Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/ah5EMbXuzsqZu15-l6oqNIBOzGg.roa
File: ah5EMbXuzsqZu15-l6oqNIBOzGg.roa (raw, json)
Hash identifier: zwhy3CN78TLlrY3lvBlPnijasgQupCLMj9FKfSlgYLM=
Subject key identifier: 6A:1E:44:31:B5:EE:CE:CA:99:BB:5E:7E:97:AA:2A:34:80:4E:CC:68
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0191D6B8027A96C5A3CD0AF895BF2192CD36
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/ah5EMbXuzsqZu15-l6oqNIBOzGg.roa
Signing time: Mon 09 Sep 2024 12:17:48 +0000
ROA not before: Mon 09 Sep 2024 12:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 31.41.35.0/24 maxlen: 24
195.182.38.0/24 maxlen: 24
2a12:3ec0::/48 maxlen: 48
2a12:3ec0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:b8:02:7a:96:c5:a3:cd:0a:f8:95:bf:21:92:cd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Sep 9 12:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a1e4431b5eececa99bb5e7e97aa2a34804ecc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:b8:21:22:e8:93:61:a7:cb:35:0c:b0:b9:
73:f6:21:c3:46:62:91:99:f7:3a:5e:f0:f1:05:4a:
ee:5b:f7:75:bb:45:e0:06:4a:78:8e:5c:92:90:ee:
07:ea:f0:5e:ec:d0:76:f1:ca:0d:81:18:f0:b4:e0:
50:70:86:d3:41:8e:f5:d5:cf:00:c9:98:04:e0:5f:
32:c4:79:b5:75:76:52:be:8f:cc:11:e1:47:00:96:
ba:23:d9:3a:e8:54:90:dc:91:83:ec:4e:02:23:58:
82:3f:40:11:1c:64:28:39:fc:1f:91:0e:2d:fd:2b:
75:95:d8:84:37:b0:f1:7e:38:5b:b9:de:4d:44:62:
0b:e1:84:2f:47:e1:3d:0e:e7:a5:83:1a:16:ac:ad:
08:5d:7d:cb:39:0a:7c:ff:3a:3c:aa:2c:8b:0a:a2:
d3:0a:c5:ec:a9:1d:96:96:33:4a:88:7f:95:3c:d7:
55:5b:19:90:9e:aa:3e:b0:fc:12:9d:bb:7a:93:6b:
4e:c1:ea:75:f8:53:33:17:55:fc:7d:c6:11:47:7e:
f7:19:83:bb:59:bb:a2:7e:2b:db:87:0b:28:e4:17:
da:09:9d:ae:04:22:26:9a:c6:ee:d3:40:f6:e7:21:
ce:a3:a4:e7:58:f5:d1:16:54:3b:56:8e:ff:56:c1:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1E:44:31:B5:EE:CE:CA:99:BB:5E:7E:97:AA:2A:34:80:4E:CC:68
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/ah5EMbXuzsqZu15-l6oqNIBOzGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.35.0/24
195.182.38.0/24
IPv6:
2a12:3ec0::/47
Signature Algorithm: sha256WithRSAEncryption
aa:0c:bc:7a:3c:4f:8f:a5:4a:a6:d9:34:51:1b:69:de:f2:53:
f3:59:5f:97:25:20:2a:bd:f0:b6:b6:19:a9:94:4b:5c:c0:e9:
74:36:8d:71:cb:17:d6:29:f4:45:57:1c:9a:7f:ba:0a:21:e1:
e1:26:85:ed:b2:3f:31:31:87:72:3e:e2:a9:f4:09:5f:0c:b7:
56:47:57:06:d6:3a:61:59:8e:e5:31:5d:f6:34:80:c0:8e:63:
97:0f:2e:bd:10:4e:f4:22:3c:03:56:ac:80:0f:81:c4:5e:c8:
d6:df:31:cc:5b:b4:2a:2a:c3:66:08:73:b1:ab:b9:99:49:d6:
9a:3c:14:75:92:04:66:15:7e:79:e5:33:e5:9e:29:08:c9:8a:
e7:33:fa:85:0c:2b:45:0e:e3:09:75:64:b8:85:91:e1:fd:cd:
ae:4a:ba:56:af:db:ab:76:08:90:82:27:35:00:37:68:f8:ad:
96:3a:de:36:ab:8f:4e:05:67:00:1d:df:80:e4:ca:79:44:3b:
7d:36:44:ae:fe:ed:68:6f:d6:7b:1b:f1:1f:21:a9:2d:70:30:
96:47:dd:b2:17:9c:d9:8e:63:99:39:61:5d:77:e2:10:5f:cf:
5e:80:71:b0:0c:7f:71:e7:0e:b1:04:c1:c6:1f:3f:9d:ea:57:
82:42:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:13:38 2024 by rpki-client on console-fra.rpki-client.org