Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YKp6TL_Aj1sWvoYF9LNjq47uj8k.roa
File: YKp6TL_Aj1sWvoYF9LNjq47uj8k.roa (raw, json)
Hash identifier: xt4W/QEgPePvSTmHd8p/+lbWRJwSvnOFVYsO5YKTkhc=
Subject key identifier: 60:AA:7A:4C:BF:C0:8F:5B:16:BE:86:05:F4:B3:63:AB:8E:EE:8F:C9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428235F8D9CA659EDC37729FFA839440B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YKp6TL_Aj1sWvoYF9LNjq47uj8k.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203462
IP address blocks: 31.59.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5f:8d:9c:a6:59:ed:c3:77:29:ff:a8:39:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60aa7a4cbfc08f5b16be8605f4b363ab8eee8fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:c6:f9:28:be:ab:b4:5a:f9:ed:e6:a0:7b:
87:eb:b5:4c:4e:76:1b:4d:2f:da:27:53:d4:58:65:
29:28:96:67:92:dd:dd:50:f3:2b:0c:3f:23:ac:fc:
de:04:a4:d7:d7:42:55:40:ea:59:b1:f5:5c:03:28:
d6:b8:f2:54:41:1b:53:b0:b3:b3:10:4f:da:4c:f9:
8a:2b:79:e2:61:1f:5e:1f:60:95:16:50:b0:b8:de:
03:0e:17:26:9f:9a:21:93:57:63:3b:4c:5f:07:8a:
53:3c:89:0f:c6:2d:20:ac:48:19:b2:82:aa:f7:03:
b2:e8:e5:f7:d7:73:0d:c2:f7:b8:21:62:68:c8:d5:
94:8e:52:9b:bc:95:6c:78:1b:2f:e5:15:bd:82:0f:
9a:48:58:d4:1d:8e:8b:85:ae:cf:72:b1:2a:e9:09:
af:39:64:f7:ef:5f:76:b6:61:3d:26:f9:88:8c:bb:
60:4a:73:d4:b7:22:1b:06:1b:59:57:13:85:78:ed:
a6:56:74:11:3f:4a:f2:5f:fe:48:c6:66:21:0e:0a:
6c:80:9f:0c:1b:8e:e0:56:2e:97:ad:30:37:46:f1:
f7:e1:8d:cb:13:9f:ea:b4:c6:57:2c:e8:cf:d1:fd:
89:1f:cc:5b:80:a6:58:3a:45:60:9c:28:30:06:3e:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AA:7A:4C:BF:C0:8F:5B:16:BE:86:05:F4:B3:63:AB:8E:EE:8F:C9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YKp6TL_Aj1sWvoYF9LNjq47uj8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:da:85:24:e9:70:f1:1b:7c:57:4a:58:d1:50:07:20:79:82:
82:ab:64:cf:49:5b:21:c7:2e:42:58:b0:35:db:50:1b:13:11:
97:58:c3:57:11:32:9e:72:ea:6a:bd:72:9b:ba:90:68:3c:94:
be:f4:0c:1d:6e:cd:6a:44:c3:e8:92:14:a8:cf:e5:39:7b:34:
41:ce:71:bd:6f:a5:07:65:67:d9:84:1f:34:e1:26:6f:a8:1c:
56:44:20:96:b7:17:34:81:29:5b:3f:3f:f3:2a:a9:37:de:24:
bc:ea:22:37:e5:d7:20:ae:4c:63:c1:04:34:01:2f:21:9c:c4:
1c:e6:15:31:50:6f:a9:c5:92:39:bb:13:0d:f2:b9:a8:1c:b7:
71:2e:5f:2e:48:9f:a2:24:60:64:6d:d8:f0:b3:7c:9b:15:c4:
b9:a6:2e:f5:cd:ec:00:4b:f3:a3:30:8e:d7:4b:34:3e:bf:d8:
d1:e1:40:2d:aa:52:b4:97:ef:8b:d3:be:9e:9c:36:30:7c:51:
44:c0:e4:81:ce:17:4e:ae:1d:58:fb:ce:58:7d:f0:1c:b3:28:
f4:83:f2:47:ff:51:b1:9b:c8:97:da:11:43:13:9c:56:7e:e3:
d3:b1:a3:3d:f4:9a:f3:48:bb:98:60:f5:b5:35:e3:99:5d:b2:
d8:3d:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:04:58 2025 by rpki-client