Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/y_5qnpAqHZcUuIDW9FDFUIWOKHA.roa
File: y_5qnpAqHZcUuIDW9FDFUIWOKHA.roa (raw, json)
Hash identifier: BpcQ/tUNBiOUGZrkG8Tnwn2c7eFn26F50fHjUGyDu2s=
Subject key identifier: CB:FE:6A:9E:90:2A:1D:97:14:B8:80:D6:F4:50:C5:50:85:8E:28:70
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0192C40CAA1A4C90CEE11398D40172029B7A
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/y_5qnpAqHZcUuIDW9FDFUIWOKHA.roa
Signing time: Fri 25 Oct 2024 14:20:17 +0000
ROA not before: Fri 25 Oct 2024 14:20:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 85.153.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c4:0c:aa:1a:4c:90:ce:e1:13:98:d4:01:72:02:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Oct 25 14:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbfe6a9e902a1d9714b880d6f450c550858e2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:1b:e1:be:7d:e0:56:8d:56:ea:fc:cd:17:
a0:d2:6a:8b:8f:70:81:60:19:03:11:0f:df:90:36:
42:61:72:97:84:7c:c6:35:45:67:ca:04:7a:24:2d:
cc:5c:43:88:cd:b9:82:53:61:03:20:da:13:85:b1:
81:94:2f:9d:62:f8:a4:8f:9e:9c:e9:d3:97:34:2c:
cd:23:45:95:1e:a5:e5:a4:ad:c5:a6:5f:9b:12:23:
a2:44:a2:de:d3:d9:e5:ae:55:39:59:20:b5:61:d1:
c6:ea:be:1c:d5:47:dd:db:07:5b:3f:ae:57:a8:a5:
b6:d5:7b:e2:1d:95:fa:f2:48:85:8e:e4:73:3a:6f:
ce:bb:12:10:27:a6:b6:7f:af:8c:12:a5:49:93:b0:
d1:75:6a:57:9d:45:7a:ce:c0:7b:80:15:be:82:d5:
c0:ac:10:34:32:0d:14:30:ef:6f:37:6e:28:c1:bd:
bd:5c:b1:c9:75:26:cb:2a:b6:80:6f:e2:6a:83:45:
c5:5b:48:27:57:6c:fc:ae:5a:e7:54:c9:f7:b2:8c:
17:9d:56:59:73:9b:ec:0d:e5:5e:51:6d:d1:3c:21:
29:1f:d3:cf:fd:a7:d5:8f:e4:e7:90:72:57:89:95:
b3:58:61:5e:b0:c7:74:3c:31:ff:6a:26:6f:2b:32:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FE:6A:9E:90:2A:1D:97:14:B8:80:D6:F4:50:C5:50:85:8E:28:70
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/y_5qnpAqHZcUuIDW9FDFUIWOKHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ff:bf:a8:09:ad:6c:da:d0:d6:11:71:d3:88:9c:d1:f3:ef:
c9:40:0a:3c:b0:2a:7c:8d:2f:32:73:8b:5f:70:22:c6:8a:00:
3c:d6:e7:4d:93:4d:19:4e:94:cc:30:d8:72:ae:8a:a3:54:3e:
74:8b:7f:32:54:f0:83:d7:2d:06:a0:88:f4:f8:00:8c:fa:3e:
8e:4b:47:ef:56:16:08:87:6b:94:b9:a7:cf:40:78:8f:e8:2e:
7c:35:cb:74:07:3a:a2:ac:3e:c5:32:03:2e:10:0f:a0:0b:b2:
af:fa:e2:6b:67:7a:4d:a6:65:9a:43:a2:95:ea:b2:4f:31:31:
56:1e:06:2a:6b:6b:71:27:e9:cd:df:d4:85:1a:92:b6:79:3c:
bd:b1:ca:2e:80:09:e1:22:51:f2:01:27:94:0a:52:92:6b:d7:
ce:05:33:40:5b:92:6d:da:6c:74:4b:08:95:a1:dc:e0:0e:f5:
73:93:a1:4f:90:ce:6d:da:61:ce:52:ef:93:4b:fc:99:bd:86:
8a:96:6a:df:bb:78:3a:ad:93:84:00:1c:4c:30:8f:20:c8:f4:
88:eb:f3:5a:c6:21:0e:12:1a:44:50:d9:81:2f:77:cf:57:9d:
c2:14:c3:c8:bd:f6:26:5a:99:e4:05:42:8b:67:93:20:bf:2d:
b4:36:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:17:06 2024 by rpki-client on console-ams.rpki-client.org