Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/C8PzKu6a1U6K3OKmV46c1Oa8doY.roa
File: C8PzKu6a1U6K3OKmV46c1Oa8doY.roa (raw, json)
Hash identifier: ddC4rV+v/nIexzzW/Rzwvu7IR8C74lxGnUFzAEdWH6M=
Subject key identifier: 0B:C3:F3:2A:EE:9A:D5:4E:8A:DC:E2:A6:57:8E:9C:D4:E6:BC:76:86
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0190700A8FB3BA5A4875B6308F053EC0837D
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/C8PzKu6a1U6K3OKmV46c1Oa8doY.roa
Signing time: Mon 01 Jul 2024 20:44:18 +0000
ROA not before: Mon 01 Jul 2024 20:44:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208594
IP address blocks: 31.169.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:0a:8f:b3:ba:5a:48:75:b6:30:8f:05:3e:c0:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 1 20:44:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bc3f32aee9ad54e8adce2a6578e9cd4e6bc7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:cd:e1:3c:a2:21:8e:81:06:4a:72:bc:0c:
a1:70:fd:17:d6:53:cc:40:08:85:8f:55:49:91:64:
06:88:3b:e7:ff:b7:67:98:17:ce:ac:64:1c:d4:3e:
4c:eb:c9:09:8c:52:f2:39:7b:5d:fc:e9:44:3d:84:
dd:5f:d7:e0:8c:a9:c2:ea:da:ee:3e:b3:76:27:1b:
cb:88:bb:44:77:a0:cc:6c:a6:78:6b:e7:e5:ec:9d:
3b:ab:e1:aa:13:a3:98:14:a0:5d:67:6f:38:5f:6d:
ff:e5:ef:ca:05:10:03:6d:a7:83:0d:60:c1:6a:15:
70:9c:cc:08:71:2a:69:70:5f:68:15:17:04:ba:76:
42:e8:ce:dc:31:9c:9a:0e:2b:36:fe:3b:15:8c:34:
71:21:cc:56:db:db:d9:cc:8a:bd:98:2e:2a:46:32:
e1:de:45:02:2b:a3:6f:27:64:c7:b1:25:ab:96:21:
ed:82:97:ee:c7:84:c7:bf:45:ce:8c:87:6a:bd:77:
52:f1:d6:45:df:bf:d4:e7:3d:2e:ec:16:9e:c5:9c:
a6:23:f9:da:a1:c5:b5:52:e2:fc:74:39:37:44:a2:
e3:d1:60:a3:b6:eb:ee:ee:66:e2:be:6b:77:ae:ae:
54:0a:d9:6c:b0:a8:56:56:be:fc:08:b8:ae:0f:93:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:F3:2A:EE:9A:D5:4E:8A:DC:E2:A6:57:8E:9C:D4:E6:BC:76:86
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/C8PzKu6a1U6K3OKmV46c1Oa8doY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:10:f8:29:85:ce:ad:e5:99:0a:54:1f:b5:05:7b:f4:5b:c8:
e9:58:9d:21:c3:a2:64:99:22:88:82:cf:d4:61:d9:3a:5e:62:
86:bf:e8:97:2e:03:b3:86:32:22:b8:d9:73:d9:c3:ba:33:cc:
59:00:bd:63:ef:fe:62:4b:7f:7d:eb:26:7f:ea:c6:f1:7b:c7:
24:01:e4:2d:4c:5b:3f:41:75:f4:b7:8d:98:1a:48:71:09:88:
6a:07:fc:11:d6:13:eb:29:10:84:57:38:c7:6f:ed:3d:c3:ec:
eb:fa:b6:fa:dc:18:82:6e:e7:ff:c5:ca:5a:49:17:23:af:b9:
37:9a:c9:97:c8:c1:77:03:9a:25:96:99:e9:b2:a2:6a:01:be:
eb:76:19:b8:9c:6b:95:71:a0:62:cc:c1:32:c3:fa:23:12:4d:
e9:4a:c5:f4:8e:ab:60:05:70:bd:a5:ee:eb:d0:70:be:73:40:
b5:95:6f:91:fb:35:c4:73:e8:37:9c:87:82:69:c0:30:b7:2a:
9d:48:1a:08:b4:f9:81:c2:1e:60:96:d8:0a:9d:b9:cc:c6:88:
9b:a0:0e:08:6f:57:ad:9c:98:e9:db:2e:c6:40:d8:c5:5e:c6:
b7:ed:b6:1d:45:96:e0:a2:6c:63:c4:c6:e2:51:57:90:55:7c:
39:01:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:22 2024 by rpki-client on console-fra.rpki-client.org