Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x15ektB2r3IBpF9sFaA3UoAyjcw.roa
File: x15ektB2r3IBpF9sFaA3UoAyjcw.roa (raw, json)
Hash identifier: 0dKoeiw56bm58DUPvO22tVNK/4HqlXZ6t9F+u2YYKRk=
Subject key identifier: C7:5E:5E:92:D0:76:AF:72:01:A4:5F:6C:15:A0:37:52:80:32:8D:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01910F8D9CFBA05CD85FFB1AEBEE6A5E9780
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x15ektB2r3IBpF9sFaA3UoAyjcw.roa
Signing time: Thu 01 Aug 2024 20:07:04 +0000
ROA not before: Thu 01 Aug 2024 20:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400810
IP address blocks: 31.56.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:8d:9c:fb:a0:5c:d8:5f:fb:1a:eb:ee:6a:5e:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 1 20:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c75e5e92d076af7201a45f6c15a0375280328dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:0b:74:4b:68:b0:76:da:f9:8a:72:fe:89:
a3:3a:99:a4:e4:28:d3:01:67:b8:ce:f4:f9:ac:65:
8e:61:56:4e:dd:05:82:1f:77:ef:25:ef:13:c6:13:
9b:ad:7d:8d:00:40:55:e3:82:5d:ce:58:3d:b5:ae:
f1:46:a6:b1:0e:1d:bc:57:d6:21:d6:ac:c5:1f:b8:
99:fb:71:da:2c:5e:f5:3d:16:eb:27:ae:36:3d:12:
ae:16:18:49:45:45:63:bf:83:d2:7d:80:25:b0:1d:
97:8b:7f:56:11:2d:82:6f:ce:41:a5:39:8e:f2:0c:
ff:c1:b7:e1:75:55:ad:05:43:16:56:ed:8a:29:0e:
80:ff:1f:bb:10:25:01:9e:75:99:35:e9:dd:fb:af:
c7:89:d6:fe:da:0f:dc:49:a4:59:39:29:19:64:c9:
9d:3d:84:e8:8c:98:7a:50:86:e8:ab:b8:41:80:51:
2e:38:fb:4c:b2:38:24:4c:17:35:0c:be:ee:f9:08:
a3:9c:c1:81:1d:8a:ee:48:68:66:55:2f:50:75:22:
2b:f5:aa:b7:ba:e4:81:d2:70:a1:0a:13:54:44:af:
b4:a8:01:d6:63:55:90:38:ba:57:9c:98:e2:7e:cd:
86:d3:55:62:68:be:81:e3:27:b2:f6:5f:83:47:3f:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:5E:92:D0:76:AF:72:01:A4:5F:6C:15:A0:37:52:80:32:8D:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x15ektB2r3IBpF9sFaA3UoAyjcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.20.0/23
Signature Algorithm: sha256WithRSAEncryption
61:76:0a:c7:d6:e0:0c:6b:a9:d9:dc:b6:50:58:0b:8e:cf:50:
cd:80:cd:36:98:da:43:fe:83:b5:0a:fe:a3:28:e9:2a:20:cf:
b6:21:48:b5:37:f9:ce:59:0a:aa:a2:90:2e:5d:93:aa:2e:15:
32:9c:5a:a6:61:8d:f6:da:2b:cd:13:89:db:48:10:fc:76:68:
97:e2:f0:4e:7b:5f:31:90:95:6b:0d:98:cf:7d:7d:53:09:74:
14:98:d8:52:23:fc:c9:43:1f:59:33:38:af:25:76:30:a2:d1:
d2:dd:fd:6d:16:2a:45:d2:10:7d:ee:46:65:58:13:46:bd:27:
40:77:93:28:67:e4:6c:a9:65:97:b4:db:41:21:97:9e:34:5a:
36:ac:08:ba:42:a2:ca:b3:7c:df:c9:93:b3:dc:01:b3:1e:b2:
00:b5:0d:f2:d5:65:35:e6:b8:ba:14:17:8c:05:74:b9:9d:26:
3e:50:72:fd:3d:7b:6b:62:89:46:b3:15:87:38:b4:36:52:13:
86:07:70:07:fc:01:eb:5a:17:14:5f:31:5b:9c:84:4c:69:ec:
94:3d:d4:c5:88:48:44:5f:6f:3b:bf:82:80:6d:f3:88:c1:84:
93:24:f1:78:d8:c8:ff:df:3c:79:15:68:36:32:67:60:74:7b:
c8:2e:99:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org