Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/44IeeG5K268lKIRVsHrZoWV8COg.roa
File: 44IeeG5K268lKIRVsHrZoWV8COg.roa (raw, json)
Hash identifier: rces/70PuLyGVRQHzOaNX8fSFoVlKq5q/XKQNlt8CI8=
Subject key identifier: E3:82:1E:78:6E:4A:DB:AF:25:28:84:55:B0:7A:D9:A1:65:7C:08:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019319FF4C399254E94776AD8F8E5C504675
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/44IeeG5K268lKIRVsHrZoWV8COg.roa
Signing time: Mon 11 Nov 2024 06:53:01 +0000
ROA not before: Mon 11 Nov 2024 06:53:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 31.58.138.0/23 maxlen: 24
31.58.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:19:ff:4c:39:92:54:e9:47:76:ad:8f:8e:5c:50:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 11 06:53:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3821e786e4adbaf25288455b07ad9a1657c08e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:c2:5b:ec:af:c4:3e:22:6f:80:32:95:3f:
19:89:0d:c2:70:e3:0d:2f:f9:25:44:5f:be:7d:d9:
c0:bc:d4:c0:df:f3:cb:0d:1b:46:1d:dc:11:a8:58:
96:2a:1a:1d:ff:d9:86:38:bd:fd:3f:18:37:8c:c8:
89:cf:16:0a:98:46:e5:5b:99:cc:74:c2:23:17:c0:
66:f2:44:af:f6:11:01:91:98:53:25:0d:7d:96:c4:
3c:8e:04:0c:73:0f:66:6c:73:dc:d7:f0:d1:0d:50:
e2:2e:c7:df:7d:50:e9:fa:a5:dd:61:15:ed:41:86:
cc:2c:01:a9:40:78:4d:4b:23:d8:17:e9:79:0b:b5:
cc:87:50:e0:ab:25:61:6b:88:55:09:3c:90:2c:ca:
ca:98:9b:80:8a:f5:cc:22:06:fc:44:d7:b2:30:ed:
fa:b3:a5:4a:8e:e1:26:81:b0:7a:51:a6:c4:1a:d8:
81:f4:0a:e5:34:06:ff:64:71:55:b9:40:79:c6:88:
bb:d8:69:0c:01:78:b2:ba:0d:12:bf:d7:0b:84:32:
99:3f:c0:c7:cb:80:b9:b3:6b:ba:ee:ba:54:b0:c7:
e1:82:8e:be:39:5c:b4:0c:5d:2d:b1:f1:b6:68:c6:
93:3c:62:36:e4:e5:ef:c8:c8:4b:14:0d:27:4b:35:
74:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:1E:78:6E:4A:DB:AF:25:28:84:55:B0:7A:D9:A1:65:7C:08:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/44IeeG5K268lKIRVsHrZoWV8COg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.138.0/23
31.58.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cb:db:bd:0a:34:5c:23:a4:05:de:a7:5b:50:fb:78:f8:23:
18:28:50:66:81:d0:24:df:8d:4c:97:66:f3:c1:45:79:d8:53:
6e:10:58:0f:f4:f1:dd:42:b2:59:66:ff:31:c1:58:fb:77:c3:
6b:ae:e4:c3:a5:a7:cc:f5:8e:f5:c1:34:8f:93:97:57:b3:5f:
ec:3e:a6:17:94:8c:27:7f:69:b4:ac:6c:15:fb:3e:ca:4a:b4:
be:e6:a5:de:01:b2:18:a2:b1:01:95:56:7f:19:28:bf:0a:67:
d8:0e:9b:3c:ac:f4:34:1e:f2:f8:a6:a5:d7:65:07:40:5e:0b:
28:a5:5a:d1:e6:97:7f:c1:5b:74:0a:05:78:77:e7:3c:aa:d8:
10:44:02:d0:90:90:3c:22:f4:57:c1:f0:0e:2f:5e:e1:4e:79:
09:9b:2a:04:b4:31:1b:b6:9e:a4:f0:b9:ef:46:bf:c6:67:a0:
36:44:33:f9:43:e1:6c:df:27:3a:03:71:aa:10:67:86:f6:cd:
a8:8a:43:81:e5:a8:17:c0:31:fd:13:db:f5:77:c6:c4:54:44:
b8:f9:73:02:ac:62:43:36:f3:f9:a5:a6:13:42:f1:62:9e:a6:
fe:59:0c:3e:ce:b5:d2:dd:3b:dd:1a:7a:94:7c:b6:45:93:56:
15:02:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:30:48 2024 by rpki-client on console-ams.rpki-client.org