b:0f:1a:
0f:c3:78:64:54:a6:90:fe:ca:ce:50:05:f1:26:ca:
b9:45:bb:66:60:b1:06:3c:36:b4:13:28:81:bc:e9:
c5:0b:43:ee:a4:a8:b0:d5:7a:4b:f5:77:06:c5:22:
4d:be:59:8c:dd:73:92:28:30:f4:de:22:a0:a7:f5:
de:25:c5:82:de:ff:f6:3e:76:a1:65:97:b2:2f:79:
95:f1:08:42:bc:da:b4:06:10:7a:06:80:10:75:7c:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:19:0E:9E:A4:6F:2E:BC:D7:E5:42:66:23:C7:43:FF:46:04:D5:7E
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/YhkOnqRvLrzX5UJmI8dD_0YE1X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.224.0/21
Signature Algorithm: sha256WithRSAEncryption
30:77:09:d3:c6:c8:a7:65:78:ad:aa:22:b9:c8:f2:1a:51:78:
47:75:ee:13:8a:d0:19:ff:61:cd:7d:b5:d8:48:49:58:de:62:
fb:71:d5:c2:46:73:96:91:7d:90:80:6a:21:b9:84:5b:60:b4:
33:1d:2d:00:97:73:7c:d6:26:4a:94:3c:98:4a:85:aa:57:e0:
1b:d3:f7:7c:bd:97:78:26:fc:18:eb:f0:dc:1a:bb:f8:7b:57:
cf:3e:dd:78:e3:30:49:20:c3:ae:25:95:29:8f:67:85:71:9f:
b4:3e:3a:ad:15:10:d3:d1:c5:29:77:78:6f:fb:89:dc:b0:38:
97:d9:89:97:ef:f0:94:38:30:fe:b0:c1:48:28:fe:d5:e4:1e:
75:aa:3d:b6:b5:42:0f:18:7e:b7:4f:8c:69:a9:94:02:fc:7f:
eb:99:30:8a:76:8c:a3:2d:02:5a:5f:14:04:2f:fe:0d:0b:61:
85:ce:d6:48:31:79:43:13:69:13:d9:70:64:a7:9b:33:9e:ed:
ef:f7:f0:6b:7c:86:11:87:42:94:a0:7c:ac:1f:0b:75:05:71:
70:78:5e:88:f2:9a:6c:41:fc:f7:d4:9d:f2:1a:a0:d6:e9:9c:
4e:21:e3:bb:9a:b4:f9:8b:4f:f5:f0:35:9d:b4:71:91:82:3c:
0a:1a:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:38:04 2024 by rpki-client on console-ams.rpki-client.org