Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lyPaOnWuYR6P5_KVmkf-90cMmnY.roa
File: lyPaOnWuYR6P5_KVmkf-90cMmnY.roa (raw, json)
Hash identifier: qdo0YhyJDLyiSax8uaY/30C99hq9XhEjNrfD4Zzfud4=
Subject key identifier: 97:23:DA:3A:75:AE:61:1E:8F:E7:F2:95:9A:47:FE:F7:47:0C:9A:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01926C6A81EFB94C1D2F300B7C2F4AE1EECF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lyPaOnWuYR6P5_KVmkf-90cMmnY.roa
Signing time: Tue 08 Oct 2024 13:56:12 +0000
ROA not before: Tue 08 Oct 2024 13:56:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21840
IP address blocks: 31.57.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:6a:81:ef:b9:4c:1d:2f:30:0b:7c:2f:4a:e1:ee:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 13:56:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9723da3a75ae611e8fe7f2959a47fef7470c9a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:50:fd:5b:8b:a9:87:ec:95:f9:e6:f7:d4:
b8:f1:a2:1d:44:9b:a9:a3:56:24:82:06:46:4e:40:
cf:ea:84:98:b7:3a:06:2b:ba:48:1c:2a:05:06:62:
92:a3:22:f7:40:13:b9:b7:3d:20:e8:9e:c5:d0:29:
89:22:6f:58:2c:6f:e4:e9:71:6a:ff:91:5f:c6:be:
a4:1b:72:3d:ef:cf:59:27:f6:dd:b0:cd:c2:5d:35:
ad:c0:59:0c:9a:5a:44:68:50:be:a2:4b:21:4a:87:
05:53:2f:9f:e5:74:b1:98:0d:09:86:6e:47:e6:44:
23:46:e9:ee:f9:8e:96:30:ff:82:8f:c9:a2:7d:3c:
27:cd:93:88:33:23:20:1f:a7:38:57:ea:d5:f8:77:
63:71:2c:50:ca:fc:8b:d1:81:c0:0a:68:54:48:1a:
40:63:46:76:e0:86:5d:40:89:76:f5:7c:40:6e:28:
f5:a9:6a:56:7d:a5:8f:df:2e:c6:f4:72:b0:34:a8:
34:78:01:f9:8e:1c:34:1c:6e:cf:48:1b:2f:67:08:
7c:83:e4:bd:b2:b8:b1:c3:c5:0c:5c:55:67:37:d5:
0f:d3:b6:0d:d1:60:9b:73:96:25:8c:5a:05:90:e0:
4c:f0:a3:6b:aa:d4:52:e9:b2:10:00:c4:b0:9a:91:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:DA:3A:75:AE:61:1E:8F:E7:F2:95:9A:47:FE:F7:47:0C:9A:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lyPaOnWuYR6P5_KVmkf-90cMmnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.229.0/24
Signature Algorithm: sha256WithRSAEncryption
95:04:3a:6a:be:d0:d8:11:95:b1:3b:bb:67:08:cb:bf:70:bb:
0b:da:6f:d6:3f:9b:6c:07:7d:4f:4f:62:fa:2a:02:61:d3:ba:
07:04:f0:8d:20:78:a1:ac:55:bf:af:aa:0d:0b:d5:77:c6:9c:
1f:14:e0:ee:7c:e4:14:b7:c4:4b:ff:a0:ca:28:97:2f:8a:8f:
3f:e1:b3:50:98:06:41:63:1a:92:e4:0c:1b:16:69:df:2c:b5:
cc:7e:3d:e9:e4:d3:7f:af:f4:69:0b:70:83:6b:99:b6:8f:08:
35:02:5d:58:6a:bc:9f:3f:9c:d2:b4:e3:df:91:12:75:dd:19:
2a:a6:88:ef:4e:29:06:6f:4d:49:08:02:27:f2:2c:72:f6:d3:
3e:82:cb:d0:ac:d3:a7:86:af:6c:1e:f3:4c:7f:bc:90:2f:5e:
3e:f6:85:f4:62:34:a7:ff:eb:f1:3a:fa:99:31:f4:32:81:f7:
58:d0:73:87:6f:f5:a2:48:92:e4:cf:e2:dc:77:6b:6f:b7:91:
77:7d:88:e7:e6:6a:29:df:0e:0c:cd:ea:ff:f7:09:62:9b:58:
30:4a:56:28:3b:9e:12:21:30:58:b2:d0:ab:b2:36:ad:b8:b8:
0d:e9:5a:a1:d1:64:ed:e6:10:e9:28:56:32:5a:d6:ae:e2:76:
ba:cc:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:54 2024 by rpki-client on console-fra.rpki-client.org