Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aIOgq7dPx1KkGBDIN38WDCLjfqk.roa
File: aIOgq7dPx1KkGBDIN38WDCLjfqk.roa (raw, json)
Hash identifier: PpJfUKZnkdFDbzGXQ3sfPijlB4yUPw7SCw1vK41sTK0=
Subject key identifier: 68:83:A0:AB:B7:4F:C7:52:A4:18:10:C8:37:7F:16:0C:22:E3:7E:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191278A0E52ECDD65F661F42BD92DCE2962
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aIOgq7dPx1KkGBDIN38WDCLjfqk.roa
Signing time: Tue 06 Aug 2024 11:54:04 +0000
ROA not before: Tue 06 Aug 2024 11:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200456
IP address blocks: 31.56.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:8a:0e:52:ec:dd:65:f6:61:f4:2b:d9:2d:ce:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 6 11:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6883a0abb74fc752a41810c8377f160c22e37ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:a7:7a:b4:9a:69:f0:d7:7c:b0:be:e7:cb:
b9:5c:25:10:e1:77:90:79:f6:16:1a:06:63:53:40:
19:5e:b9:16:46:98:8c:6d:b8:f0:e8:a8:cf:58:dd:
ac:68:30:5a:68:c4:c5:a1:6a:41:ee:35:1a:a1:c6:
90:0a:1b:ab:6b:53:40:20:b6:2d:4b:78:37:7a:02:
c8:22:71:04:d4:b2:44:6e:3b:d6:ca:a5:6a:95:05:
18:55:8e:57:54:24:42:d6:ba:d9:5c:22:6f:04:b1:
be:f7:ae:21:7e:e4:74:f7:31:90:70:2a:77:07:f5:
9d:8f:b0:d8:e0:0e:0c:1f:72:84:40:ee:43:e0:8a:
ec:df:bb:a8:8e:fb:9f:51:40:07:b5:06:fd:76:71:
68:07:bf:99:1f:a2:71:26:be:7f:d8:dd:33:bb:b9:
57:c4:12:73:79:08:e4:b9:d8:b0:9c:06:59:27:7c:
ca:95:bf:f1:fc:26:3b:83:80:39:08:10:b5:5f:bf:
e1:41:44:81:fa:f7:2d:66:00:3e:01:f9:1f:61:74:
2e:8b:2a:f8:ff:34:00:4a:5d:0e:70:75:f7:4d:8f:
8e:ad:2f:10:ee:f2:63:52:0c:b9:9b:af:44:61:2b:
7a:ac:ab:fa:46:e3:ca:16:2f:df:12:b5:42:a4:9e:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:A0:AB:B7:4F:C7:52:A4:18:10:C8:37:7F:16:0C:22:E3:7E:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aIOgq7dPx1KkGBDIN38WDCLjfqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ad:a8:90:b8:d7:83:13:cd:67:72:a7:67:3e:14:9f:ff:06:
24:72:7f:07:28:fb:96:a1:f5:1d:f3:a6:7e:67:f5:c9:8b:70:
ce:e5:2d:22:df:e0:0d:ca:fc:ed:f5:2d:be:13:1d:a5:43:3c:
83:52:43:38:4a:69:2d:d4:6e:93:9d:6a:56:82:25:32:bb:d6:
0e:fe:25:1e:fc:9b:ad:d0:9f:6a:3d:3b:18:72:fa:03:db:6b:
0e:70:fd:13:86:f9:56:7c:dd:e2:c2:60:58:d6:8f:28:76:1b:
89:c6:5d:0e:bf:78:07:21:8a:32:75:7e:2f:0d:f1:bf:3d:f6:
96:df:db:66:74:7f:ea:61:4a:90:70:21:a5:a2:35:d4:b9:f1:
78:89:36:43:7b:c1:34:21:50:f6:a8:4a:6c:9e:66:e8:32:51:
b5:dd:4d:62:e1:d2:ec:4b:79:26:70:c0:b3:b2:28:9c:3b:6a:
c2:bc:a6:e7:fe:a5:8b:5b:2b:7a:6e:88:91:ae:54:1c:88:74:
25:17:1f:30:40:f8:77:04:6c:2f:2c:d9:ef:b1:88:45:ae:8a:
6d:90:13:da:db:8e:29:5f:e6:e2:8b:18:b9:8d:d4:19:24:42:
a7:a8:51:74:b7:ba:9a:08:a4:b2:b8:7b:be:73:80:66:06:24:
42:68:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org