Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mehl_2XcXEsnogc8ioTf_Vxiq4.roa
File: 8Mehl_2XcXEsnogc8ioTf_Vxiq4.roa (raw, json)
Hash identifier: 8mUzfMcbQZSoUsidN9sSRjOiQx9mEA6GPQvusnmHhto=
Subject key identifier: F0:C7:A1:97:FD:97:71:71:2C:9E:88:1C:F2:2A:13:7F:F5:71:8A:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192B806A9DF43C3735289B398B4D64851AB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mehl_2XcXEsnogc8ioTf_Vxiq4.roa
Signing time: Wed 23 Oct 2024 06:18:17 +0000
ROA not before: Wed 23 Oct 2024 06:18:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399861
IP address blocks: 31.57.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Oct 2024 06:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:06:a9:df:43:c3:73:52:89:b3:98:b4:d6:48:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 06:18:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0c7a197fd9771712c9e881cf22a137ff5718aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:0b:99:b6:d4:fd:5b:11:76:3b:5f:cf:e2:
c0:fb:f3:26:56:17:42:c7:5a:d6:85:9d:6b:25:65:
b4:58:dd:47:19:6f:a9:7a:48:52:2b:57:b4:3c:8d:
02:f9:2e:1b:77:79:9c:80:15:3c:bf:0a:61:52:46:
9b:c9:27:62:8b:fe:13:27:03:c3:92:8b:47:51:48:
7e:48:c0:c5:12:92:c3:0a:bd:31:d9:77:2d:66:52:
80:44:e6:72:57:29:47:8b:98:ae:9d:71:e9:1e:1b:
80:b5:9b:2f:50:26:da:c2:13:d3:3d:52:20:58:66:
7e:23:ed:a4:59:07:6f:9c:cd:cb:c6:91:86:a3:66:
c2:e8:73:e7:3b:74:88:20:be:60:51:d5:a0:74:d5:
a2:85:ea:ac:65:e9:cd:58:95:b0:ba:7c:43:f3:db:
f6:65:5d:41:59:f1:32:87:3d:5a:53:0d:33:af:75:
6f:cf:6f:49:c9:e2:53:02:80:7b:ed:46:30:54:3e:
b1:a6:fc:f5:e9:ca:79:9e:65:41:7a:84:c1:95:ec:
e9:a1:d9:89:86:9a:42:d3:57:38:e2:4f:1f:4f:85:
2f:b5:3f:9f:6e:59:ff:90:8b:06:ed:c1:da:29:9f:
d7:da:6f:7a:cd:3b:96:d8:30:34:79:22:80:9e:61:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:A1:97:FD:97:71:71:2C:9E:88:1C:F2:2A:13:7F:F5:71:8A:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8Mehl_2XcXEsnogc8ioTf_Vxiq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:8f:c5:eb:17:2a:09:16:4c:bc:5c:30:73:f9:06:68:12:6c:
99:9f:4e:4f:21:a0:f1:32:72:c4:db:f8:00:f3:aa:14:6d:50:
48:e3:6d:24:88:0b:0d:e2:2e:da:24:62:2d:18:87:d3:0e:42:
56:4e:b5:df:3f:c2:de:bb:8d:fc:6d:e0:ee:08:c5:9e:86:21:
6b:2a:8f:6f:64:7d:76:14:62:66:b1:69:05:2d:bc:45:30:9a:
92:10:bf:c8:0d:4f:ad:bf:a1:01:e3:9b:d0:d9:69:27:35:1e:
2d:49:ec:cd:c5:a8:32:1f:1b:be:b0:3a:4e:ac:30:bb:c0:69:
d7:47:fe:9f:64:4c:9b:f6:ed:a8:65:14:a7:3c:b5:3c:4b:bb:
07:b2:53:ea:f0:78:53:c8:3a:25:ad:b0:09:7b:19:93:3f:36:
76:bc:d0:ed:d8:f4:c4:80:b7:6e:e4:d2:4f:b6:88:97:eb:07:
81:4d:c6:b6:13:6a:1d:0b:39:16:5e:1b:bd:61:4e:7c:d6:4a:
af:e2:bc:39:55:25:be:2c:28:12:32:71:f3:84:20:31:59:89:
5e:0c:8a:41:84:14:aa:b1:e2:ac:f5:d0:30:68:26:61:fc:19:
4f:cf:93:ac:bd:b7:fc:0c:42:44:45:99:aa:00:11:c5:ad:f5:
81:17:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 10:20:32 2024 by rpki-client on console-fra.rpki-client.org