Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/95ok5N96OBFtZgpK9aqbjhUIQGo.roa
File: 95ok5N96OBFtZgpK9aqbjhUIQGo.roa (raw, json)
Hash identifier: 0uZG0pVh/yd/+vvClDi1ryiXq/CwNxUgf2wlU0ilk5o=
Subject key identifier: F7:9A:24:E4:DF:7A:38:11:6D:66:0A:4A:F5:AA:9B:8E:15:08:40:6A
Certificate issuer: /CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Certificate serial: 018CC80130FC270C2930DC356584D19CFAA9
Authority key identifier: 51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/95ok5N96OBFtZgpK9aqbjhUIQGo.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212982
IP address blocks: 31.41.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:30:fc:27:0c:29:30:dc:35:65:84:d1:9c:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f79a24e4df7a38116d660a4af5aa9b8e1508406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:4c:c3:f6:07:7a:da:28:62:05:e9:62:e6:
74:a8:df:a1:af:28:50:62:cd:60:78:bb:68:60:09:
43:9f:2e:eb:cd:95:18:3a:04:fe:fa:ac:0c:9d:6e:
77:34:55:44:17:2d:15:ab:1f:db:f2:25:14:6a:a2:
db:4f:17:9d:69:d4:43:ad:a6:9f:02:2d:3e:94:d5:
27:67:ee:18:84:79:a9:82:7c:72:d0:00:fd:26:33:
d4:2e:6f:66:74:ee:ce:d1:0e:c1:d8:d1:33:8b:ff:
3c:ef:eb:26:f3:29:6b:d6:05:ed:ac:f4:4b:de:c3:
77:3a:a6:27:76:d0:29:14:1f:f0:c5:c2:4f:10:2b:
e4:32:e7:76:19:56:75:3b:4c:d8:fb:e5:94:c5:f7:
db:94:4a:91:e4:c2:dd:3e:da:c4:9f:f5:48:2e:e0:
c7:84:51:a2:bd:05:5b:b4:75:ff:d3:c4:b7:35:1c:
02:72:9a:b7:be:12:b3:31:61:53:6d:64:de:49:f2:
89:21:e5:34:9b:25:63:93:23:b1:97:f7:49:60:11:
df:6a:00:97:db:af:55:29:6f:c0:fa:b6:1e:d9:38:
99:1a:c4:29:cb:0d:59:7a:1c:25:71:5c:64:1d:ac:
06:73:7d:de:7a:21:3e:31:cb:2d:7d:0e:0b:69:f3:
b9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9A:24:E4:DF:7A:38:11:6D:66:0A:4A:F5:AA:9B:8E:15:08:40:6A
X509v3 Authority Key Identifier:
keyid:51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/95ok5N96OBFtZgpK9aqbjhUIQGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.32.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1f:26:44:cf:ab:00:e4:45:90:ae:a1:c3:76:cf:80:34:69:
ba:ac:bf:98:97:ca:a3:5e:5c:b0:b9:24:ef:cd:ae:65:f6:0d:
97:fd:d3:c9:7f:10:c1:03:bb:f4:ea:91:48:bb:0c:53:71:86:
c6:21:3f:4b:2a:0e:09:16:96:b5:5f:d7:a1:46:dd:76:1d:11:
f0:2a:15:8d:78:26:57:a7:7c:f8:7d:9c:36:22:81:f3:d3:fe:
cf:1b:ea:46:19:b3:9b:ac:59:0e:00:6e:5e:5c:c7:60:50:a6:
75:52:2c:3b:67:48:39:4f:a1:58:4c:ac:13:8f:2a:c2:b5:9e:
78:d7:4e:bb:ff:c5:31:93:85:50:c7:b6:35:cf:25:a2:88:ff:
97:30:2f:a3:8a:74:9f:6e:1c:f1:7c:ee:34:68:8f:7d:97:6a:
91:72:82:f8:92:9b:75:0c:56:3b:97:90:91:2a:99:8a:1a:e3:
4d:17:ff:e2:b2:4e:e2:82:ad:9e:1e:f3:bf:a6:3b:06:05:91:
92:c0:48:41:42:ac:01:38:93:a5:27:c0:c7:1b:eb:ec:ec:02:
9f:1c:69:34:c8:73:f2:0c:e3:d5:b8:9d:32:3c:37:37:8e:38:
38:83:75:a3:a0:1a:83:12:fb:c6:25:24:99:0c:ae:bb:d6:04:
c9:d6:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:19:30 2024 by rpki-client on console-fra.rpki-client.org