Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4pCzubnuFDVPRdPCpnoaeaFFK0Q.roa
File: 4pCzubnuFDVPRdPCpnoaeaFFK0Q.roa (raw, json)
Hash identifier: v7yMRxKVbjJRkKcMKTFZpvQhkWbt68sg2p2J1Jq4zas=
Subject key identifier: E2:90:B3:B9:B9:EE:14:35:4F:45:D3:C2:A6:7A:1A:79:A1:45:2B:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01927BFF75D16C2A8AEF6ADC503EBAC90B63
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4pCzubnuFDVPRdPCpnoaeaFFK0Q.roa
Signing time: Fri 11 Oct 2024 14:33:12 +0000
ROA not before: Fri 11 Oct 2024 14:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:ff:75:d1:6c:2a:8a:ef:6a:dc:50:3e:ba:c9:0b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 11 14:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e290b3b9b9ee14354f45d3c2a67a1a79a1452b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:8a:32:3a:63:d8:d7:d7:72:ad:e1:4e:9e:
5f:82:14:20:c5:f4:8e:22:4d:37:77:25:c4:77:90:
15:6e:7b:aa:60:b6:78:c3:82:34:45:35:d5:1a:67:
5d:45:82:c2:ea:b8:9a:44:d1:54:f1:72:b3:d4:42:
d6:f7:ab:e6:ce:04:62:f4:f1:cb:69:c3:94:59:c7:
96:e9:cc:7a:a7:0b:75:98:9f:19:8b:95:83:e7:73:
f9:70:d4:e7:68:ea:39:9b:a2:bc:cb:2c:7f:f9:37:
09:92:56:e3:0f:eb:48:1d:10:88:65:28:7f:60:8b:
7f:8e:eb:94:50:a4:76:08:9b:4b:fd:45:08:1f:b3:
46:97:7c:73:13:18:2f:e5:29:d5:71:86:d7:fe:38:
c2:67:c6:cf:ba:2b:db:93:26:a3:07:00:bb:fc:79:
89:07:72:bb:4a:f5:3c:24:67:4a:62:9a:6c:be:f4:
a0:29:4f:0e:73:14:af:62:60:6b:18:80:02:86:25:
89:18:2e:d3:f0:6b:f6:00:e4:08:ef:e2:6f:74:b9:
c4:fa:72:01:99:7c:c3:65:d6:8b:bd:1f:11:ee:d7:
43:a0:75:68:75:a8:f1:02:c0:88:b6:0b:8a:9b:45:
ad:c3:6a:23:b5:44:45:bc:29:a2:f3:43:e8:bd:8f:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:B3:B9:B9:EE:14:35:4F:45:D3:C2:A6:7A:1A:79:A1:45:2B:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4pCzubnuFDVPRdPCpnoaeaFFK0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.126.0/24
31.57.104.0/21
31.57.132.0/23
Signature Algorithm: sha256WithRSAEncryption
11:bd:b4:38:bd:1a:e6:5e:3f:3b:66:47:68:d5:d0:3a:3b:cb:
ee:a4:50:be:6b:48:54:58:6c:98:43:64:74:de:6f:f8:6d:ea:
b7:89:6b:cd:a7:9f:eb:46:96:dc:29:49:c5:df:b8:da:f7:98:
f3:42:b3:8f:18:a5:ce:53:06:9f:2e:0e:2d:03:87:d1:68:7f:
2b:cd:cf:3a:a8:17:d1:76:4f:e7:8e:6d:f3:3c:14:c6:2f:29:
34:40:d0:bf:78:93:b8:f3:39:70:8b:cb:40:d8:72:d9:dd:67:
90:08:74:18:1f:5d:61:ec:d4:b1:3f:57:5f:c3:17:af:eb:e3:
02:20:2d:e0:7c:42:1c:ef:66:7d:07:de:8e:d8:5f:92:42:33:
33:51:56:cc:8a:b7:0f:ad:77:18:cf:7f:ab:52:47:9b:99:e7:
08:e4:94:64:18:12:80:d2:a7:49:14:ef:2a:63:2a:21:ee:84:
8f:d3:e2:e7:0c:cd:38:d6:13:fa:89:f4:f3:6d:44:95:63:70:
ab:9d:a4:ae:a3:a9:ce:03:b9:4e:62:a7:5f:2f:9f:40:bd:09:
37:d6:ce:cd:d2:7e:bf:c0:69:f1:e4:de:4b:f3:a3:9d:7b:52:
56:fe:04:6c:f5:0a:55:7e:d1:28:ee:58:62:ba:c1:b7:32:ec:
a7:9d:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org