Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/zjtbYhfEbYsSke790LsPpN95FHo.roa
File: zjtbYhfEbYsSke790LsPpN95FHo.roa (raw, json)
Hash identifier: x8XjW0xnG0dkcMaC5MsnBOZ0NIweNouNONQmf442Ur4=
Subject key identifier: CE:3B:5B:62:17:C4:6D:8B:12:91:EE:FD:D0:BB:0F:A4:DF:79:14:7A
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 018CC94BE5E5CAB711AE8F5EC974A27372B4
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/zjtbYhfEbYsSke790LsPpN95FHo.roa
Signing time: Tue 02 Jan 2024 08:30:43 +0000
ROA not before: Tue 02 Jan 2024 08:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44996
IP address blocks: 31.42.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e5:e5:ca:b7:11:ae:8f:5e:c9:74:a2:73:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 08:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce3b5b6217c46d8b1291eefdd0bb0fa4df79147a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:04:6c:eb:e3:91:74:40:6c:b4:3f:cc:b0:dc:
02:d4:9e:82:df:e3:8d:8c:27:ff:4b:73:07:d1:50:
a9:9e:5c:c3:bb:ab:c2:00:01:26:6b:5e:28:cf:4f:
b3:62:c4:32:68:b6:5c:b2:76:cb:9d:e6:fc:5c:7e:
7c:1c:ea:17:a1:3b:3f:34:90:8f:9d:45:8c:e9:0a:
71:45:91:6c:d3:67:62:b5:dd:0a:a7:d5:a1:7f:bf:
8e:ff:00:83:c5:0f:73:1a:8b:5b:12:fb:37:cc:37:
2d:eb:42:af:0e:bf:32:50:3c:54:f8:5c:00:0c:7d:
a0:1b:ed:57:a9:ad:d5:88:7a:2e:a9:7b:42:91:f1:
ad:e9:59:3c:a5:25:6e:5a:d4:3c:9e:d7:15:82:6e:
7b:b9:62:62:14:bd:26:3d:6c:c3:35:87:fc:41:f4:
d7:d2:cd:47:28:c8:e6:8e:ad:e6:62:81:01:36:90:
7e:88:d4:a0:8c:18:86:c4:62:ee:ed:3a:9a:3b:23:
f8:a3:ce:5c:ba:5f:5b:3d:0d:24:6b:3c:9f:63:8b:
f5:67:b2:f4:10:ec:43:aa:f9:68:06:fb:f0:10:3e:
1a:ce:e2:3f:33:d0:04:d2:a7:54:d2:da:72:98:f0:
f3:08:de:b6:cc:27:fc:b4:0a:cc:e0:84:c9:9f:56:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3B:5B:62:17:C4:6D:8B:12:91:EE:FD:D0:BB:0F:A4:DF:79:14:7A
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/zjtbYhfEbYsSke790LsPpN95FHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:36:ac:43:5f:62:a9:06:50:bc:59:55:58:b7:b3:cf:db:31:
1e:69:0c:01:66:9d:d6:54:f0:86:7d:cb:02:03:99:01:8e:0a:
80:be:0a:25:f6:c7:dc:05:65:5a:b6:bd:f4:22:c4:2e:21:6b:
28:50:84:92:f4:b4:37:45:4a:db:f1:61:35:bf:5d:ad:78:6c:
09:7d:fa:8c:3e:66:56:b5:bc:fb:ce:b4:05:82:e8:e9:22:c4:
78:a0:5b:9a:4e:7f:64:f3:79:61:4f:ac:ca:e3:46:91:25:9e:
97:f7:16:a9:7b:a8:dc:05:2a:78:9c:ae:c7:92:65:c2:21:70:
d2:e4:76:4f:f8:1d:a2:df:db:a2:27:1e:d1:d9:e9:fc:24:ba:
4f:fb:54:1c:22:96:e3:76:be:6b:69:e1:41:6f:9a:5b:cf:54:
62:ae:71:ab:5f:fc:1e:fd:08:50:6c:f8:ee:ff:b3:34:af:4f:
fa:36:e4:60:a9:b5:39:8f:fe:aa:66:1d:3a:6e:0c:f5:cd:42:
58:3f:a4:32:df:fb:17:91:5f:62:0d:7f:c0:2e:ae:0e:7a:86:
9b:8b:32:1b:17:eb:2f:ef:4b:7d:c5:84:79:a8:c9:72:00:df:
7d:5e:25:2d:58:4b:38:15:5c:60:78:35:a0:35:df:56:b6:6b:
a1:49:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:08 2024 by rpki-client on console-fra.rpki-client.org