Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9SHa2lFC-X5tRlOM7xtjPAsmATg.roa
File: 9SHa2lFC-X5tRlOM7xtjPAsmATg.roa (raw, json)
Hash identifier: VwI4pkV5VOMll3Anw14jqV9fLM/EnWFSbyRYq9uZRqw=
Subject key identifier: F5:21:DA:DA:51:42:F9:7E:6D:46:53:8C:EF:1B:63:3C:0B:26:01:38
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01931FC27BDF837DFC2671F320640CF902CF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9SHa2lFC-X5tRlOM7xtjPAsmATg.roa
Signing time: Tue 12 Nov 2024 09:44:19 +0000
ROA not before: Tue 12 Nov 2024 09:44:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 31.58.229.0/24 maxlen: 24
31.59.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 07:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:c2:7b:df:83:7d:fc:26:71:f3:20:64:0c:f9:02:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 09:44:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f521dada5142f97e6d46538cef1b633c0b260138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:24:8f:ee:c2:d3:58:48:ca:c3:7b:5c:e1:
18:a1:34:fe:24:70:e2:cb:34:92:48:74:6f:17:73:
d9:df:e7:ea:95:0b:28:40:08:43:26:81:05:14:85:
27:26:e7:89:3f:1d:00:f0:9b:de:1a:75:06:dd:44:
26:7d:af:ef:f6:00:62:ec:ef:7d:05:fa:53:68:fc:
7d:60:cf:ee:42:21:49:04:20:79:f2:31:ef:24:5a:
5e:ad:8a:9f:1c:3a:50:a5:a2:fa:fe:ab:4f:8a:2e:
46:f3:88:2c:30:54:84:cd:68:77:4b:af:5b:08:ac:
16:85:9a:9a:87:91:71:bf:47:13:f3:d2:50:a6:1e:
ed:74:1f:60:7f:12:42:fa:87:60:0a:66:08:ed:7a:
03:a0:14:53:52:07:54:83:13:c5:83:50:c9:61:2d:
48:0f:d0:5b:fe:c7:11:45:09:77:7d:ea:2d:4b:6a:
c2:a1:b4:23:f5:b0:b7:80:3e:d6:e1:21:b3:c8:fe:
08:38:85:bc:98:47:ad:29:50:7f:cf:fd:eb:77:8c:
77:6b:44:94:7a:2a:98:54:48:1a:ed:71:b8:21:9a:
76:5a:c2:03:e1:36:f4:af:b6:0f:40:4d:c1:3c:d0:
d2:6c:33:e3:bb:3f:c1:58:51:6b:61:95:4c:2b:96:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:DA:DA:51:42:F9:7E:6D:46:53:8C:EF:1B:63:3C:0B:26:01:38
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9SHa2lFC-X5tRlOM7xtjPAsmATg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.229.0/24
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:08:95:d6:5f:0d:ef:6f:40:01:c2:f5:d1:db:c5:61:99:b6:
89:42:74:63:4d:7f:29:9d:d9:82:81:75:7e:94:fc:05:32:da:
b6:d1:38:8c:98:9d:13:1a:c5:d8:7e:30:9b:81:9a:26:ae:0e:
31:df:5b:2b:c2:5f:0c:a5:17:ba:f2:8a:ff:55:df:4c:09:3a:
d3:cc:94:01:5b:db:d0:0f:50:70:48:98:b8:53:82:35:0c:91:
3f:01:6c:b3:7c:91:b7:f6:14:16:55:c7:65:0a:2d:d5:48:af:
dd:90:04:fd:9d:4c:72:89:17:7a:db:0f:76:08:c6:bf:18:c8:
bf:d5:45:e2:1c:88:41:d5:92:04:93:05:f3:5e:27:28:df:a6:
b0:ed:ad:f9:1a:fb:89:eb:42:fe:b8:f8:b7:81:16:86:00:1e:
d9:cb:34:0e:d5:ce:db:41:44:d1:63:30:d9:1f:85:f5:46:b3:
1a:a9:07:29:a4:12:52:93:56:b2:6b:31:4c:c1:97:60:ca:8c:
25:67:d2:ab:fe:21:af:31:1d:aa:67:b6:4a:a5:e3:de:5d:05:
d8:19:aa:41:07:01:f2:c2:18:45:ac:29:28:4e:00:99:e7:d5:
e0:cb:b8:dc:3b:85:7a:12:d6:10:ee:48:e1:1c:37:99:75:12:
a4:06:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:51:29 2024 by rpki-client on console-ams.rpki-client.org