Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z8VU-TqBCx5TWaTMci4CMvZMNc0.roa
File: Z8VU-TqBCx5TWaTMci4CMvZMNc0.roa (raw, json)
Hash identifier: uYCIc7YBDJbCiQnO/khuAnp2qKDl3SKm3iXwoCf0VdU=
Subject key identifier: 67:C5:54:F9:3A:81:0B:1E:53:59:A4:CC:72:2E:02:32:F6:4C:35:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01916C0046CFD0466C16F9FAC87666E191D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z8VU-TqBCx5TWaTMci4CMvZMNc0.roa
Signing time: Mon 19 Aug 2024 18:57:23 +0000
ROA not before: Mon 19 Aug 2024 18:57:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:00:46:cf:d0:46:6c:16:f9:fa:c8:76:66:e1:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 19 18:57:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c554f93a810b1e5359a4cc722e0232f64c35cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:56:08:75:b3:41:41:f7:d1:45:53:6f:c8:
47:3d:38:91:92:22:70:c5:32:c0:af:9e:d8:66:2e:
cc:2c:01:fb:2e:07:db:ff:d7:87:e3:43:e7:ec:f1:
7f:1c:a7:65:d9:60:51:c9:ff:1f:dd:aa:ee:f9:9b:
f8:a8:d6:d6:c8:35:6a:08:2d:24:7e:9f:a9:ac:e4:
7d:15:8d:e7:ec:43:aa:ab:3e:0f:81:c1:2a:28:1e:
84:be:11:61:04:a7:22:55:a9:ca:f6:74:18:e7:d3:
7f:8b:38:f6:45:d6:41:64:33:45:4c:6e:fe:9a:aa:
86:de:a6:68:23:f9:fb:15:a9:83:d8:b9:10:b6:d3:
3a:d7:dc:07:83:b7:ef:08:ad:b2:ec:5c:54:80:92:
55:59:06:67:f8:e9:13:9d:b4:8b:02:8b:5d:ca:99:
cc:19:be:c4:b4:4a:55:76:4b:c4:a1:d6:4c:51:bc:
b0:0e:2d:a0:ec:9e:14:dc:9e:ba:50:c8:c9:b7:10:
3c:76:34:7c:2f:45:0c:04:64:73:a2:d9:44:ae:af:
1a:aa:57:6b:ce:18:fd:fb:ae:f1:f0:fb:0f:8f:2c:
f0:6f:03:1b:3b:e4:59:ca:fa:ed:d2:30:42:93:18:
c3:72:21:5c:32:77:36:b6:ba:31:0e:ce:6e:6b:ae:
a0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:54:F9:3A:81:0B:1E:53:59:A4:CC:72:2E:02:32:F6:4C:35:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z8VU-TqBCx5TWaTMci4CMvZMNc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f2:f5:0b:89:d1:2b:b0:8c:10:a0:d0:53:10:09:0b:e8:ff:
47:8e:e1:f4:aa:f7:22:c1:e4:8b:89:8f:fb:67:6e:3b:fc:da:
4f:0c:31:d7:76:72:53:5c:89:e5:49:86:75:47:7c:1e:f2:e5:
fe:81:8b:35:95:c5:fd:7e:b7:df:ad:07:b0:16:cd:37:3f:4d:
d9:20:75:01:9d:5d:b8:82:71:9c:8f:13:b0:4a:b6:f0:a5:70:
b0:9f:bc:f1:93:b9:9a:ee:07:03:52:1e:da:a7:f0:fa:f6:2f:
c4:4e:24:41:ba:ed:e8:d3:ed:9b:7e:92:a2:e4:55:34:1c:f8:
5e:71:08:b1:f5:09:ce:4c:bd:96:0c:44:68:a9:1e:41:fc:6b:
2b:46:38:ed:e6:c6:1f:3f:ae:0d:5b:04:74:fe:28:13:ed:f4:
0e:7a:b2:11:22:35:13:03:1c:f7:71:d7:5c:69:ee:0f:b3:65:
57:a5:79:7c:64:cb:ca:19:97:87:82:5c:39:50:74:e3:c1:de:
79:6d:9b:f5:8b:ca:b7:21:76:9f:9d:e4:bb:41:75:af:b4:45:
5f:7f:ed:03:c0:dd:94:0a:74:e1:45:4a:e7:0b:b9:0c:d5:1b:
67:f8:be:a5:5c:9b:a5:ea:2d:d7:4a:90:1f:f0:8b:31:20:0d:
20:00:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org