Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6iBO7SuLlN7dG1yVMiIFHwjfe3I.roa
File: 6iBO7SuLlN7dG1yVMiIFHwjfe3I.roa (raw, json)
Hash identifier: KWe6k6lPLokN22chFarS39lysr3aWGiFjvwNXWKNP2k=
Subject key identifier: EA:20:4E:ED:2B:8B:94:DE:DD:1B:5C:95:32:22:05:1F:08:DF:7B:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192B805C074113330403F0EA6F7B7CA3EEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6iBO7SuLlN7dG1yVMiIFHwjfe3I.roa
Signing time: Wed 23 Oct 2024 06:17:17 +0000
ROA not before: Wed 23 Oct 2024 06:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214914
IP address blocks: 31.57.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:05:c0:74:11:33:30:40:3f:0e:a6:f7:b7:ca:3e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 06:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea204eed2b8b94dedd1b5c953222051f08df7b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:67:1e:bf:f3:27:e0:8e:b9:22:f5:9d:c6:
d1:f8:db:84:78:62:f0:5d:12:ca:ca:80:11:c4:2a:
60:2e:16:f3:89:e7:48:78:c2:af:c3:d3:32:54:77:
a5:cc:0e:45:9a:06:5b:e2:b7:87:bc:e1:28:02:d2:
74:f9:bf:b3:7e:39:cb:ce:3d:1f:10:c1:14:27:1a:
1e:bb:ca:13:f5:7c:ee:c3:05:18:cb:e2:83:23:59:
b7:26:aa:c2:c5:55:f2:ae:1d:9c:13:05:5d:48:99:
d9:55:e3:ab:92:dc:23:4a:a1:66:81:33:40:be:6a:
b1:c0:c6:f4:e8:dd:a2:49:c8:98:ff:0a:15:6c:fd:
62:48:77:05:fe:5a:1a:58:64:d8:3d:31:63:36:5a:
39:b5:84:3e:22:f7:70:b8:87:94:45:c4:3a:41:f6:
b1:30:22:92:9e:13:01:b1:3d:16:a5:04:41:d9:76:
6e:2e:9b:1b:9d:06:48:7b:44:19:d2:cd:0a:87:17:
82:0a:24:cc:49:d6:31:7f:94:b2:f3:19:97:82:9c:
88:ec:58:c5:b9:cc:5b:03:48:3a:4a:32:42:6e:e7:
15:47:29:3f:c3:59:16:c7:dd:01:42:9f:ac:b8:40:
4f:2b:1f:e8:d8:d1:58:5a:ee:a0:27:16:60:5e:2c:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:4E:ED:2B:8B:94:DE:DD:1B:5C:95:32:22:05:1F:08:DF:7B:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6iBO7SuLlN7dG1yVMiIFHwjfe3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:89:53:9f:57:54:bc:2a:fa:4c:cf:9b:50:86:60:df:c0:4a:
a9:02:b5:ff:7a:93:fd:34:5a:36:72:07:3c:9f:bd:c5:33:dd:
7f:bf:16:63:0f:e5:ce:25:61:5f:19:02:ff:52:ed:5c:9c:47:
8e:51:88:52:ce:60:f5:d4:f4:6f:31:cc:a5:46:1e:a0:29:de:
c5:2a:2a:44:ff:3d:8a:17:60:04:a6:55:3d:53:2c:e6:6d:37:
ab:6e:8c:39:91:59:98:3e:1f:f7:f7:27:04:e9:69:20:2e:a1:
cd:f9:cc:32:ff:a2:68:18:c8:8c:3e:c9:54:2b:82:e1:ba:02:
e4:70:39:f3:98:67:0d:e9:2a:8f:1f:7b:f8:bf:1a:9c:c8:2c:
6b:dc:f8:2f:68:54:c7:1d:e4:1c:e6:9b:fe:c5:9c:38:48:d1:
94:87:87:e6:df:9b:f9:f1:bb:a6:e4:39:a8:f2:42:59:19:77:
7b:5c:8a:9e:e2:20:82:0e:2a:d2:9a:0d:29:ea:df:e8:e6:45:
08:92:63:ed:42:b0:d9:e7:45:11:7b:fa:83:d0:af:7f:f4:d1:
f2:a6:2f:48:02:bb:30:2c:4c:76:1c:c0:2d:f9:f0:49:55:4c:
78:c4:54:b3:52:01:63:24:c2:f0:83:34:af:d6:70:74:5e:6d:
e7:8c:0b:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK4BcB0ETMwQD8Opve3yj7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDIzMDYxNzE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTIwNGVlZDJiOGI5NGRlZGQxYjVjOTUzMjIyMDUxZjA4ZGY3YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuClnHr/zJ+COuSL1ncbR+NuEeGLw
XRLKyoARxCpgLhbziedIeMKvw9MyVHelzA5FmgZb4reHvOEoAtJ0+b+zfjnLzj0f
EMEUJxoeu8oT9XzuwwUYy+KDI1m3JqrCxVXyrh2cEwVdSJnZVeOrktwjSqFmgTNA
vmqxwMb06N2iSciY/woVbP1iSHcF/loaWGTYPTFjNlo5tYQ+IvdwuIeURcQ6Qfax
MCKSnhMBsT0WpQRB2XZuLpsbnQZIe0QZ0s0KhxeCCiTMSdYxf5Sy8xmXgpyI7FjF
ucxbA0g6SjJCbucVRyk/w1kWx90BQp+suEBPKx/o2NFYWu6gJxZgXiw+UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOogTu0ri5Te3RtclTIiBR8I33tyMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNmlCTzdTdUxsTjdkRzF5Vk1pSUZId2pmZTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzlCMA0G
CSqGSIb3DQEBCwUAA4IBAQDBiVOfV1S8KvpMz5tQhmDfwEqpArX/epP9NFo2cgc8
n73FM91/vxZjD+XOJWFfGQL/Uu1cnEeOUYhSzmD11PRvMcylRh6gKd7FKipE/z2K
F2AEplU9UyzmbTerbow5kVmYPh/39ycE6WkgLqHN+cwy/6JoGMiMPslUK4LhugLk
cDnzmGcN6SqPH3v4vxqcyCxr3PgvaFTHHeQc5pv+xZw4SNGUh4fm35v58bum5Dmo
8kJZGXd7XIqe4iCCDirSmg0p6t/o5kUIkmPtQrDZ50URe/qD0K9/9NHypi9IArsw
LEx2HMAt+fBJVUx4xFSzUgFjJMLwgzSv1nB0Xm3njAtU
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org