Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0LSood83q_qIFavJ5wqO-vfAL2Y.roa
File: 0LSood83q_qIFavJ5wqO-vfAL2Y.roa (raw, json)
Hash identifier: w8V64CQMWKS9lfMHAf7ganb6s4Lj9nHB2BYIabVZ86k=
Subject key identifier: D0:B4:A8:A1:DF:37:AB:FA:88:15:AB:C9:E7:0A:8E:FA:F7:C0:2F:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192CD555F8947A5AE08ADCEF27609D198B1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0LSood83q_qIFavJ5wqO-vfAL2Y.roa
Signing time: Sun 27 Oct 2024 09:36:17 +0000
ROA not before: Sun 27 Oct 2024 09:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53616
IP address blocks: 31.59.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:55:5f:89:47:a5:ae:08:ad:ce:f2:76:09:d1:98:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 09:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0b4a8a1df37abfa8815abc9e70a8efaf7c02f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:67:63:24:07:7d:19:90:a7:b3:d7:5e:d7:
0f:3a:2d:94:40:f0:98:a0:05:50:d1:66:6d:74:1c:
f1:c5:72:c1:9f:76:95:6a:54:b1:08:26:72:71:27:
bd:86:be:53:38:58:b8:48:b2:68:37:c3:70:14:83:
00:92:9c:16:a5:90:fa:b1:c9:8c:93:11:d2:1f:df:
a9:30:2e:c0:33:28:9b:6c:e6:51:ca:f5:56:75:10:
40:64:93:7a:21:bf:0b:83:93:bd:79:ea:41:c7:a0:
9d:cb:d0:d5:d0:31:d2:ba:b5:34:bd:03:bc:0d:1a:
c4:da:9d:71:6c:2e:a8:0c:42:7f:51:88:61:12:5d:
64:79:fe:6e:ef:94:23:50:b8:1b:cf:b6:22:1c:7c:
0a:40:e9:0c:c7:2f:5a:06:f7:cf:2a:7d:86:16:82:
c1:94:22:b6:92:65:bb:6b:5c:7e:e4:22:ea:85:3a:
0a:f5:dd:b0:f0:2d:b5:68:7d:1f:7e:b7:53:cc:0b:
48:06:6c:fd:a9:7e:a6:56:67:49:08:2c:f1:01:4f:
65:7f:31:17:93:4a:dd:49:aa:a9:30:62:49:84:42:
6a:1e:1d:02:3f:8d:3c:2a:65:61:d5:5f:7e:02:aa:
75:2e:ea:32:e6:be:c8:ed:a5:13:01:5b:4f:e8:0c:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:A8:A1:DF:37:AB:FA:88:15:AB:C9:E7:0A:8E:FA:F7:C0:2F:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0LSood83q_qIFavJ5wqO-vfAL2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.70.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cb:b3:ca:62:dc:3b:1e:ac:f2:d7:48:2c:3f:2d:22:35:f4:
49:57:b2:1d:64:3e:b4:54:1d:56:c3:44:00:18:a2:96:0f:a9:
de:fe:e2:04:b1:54:61:d3:23:f6:fd:94:69:12:bd:bd:51:41:
1f:3d:bb:43:2c:41:0a:5f:49:f2:af:91:9a:22:fe:aa:4a:ac:
67:34:96:83:54:f4:f3:a0:03:5a:92:0f:ad:e5:86:07:74:0c:
a1:d9:18:e7:24:02:0d:33:52:4e:97:71:e8:bc:5a:d0:96:78:
e2:21:40:4a:f6:95:7d:ce:b0:a9:d0:af:48:c4:ec:ef:4d:66:
97:fe:31:52:4e:e4:f9:dd:01:c3:c7:58:f4:23:bc:d4:1b:46:
89:2e:2a:9d:b7:f0:6c:09:3f:20:23:02:b1:2b:2e:47:a9:f6:
a5:7a:e3:94:88:7a:e6:f9:32:b5:f3:48:33:d9:55:87:2c:0c:
e6:dd:72:cc:a1:48:ac:b0:25:d8:62:4b:43:ca:e9:97:52:1c:
9f:9f:80:1d:2d:8c:dc:ef:73:31:21:73:b0:19:eb:f5:47:b8:
d9:28:90:11:58:47:32:28:82:33:ef:6b:54:d6:b2:08:53:02:
1a:42:76:23:c9:37:26:b2:06:de:cf:74:67:22:e4:a9:dd:9d:
cd:3a:db:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org