Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5xLDTsL1expoyTdc3gwnuU1ti1Q.roa
File: 5xLDTsL1expoyTdc3gwnuU1ti1Q.roa (raw, json)
Hash identifier: VrqzLklYOnqlb5mF3Y0VoWpXb3uCUP7M8UM6njGW3rI=
Subject key identifier: E7:12:C3:4E:C2:F5:7B:1A:68:C9:37:5C:DE:0C:27:B9:4D:6D:8B:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019305A41D0C475A00B783B317B6930ADC2E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5xLDTsL1expoyTdc3gwnuU1ti1Q.roa
Signing time: Thu 07 Nov 2024 08:01:01 +0000
ROA not before: Thu 07 Nov 2024 08:01:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134972
IP address blocks: 31.58.132.0/23 maxlen: 24
31.59.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:a4:1d:0c:47:5a:00:b7:83:b3:17:b6:93:0a:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 08:01:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e712c34ec2f57b1a68c9375cde0c27b94d6d8b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:f6:b4:ac:85:fe:f4:98:b1:94:9b:72:66:
6d:f4:40:62:fb:42:c2:c3:a6:05:02:9c:fb:07:32:
23:43:ee:40:30:6e:75:c2:43:6d:f4:e3:a7:02:21:
82:ba:c8:21:ce:33:3d:bb:e5:f7:dd:c4:0c:ee:6a:
42:87:4d:85:41:90:e0:50:c5:25:60:21:20:29:2b:
e6:36:d2:af:7b:a9:48:b3:ba:c1:cf:fc:d7:33:9f:
06:d0:0d:66:76:a4:3f:ce:73:80:e9:0f:54:37:8d:
33:fd:c0:ec:62:4b:7a:65:77:f1:a3:65:d3:e8:61:
0a:1f:51:e8:83:0e:db:a9:61:8f:1c:80:b7:f3:4f:
87:09:8f:cf:aa:2f:df:ed:dc:aa:c1:5d:70:24:8c:
9d:d7:08:35:66:94:e5:ee:c9:55:8f:c8:7d:fc:45:
78:ab:88:83:1a:25:07:d8:0d:cf:80:41:fe:73:5d:
7f:ad:a9:59:8b:1c:9a:e3:34:2d:92:c4:6d:b7:d5:
10:00:74:6c:0e:20:c0:d0:a4:81:08:64:ec:dc:96:
7a:9a:eb:14:43:2b:4d:48:43:ef:5e:a9:d4:ab:6d:
ce:b3:38:f0:5f:44:2e:e8:bb:31:d0:52:11:af:0e:
53:38:d1:7b:1b:d7:63:eb:90:cd:79:26:5e:f7:78:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:12:C3:4E:C2:F5:7B:1A:68:C9:37:5C:DE:0C:27:B9:4D:6D:8B:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5xLDTsL1expoyTdc3gwnuU1ti1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.132.0/23
31.59.132.0/22
Signature Algorithm: sha256WithRSAEncryption
93:8d:bf:ce:b9:fe:dc:1c:ac:79:01:fd:e2:74:d3:8a:98:ab:
98:3b:7c:3b:2d:bf:24:d5:72:fa:86:99:32:0c:ef:ec:d7:74:
a2:b1:9d:4b:fe:ba:cc:dd:9a:7a:4f:a4:28:b8:45:e1:0b:21:
04:3b:2d:66:68:d5:82:47:9c:b6:8d:09:df:45:eb:c1:8a:eb:
c7:42:35:25:32:3a:3b:dd:a6:b2:73:28:39:78:db:e6:40:e3:
2c:95:d9:d8:30:9f:80:01:f1:09:f5:4b:ec:d2:58:8f:d0:1b:
e0:24:38:c6:9a:e8:dd:41:8a:45:ee:6e:d1:27:d8:15:b8:10:
c2:21:d4:29:91:4d:6f:e2:2e:67:fc:05:d0:19:07:c0:2a:bf:
c7:62:56:0d:bf:1a:99:bc:0c:4f:b9:bd:e5:5a:d3:8e:15:b9:
ba:4f:0f:9f:f3:86:e9:af:74:52:58:4d:72:d6:25:d5:3e:53:
82:0a:ae:a3:a5:36:7f:70:c0:84:52:f9:c6:67:3e:74:a1:a8:
8d:28:7b:41:63:7b:d5:6b:90:20:e9:05:f2:bc:4f:fa:42:db:
bb:7f:2a:8f:25:ce:10:7a:31:9f:90:26:73:da:33:2a:ef:d9:
c2:33:2c:9e:f3:03:6e:65:03:ac:31:90:44:3c:1c:c8:e9:27:
1e:60:88:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMFpB0MR1oAt4OzF7aTCtwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTA3MDgwMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzEyYzM0ZWMyZjU3YjFhNjhjOTM3NWNkZTBjMjdiOTRkNmQ4YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNf2tKyF/vSYsZSbcmZt9EBi+0LC
w6YFApz7BzIjQ+5AMG51wkNt9OOnAiGCusghzjM9u+X33cQM7mpCh02FQZDgUMUl
YCEgKSvmNtKve6lIs7rBz/zXM58G0A1mdqQ/znOA6Q9UN40z/cDsYkt6ZXfxo2XT
6GEKH1Hogw7bqWGPHIC380+HCY/Pqi/f7dyqwV1wJIyd1wg1ZpTl7slVj8h9/EV4
q4iDGiUH2A3PgEH+c11/ralZixya4zQtksRtt9UQAHRsDiDA0KSBCGTs3JZ6musU
QytNSEPvXqnUq23OszjwX0Qu6Lsx0FIRrw5TONF7G9dj65DNeSZe93jLFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOcSw07C9XsaaMk3XN4MJ7lNbYtUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNXhMRFRzTDFleHBveVRkYzNnd251VTF0aTFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHzqEAwQC
HzuEMA0GCSqGSIb3DQEBCwUAA4IBAQCTjb/Ouf7cHKx5Af3idNOKmKuYO3w7Lb8k
1XL6hpkyDO/s13SisZ1L/rrM3Zp6T6QouEXhCyEEOy1maNWCR5y2jQnfRevBiuvH
QjUlMjo73aaycyg5eNvmQOMsldnYMJ+AAfEJ9Uvs0liP0BvgJDjGmujdQYpF7m7R
J9gVuBDCIdQpkU1v4i5n/AXQGQfAKr/HYlYNvxqZvAxPub3lWtOOFbm6Tw+f84bp
r3RSWE1y1iXVPlOCCq6jpTZ/cMCEUvnGZz50oaiNKHtBY3vVa5Ag6QXyvE/6Qtu7
fyqPJc4QejGfkCZz2jMq79nCMyye8wNuZQOsMZBEPBzI6SceYIhQ
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:18 2024 by rpki-client on console-fra.rpki-client.org