Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/b1uDl5l6ydXRZZXLNAMW5uifgTs.roa
File: b1uDl5l6ydXRZZXLNAMW5uifgTs.roa (raw, json)
Hash identifier: 0JDmIP2Lc1rlTzSaFRR3Mkl+lrdpYM4P2KRP0lLU+4I=
Subject key identifier: 6F:5B:83:97:99:7A:C9:D5:D1:65:95:CB:34:03:16:E6:E8:9F:81:3B
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 018CC5DCFCB9200A07D72B2A415D0BFD4B07
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/b1uDl5l6ydXRZZXLNAMW5uifgTs.roa
Signing time: Mon 01 Jan 2024 16:30:43 +0000
ROA not before: Mon 01 Jan 2024 16:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21453
IP address blocks: 31.31.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fc:b9:20:0a:07:d7:2b:2a:41:5d:0b:fd:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jan 1 16:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5b8397997ac9d5d16595cb340316e6e89f813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:47:97:35:0b:88:c5:22:76:5d:9f:e6:0b:
48:bc:64:7d:b7:b7:b5:8b:bd:cb:f2:52:de:b2:66:
e9:0c:91:4e:90:a1:24:f4:54:e6:1c:42:b3:1e:74:
0b:a5:78:ba:2f:90:51:5c:e1:d8:12:7b:3c:9e:5a:
5b:91:e5:ea:1c:1d:85:d5:0e:29:db:f4:05:86:1f:
f5:cf:03:f0:59:6c:b7:fd:20:07:af:e8:6a:df:4b:
df:15:40:3a:21:88:46:e7:b4:58:b8:fe:16:87:cc:
f9:64:ab:15:aa:be:ba:48:7e:52:5d:97:ea:2f:f9:
4d:77:85:a2:52:95:f6:ca:77:e9:c2:95:0c:5a:2a:
3b:75:00:9c:60:e6:8d:6e:c0:ac:aa:d2:cd:47:b3:
c8:ab:c1:ef:0b:52:8e:c9:f6:e1:74:3e:d4:8e:47:
18:55:cf:8b:7d:e9:e7:c8:dc:7f:7e:f2:2d:00:c4:
c1:1f:87:05:82:4b:2a:8f:cf:4e:03:9a:68:48:9b:
38:d0:3b:f4:de:19:21:bc:52:e8:a4:99:81:9a:8b:
9f:52:f7:01:01:0b:b4:a8:c1:15:b1:a2:21:c0:a4:
c6:c9:04:00:e9:64:7a:af:f1:3d:73:5f:96:01:30:
90:88:2e:ef:c1:01:5b:11:fe:51:7e:fc:ce:08:87:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:83:97:99:7A:C9:D5:D1:65:95:CB:34:03:16:E6:E8:9F:81:3B
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/b1uDl5l6ydXRZZXLNAMW5uifgTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.64.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:87:54:59:bd:40:97:75:be:d7:22:ea:be:e4:e8:53:aa:63:
1e:3a:9e:c4:18:e7:2e:7c:b9:86:d9:01:7b:1e:66:c7:d9:0b:
1c:0f:96:92:a5:63:77:9c:1d:c8:b4:10:f0:00:e6:42:d5:6e:
27:16:63:87:a2:03:9a:ad:b0:30:f6:b9:36:1b:63:56:ff:74:
df:6f:b7:96:7e:df:0b:1c:7d:dd:80:89:a7:3e:ee:39:1b:9c:
57:29:cc:88:72:21:7c:48:fb:50:93:79:da:db:93:6e:cf:96:
de:33:5a:a1:2c:29:b1:bc:52:f5:fd:75:a5:5d:04:60:54:ce:
3b:78:96:6d:f3:6e:c2:bc:9b:9a:ab:39:3a:6e:32:e2:05:e1:
f0:38:1a:0e:d3:26:3c:fa:40:85:0b:8e:82:46:54:c2:46:ca:
a6:a7:1a:8a:f0:02:3c:4d:6c:87:86:15:2e:06:b2:85:64:de:
8a:4c:5a:ce:21:5b:63:cc:f9:7a:23:78:9f:ba:4b:6e:fd:95:
a2:b6:6d:c2:bf:05:82:74:4b:db:9f:01:a1:96:39:cc:74:60:
37:6b:fe:15:e4:c4:1b:03:d0:cd:ac:01:6d:7b:e3:76:c5:27:
54:ad:64:a8:02:45:65:c8:cd:69:fc:52:aa:39:51:e2:03:dd:
fa:6b:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:06:44 2024 by rpki-client on console-ams.rpki-client.org