Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7wvZ3U9Uj5Ey6LqmdUIC-mYG6OY.roa
File: 7wvZ3U9Uj5Ey6LqmdUIC-mYG6OY.roa (raw, json)
Hash identifier: 8lSoZq6i1IJzJwDvXEHAXHZ+YGnJqOZROP95rjVf38Q=
Subject key identifier: EF:0B:D9:DD:4F:54:8F:91:32:E8:BA:A6:75:42:02:FA:66:06:E8:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192CD90E0EFC2C194AB73B528B558DA6E9F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7wvZ3U9Uj5Ey6LqmdUIC-mYG6OY.roa
Signing time: Sun 27 Oct 2024 10:41:17 +0000
ROA not before: Sun 27 Oct 2024 10:41:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204044
IP address blocks: 31.59.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:90:e0:ef:c2:c1:94:ab:73:b5:28:b5:58:da:6e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 10:41:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef0bd9dd4f548f9132e8baa6754202fa6606e8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:e9:45:ca:59:41:e5:9d:83:ec:51:97:9a:
e9:7a:fb:73:d0:c3:b9:ad:11:77:e2:97:1f:a9:d9:
64:6f:b9:96:8b:3a:98:bf:e1:ff:42:fb:44:e3:9d:
c7:53:f8:7d:28:26:d3:24:f4:25:58:3d:ee:38:e9:
6c:3f:7c:e4:a3:e1:90:46:cb:4c:0e:29:ff:aa:3a:
b6:34:ff:28:ab:27:5e:df:1a:8e:96:92:77:8f:e9:
f7:c7:5a:31:20:7a:ab:fe:cb:4d:d4:48:8f:2f:c9:
f7:e8:8c:1f:ac:68:bf:e1:c0:07:9c:44:4f:4e:8f:
6b:55:ae:6a:74:37:83:1b:39:b5:64:54:d4:fb:63:
00:13:b1:6e:10:b4:26:8d:8f:8d:87:e3:d7:16:83:
49:b1:ff:9b:fb:bd:98:a7:d8:fb:84:82:bc:74:3e:
04:bd:ba:75:6a:21:f7:ce:aa:42:71:57:0d:94:78:
86:f9:c1:b6:50:ef:90:de:68:5e:37:06:42:3f:6a:
96:20:21:7d:cf:85:2a:00:4c:0d:29:cf:41:fc:fe:
47:04:bd:6a:a7:32:be:44:ba:2a:35:c9:5b:d9:13:
51:e8:49:4e:98:89:55:93:8a:6d:32:b5:a1:2f:a5:
34:df:e2:a8:00:22:22:bb:9a:5a:6d:9e:15:ab:e6:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:D9:DD:4F:54:8F:91:32:E8:BA:A6:75:42:02:FA:66:06:E8:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7wvZ3U9Uj5Ey6LqmdUIC-mYG6OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ed:63:fb:46:8c:cb:8d:f8:c1:09:2f:3d:bb:6a:e8:b4:78:
7c:a9:47:d8:c1:a1:b5:b0:5f:7d:1c:33:e8:00:4d:57:36:6e:
91:69:75:0e:ff:33:5a:49:30:fb:be:a5:30:50:57:5f:2b:b4:
21:e4:dd:f3:4b:91:52:88:68:d4:bc:72:79:4c:d9:e2:a8:8b:
20:52:0d:8c:e0:c9:95:3d:68:d4:2c:79:e6:de:6e:d0:5c:72:
85:19:d7:66:55:33:b0:6e:b8:e8:18:a7:b6:f8:3e:cf:4c:9a:
f4:39:a3:07:8d:e0:5f:48:67:07:42:02:ff:37:2c:d3:09:0f:
a4:b5:02:03:1b:7e:52:4e:de:50:f3:e4:3e:cb:17:ce:5e:55:
a1:f3:c4:70:59:d0:1e:80:9d:d7:ce:13:a2:09:a8:57:ec:b5:
fe:fd:1b:ad:56:11:00:2d:00:85:9a:2d:7c:3b:2a:35:83:6e:
ca:e9:71:99:44:eb:7c:ac:d2:9d:31:b1:58:26:b7:45:6b:31:
65:3b:36:42:37:4d:99:50:38:8f:8b:09:1c:d2:b6:83:60:db:
92:33:e9:57:bb:83:a5:f6:80:9b:fd:c7:1a:c8:19:08:d3:b6:
3f:d8:ae:4e:e9:38:a0:d8:6e:3c:75:dc:75:4e:86:3c:56:4f:
33:db:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org