Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/9mF0LzjylNsk6Ow8kgMa-xtY-N4.roa
File: 9mF0LzjylNsk6Ow8kgMa-xtY-N4.roa (raw, json)
Hash identifier: KnJUyEOdHMUpzBoUK0Z2N/6/QT1WWclOWlxAKep1u74=
Subject key identifier: F6:61:74:2F:38:F2:94:DB:24:E8:EC:3C:92:03:1A:FB:1B:58:F8:DE
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 018CC801EFA5BDEC012EA1934349DDF8DC67
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/9mF0LzjylNsk6Ow8kgMa-xtY-N4.roa
Signing time: Tue 02 Jan 2024 02:30:19 +0000
ROA not before: Tue 02 Jan 2024 02:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198285
IP address blocks: 158.255.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ef:a5:bd:ec:01:2e:a1:93:43:49:dd:f8:dc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f661742f38f294db24e8ec3c92031afb1b58f8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:74:76:0a:74:e4:c4:13:dc:d2:28:88:d0:
bc:97:54:b7:9d:29:d8:75:a1:8a:e3:0f:c1:f0:a3:
c8:dd:d0:c8:b8:57:88:1c:81:75:97:e5:bf:1b:95:
b0:6c:91:f8:6a:38:cb:21:fe:11:21:4d:5f:52:05:
72:ed:d4:7a:4d:9b:cf:ea:89:e3:fd:3f:02:7a:03:
cd:83:de:04:da:74:17:2c:58:7a:4b:34:e2:3d:8f:
fb:2e:10:dd:2e:03:e3:f8:5c:b0:06:35:d3:7c:37:
19:fe:8f:b0:8e:73:82:d8:7a:78:b4:85:6c:24:ef:
ec:8b:40:d3:c2:69:1f:f4:6b:8e:2b:c0:6f:9a:84:
bc:0f:af:26:bd:e7:e1:9e:6d:96:4f:f2:a6:0e:f9:
51:4e:2f:eb:9b:6b:30:ba:52:33:33:30:1d:a8:f4:
39:43:a1:e3:cb:01:62:2f:44:ac:e8:b1:71:8d:be:
97:2c:53:a8:d3:d9:a2:06:05:1f:22:0d:90:90:94:
d4:80:ad:28:25:8f:8e:be:20:ab:a3:2f:ff:7c:04:
98:bf:7d:bd:28:47:4e:32:33:63:f9:98:a8:33:45:
28:1e:91:83:9f:21:2a:6a:da:86:0a:2f:58:ba:a8:
4d:0e:fd:6c:9b:d9:55:27:2c:4f:41:a6:8a:ca:a2:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:74:2F:38:F2:94:DB:24:E8:EC:3C:92:03:1A:FB:1B:58:F8:DE
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/9mF0LzjylNsk6Ow8kgMa-xtY-N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.56.0/24
Signature Algorithm: sha256WithRSAEncryption
07:16:b0:0c:fe:46:91:00:10:ee:9f:07:fb:36:45:e7:8b:f3:
6b:c3:d7:9c:c6:fa:6f:a8:ba:eb:29:fd:7f:91:01:62:1b:ff:
31:a2:b0:4c:ca:15:3a:1a:bf:d3:cc:c0:90:e0:48:56:73:c9:
89:53:26:bb:1b:40:fc:5d:0a:d7:40:7f:d5:b7:57:2a:17:84:
9c:86:5e:76:c1:8a:e0:84:42:b8:cc:c7:6d:96:ae:55:8e:85:
f8:3c:0a:73:e5:b3:25:ca:d3:66:0d:d7:3e:bd:e2:92:43:e2:
34:dc:48:b1:83:04:ae:04:16:5b:6a:9c:67:20:9d:65:6f:91:
85:b3:61:f8:b3:a0:79:84:60:d9:15:a9:a6:b3:0c:f7:71:9f:
06:b5:cc:01:55:af:b5:e2:88:c1:99:52:55:74:b5:fd:5b:8e:
ed:af:9f:b1:f0:71:54:77:7d:11:d1:1b:b6:d6:86:d9:f4:4d:
e6:a7:e7:9c:b6:5c:38:86:b5:23:57:9a:fd:44:fb:04:89:bc:
68:87:c9:e3:eb:4a:5c:cd:c1:ec:20:5a:84:c6:52:b0:f8:99:
41:ab:58:25:00:5c:f1:c5:cd:4d:6f:1d:71:1d:ce:cd:10:48:
4b:5a:17:f0:46:23:f1:49:05:b1:3c:64:eb:73:0a:ac:7f:70:
09:3d:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:21:33 2024 by rpki-client on console-ams.rpki-client.org