Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6ZU5hwPbFTIC8dgE68UQqiFvTY.roa
File: m6ZU5hwPbFTIC8dgE68UQqiFvTY.roa (raw, json)
Hash identifier: brcziJsCwMHYfAjH0d4gtQmlK9DsgsHT+R9ddByxAnQ=
Subject key identifier: 9B:A6:54:E6:1C:0F:6C:54:C8:0B:C7:60:13:AF:14:42:A8:85:BD:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192F615928DE66399A85057BB76B07718C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6ZU5hwPbFTIC8dgE68UQqiFvTY.roa
Signing time: Mon 04 Nov 2024 07:31:01 +0000
ROA not before: Mon 04 Nov 2024 07:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134955
IP address blocks: 31.58.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:15:92:8d:e6:63:99:a8:50:57:bb:76:b0:77:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 4 07:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ba654e61c0f6c54c80bc76013af1442a885bd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:96:8b:0a:db:b1:62:b0:ad:96:27:ec:c6:
c3:c7:ec:bb:43:92:b8:03:d4:33:c5:af:7b:de:40:
84:50:19:02:5a:51:86:84:d1:bc:bc:3e:e6:06:7d:
79:c0:d2:92:97:56:24:05:e7:a9:07:b5:06:6f:8f:
b0:c7:79:86:6a:06:77:4c:2f:2d:4b:09:87:41:9b:
26:eb:04:1b:2e:52:61:43:cf:a4:c1:5f:0f:f9:ba:
72:20:fd:fc:9d:d3:29:8d:b2:68:38:64:16:1b:57:
cc:f7:89:35:c9:b3:41:06:d4:eb:a9:a9:02:20:f9:
b3:d1:71:15:63:06:8c:4f:bb:e4:87:46:5a:ba:23:
bf:28:6d:1e:e0:03:80:6e:ac:4c:f3:87:55:9b:07:
01:af:45:82:19:1d:a1:3f:66:f7:af:c0:11:d3:db:
d8:ca:98:0c:9b:cf:27:77:18:11:ab:9d:f5:54:4b:
40:98:50:f4:86:21:8b:ba:99:29:0b:ee:42:e8:53:
cf:62:6e:24:82:15:ce:26:5e:15:77:fc:2e:5b:d7:
b2:9a:21:61:a7:e8:8b:f0:16:5f:d7:31:45:d1:28:
a4:f5:4c:16:45:44:03:80:9e:12:6e:8e:c0:9b:a8:
94:d5:f0:66:e7:ca:48:89:d0:31:c3:d4:88:4e:06:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:54:E6:1C:0F:6C:54:C8:0B:C7:60:13:AF:14:42:A8:85:BD:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6ZU5hwPbFTIC8dgE68UQqiFvTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.132.0/23
Signature Algorithm: sha256WithRSAEncryption
89:ef:a2:86:59:c8:e7:d5:10:76:64:e0:02:0c:e5:4c:3e:dc:
5d:34:7e:bc:7b:58:69:c6:bb:7e:b6:ae:38:62:48:bf:b1:f5:
52:7e:a7:c9:f4:82:a3:52:bf:2e:2d:ac:9a:e2:5d:37:9f:63:
9f:08:0d:98:24:9b:4f:ba:51:5a:d8:95:41:ea:55:f5:e1:11:
43:42:d8:2b:f0:82:f2:38:c2:f2:eb:dd:4b:5a:54:66:34:e2:
d2:e8:b3:99:03:5d:8e:dd:6a:72:26:56:c4:02:2d:11:8f:76:
03:f9:50:22:6f:90:79:68:34:ac:7c:96:35:18:4f:43:ca:c5:
c4:c3:3c:cf:61:a2:11:7b:40:09:5f:85:7d:d2:af:98:9b:4c:
27:8a:a4:2b:68:0f:0a:0e:19:72:18:06:1d:de:1d:23:7e:14:
8f:6d:73:f9:1f:16:55:f4:5c:1b:ef:79:8b:e1:1c:1c:80:42:
f5:de:55:76:da:76:47:39:62:be:74:a3:b5:ad:a1:0d:49:c5:
d2:3b:62:b4:de:10:b7:fc:34:2f:34:61:c0:b3:c8:f0:c2:18:
dd:45:fb:b5:bb:62:74:6a:3c:ae:36:03:61:c1:9b:75:9f:ba:
84:c1:4c:9e:d9:f8:bc:26:42:1c:c8:34:02:e6:d0:ab:e4:b2:
d5:1c:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org