Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i9OjomycBAQiglmcP_dLasoTmqg.roa
File: i9OjomycBAQiglmcP_dLasoTmqg.roa (raw, json)
Hash identifier: 4KHIL4LLgEV7TnKUc5e/v4Y0f4GeHEGLzFVQfrCTns4=
Subject key identifier: 8B:D3:A3:A2:6C:9C:04:04:22:82:59:9C:3F:F7:4B:6A:CA:13:9A:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191F05B6C2774D3B8EE6DCE8A7B633EF51A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i9OjomycBAQiglmcP_dLasoTmqg.roa
Signing time: Sat 14 Sep 2024 11:46:48 +0000
ROA not before: Sat 14 Sep 2024 11:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216425
IP address blocks: 31.56.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f0:5b:6c:27:74:d3:b8:ee:6d:ce:8a:7b:63:3e:f5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 14 11:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bd3a3a26c9c04042282599c3ff74b6aca139aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:04:70:6d:2f:d9:4e:e8:34:a8:4b:0b:2b:
0a:c2:3c:38:ae:6c:27:0b:5a:b4:30:62:fe:6e:91:
80:39:c0:08:f2:f7:18:31:46:1e:77:5a:1e:29:bc:
45:c4:06:92:13:26:df:6e:85:c3:be:6c:98:75:7a:
cc:4d:cc:63:19:e3:3f:67:82:47:64:ec:34:8b:4e:
df:7c:3e:c9:45:c1:69:ef:be:40:e7:57:05:df:86:
29:2d:18:aa:4a:0e:07:0f:80:df:fe:7d:96:0b:54:
cc:1e:dc:b5:62:31:88:71:ae:40:c4:dd:de:0c:97:
6e:85:b0:de:7d:22:f1:1f:bc:b3:87:f2:9b:54:30:
7e:0e:bc:eb:b0:30:bb:1b:84:bf:df:92:bd:d7:8d:
20:c3:0f:9f:08:57:88:0d:b1:c1:80:d3:49:73:23:
91:04:ea:a5:ab:78:1c:fe:bc:34:25:ca:52:67:08:
af:29:4a:5f:18:90:0b:83:2e:71:b9:2d:f5:15:bc:
b9:e1:6c:2c:27:39:f9:1c:20:f7:95:6f:fe:f3:36:
2d:28:48:30:07:cc:c5:fa:cb:2e:f7:11:8f:77:af:
b7:14:60:f5:ba:02:07:22:65:72:c3:5e:04:2a:00:
be:cb:22:2d:a5:96:88:95:2b:75:3c:12:ad:fa:05:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:A3:A2:6C:9C:04:04:22:82:59:9C:3F:F7:4B:6A:CA:13:9A:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i9OjomycBAQiglmcP_dLasoTmqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:57:de:c5:34:8d:ef:8e:1e:a9:21:4e:27:dc:a4:d6:13:ea:
8c:35:c0:82:12:29:64:08:89:82:34:0c:cd:2b:d1:06:62:9e:
b6:7e:38:18:99:2f:36:5f:25:0d:cb:5f:47:56:7b:90:f9:2c:
a1:1e:27:19:55:f8:0a:cf:bc:a9:c3:a8:ed:1a:a2:88:01:e9:
2c:69:9e:c4:d3:0c:5b:85:55:99:9a:bf:32:e4:5e:1b:83:9b:
3b:d3:b6:06:92:0e:19:bc:36:f5:d2:9e:b0:f8:49:f0:af:21:
79:f8:7e:19:41:77:f1:a3:f9:ca:44:10:c4:f8:0b:21:dd:c7:
cb:dd:78:c6:7e:cc:0a:03:4f:9b:9a:3a:15:79:77:52:f2:d2:
d4:d1:e3:29:39:f3:0b:f0:d1:c6:34:00:94:24:5e:04:16:42:
f9:9b:29:25:56:fd:5a:bc:05:d2:1a:17:ca:e5:4f:9b:07:64:
2e:fe:bd:2c:e0:da:4a:0b:96:91:d9:dd:f3:c6:d9:f0:b9:f9:
7c:dd:e3:83:45:67:56:cd:c2:2e:90:98:2d:93:d0:cf:cb:f4:
53:98:d5:06:4d:94:24:44:47:68:52:08:65:d1:e7:84:96:24:
2d:63:b1:6e:16:ec:8c:8a:03:fa:4e:09:ec:0c:5d:6d:4b:98:
99:77:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:19 2024 by rpki-client on console-fra.rpki-client.org