Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yz7p4Wed67t2paEbQm0PQfAVQKo.roa
File: yz7p4Wed67t2paEbQm0PQfAVQKo.roa (raw, json)
Hash identifier: 3h+wonJSdbvHDeX8pC6csnV/AxvbHFNFUFHHkRQvf0M=
Subject key identifier: CB:3E:E9:E1:67:9D:EB:BB:76:A5:A1:1B:42:6D:0F:41:F0:15:40:AA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018FE469C403F26D4818D7724A3F3BF71744
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yz7p4Wed67t2paEbQm0PQfAVQKo.roa
Signing time: Tue 04 Jun 2024 18:01:27 +0000
ROA not before: Tue 04 Jun 2024 18:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45027
IP address blocks: 31.129.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:69:c4:03:f2:6d:48:18:d7:72:4a:3f:3b:f7:17:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 4 18:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb3ee9e1679debbb76a5a11b426d0f41f01540aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:b2:39:3a:b4:8d:a9:97:f0:79:d2:f2:b3:
79:2d:d0:ea:15:9d:cc:76:97:1b:f5:5e:d0:c2:3a:
2d:4f:a8:a3:bb:ed:4c:93:1d:f8:c4:c1:fd:10:dd:
89:5e:a3:bf:a9:d2:00:23:a0:b7:f6:50:b8:42:7d:
64:67:bc:a4:0a:ef:18:f9:5b:e3:b5:bd:cb:7b:1d:
7c:c1:1d:f2:85:f9:46:76:e4:a3:9c:b2:48:83:28:
4b:94:10:c2:17:eb:f5:6e:53:8f:80:40:2c:d6:7d:
29:50:bd:f0:91:c1:4d:10:43:91:04:f7:c8:6f:6e:
11:d6:fb:f4:fc:c1:77:a3:e0:7d:35:ee:af:13:3d:
e2:27:5c:79:7a:60:a3:87:b5:a4:ee:0e:20:6b:78:
e8:48:f1:6b:7c:e9:8c:74:3f:24:37:a4:02:8f:fd:
7c:96:3a:11:a1:8a:22:19:57:25:26:de:f3:9c:47:
f2:db:4e:11:14:c9:8e:29:fb:5f:d3:c5:09:7a:bf:
67:46:3d:76:93:63:b3:a3:1e:24:d9:9b:9f:e7:24:
97:f4:0c:e1:48:a9:ba:0f:4e:2d:59:e1:a5:89:b6:
8d:6e:01:a8:06:7a:b2:dd:4d:76:85:ed:62:01:70:
49:f0:92:d5:24:b7:48:5a:4d:e2:e6:f3:71:91:e3:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:E9:E1:67:9D:EB:BB:76:A5:A1:1B:42:6D:0F:41:F0:15:40:AA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/yz7p4Wed67t2paEbQm0PQfAVQKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.30.0/24
Signature Algorithm: sha256WithRSAEncryption
46:39:cf:2b:de:6a:0a:4f:ba:17:63:69:05:0b:32:8f:ed:62:
b1:34:34:dd:fb:fe:50:2b:6a:94:0a:c1:f8:53:06:d3:cd:18:
65:7b:c6:19:eb:ab:06:ee:f8:5c:a1:0f:9c:3a:99:dc:67:ad:
c2:52:e1:ab:b4:6d:47:fc:73:f1:5e:f8:b1:3c:60:c6:f3:66:
4d:1e:9a:b3:ea:45:94:79:95:53:fc:b6:27:5b:d3:df:4a:26:
88:71:0b:67:17:18:53:f8:a7:d9:9b:c5:25:ae:c7:b4:77:fe:
1a:2b:b0:15:5b:ed:e6:db:5d:75:81:ad:77:79:19:02:97:47:
62:d7:27:47:cc:d5:08:99:25:eb:b4:0b:ac:db:17:03:a0:04:
56:03:07:70:d4:8f:03:0a:d3:aa:b0:c7:c3:b3:76:1c:9d:87:
45:ea:50:cc:03:0c:4e:7d:9f:65:90:3b:c1:ef:0c:b7:9a:ae:
25:91:8f:82:dc:57:f3:16:f3:7c:9a:bd:94:0f:ed:61:cf:06:
fd:0b:27:35:ce:cd:73:3f:44:f9:bb:52:47:92:c2:90:15:af:
3f:0f:59:e7:d3:8a:3d:48:d4:ec:f2:48:3c:8c:91:6c:60:96:
2c:57:e4:09:65:c9:f8:05:57:e3:5a:5e:f0:e4:1a:31:70:a7:
1a:0b:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:10 2024 by rpki-client on console-ams.rpki-client.org