Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHI7Bahe3X8iiKfmfSbPKQrgXhc.roa
File: EHI7Bahe3X8iiKfmfSbPKQrgXhc.roa (raw, json)
Hash identifier: mHSJJkGbk4FagFPb/mTOGlOfen9Apbbo6EdLUTwxcXY=
Subject key identifier: 10:72:3B:05:A8:5E:DD:7F:22:88:A7:E6:7D:26:CF:29:0A:E0:5E:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192DF03988C3812E30E62CA96D4613A37CF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHI7Bahe3X8iiKfmfSbPKQrgXhc.roa
Signing time: Wed 30 Oct 2024 20:00:07 +0000
ROA not before: Wed 30 Oct 2024 20:00:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.57.196.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.58.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:03:98:8c:38:12:e3:0e:62:ca:96:d4:61:3a:37:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 20:00:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10723b05a85edd7f2288a7e67d26cf290ae05e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:dd:30:a5:47:bb:d5:f6:06:93:2f:27:f2:
82:59:3c:b9:0e:70:ea:93:21:be:b2:b8:75:f9:cc:
3d:11:1f:9b:31:d5:88:ee:a0:20:b1:7c:58:f2:d0:
21:fe:8a:c9:61:88:87:b8:12:8c:af:81:7e:ad:0f:
7e:9d:8a:af:2b:e3:40:d2:82:62:3e:02:01:e5:59:
b8:b0:3e:b2:1f:c9:65:45:7e:d2:d5:a6:85:19:a1:
6a:bb:48:b2:31:95:11:6b:2d:70:47:40:e9:44:83:
a0:29:88:0a:fa:18:91:3e:5f:c5:3b:cb:78:c4:e8:
b3:9e:ae:a2:af:ff:f8:dc:90:ae:4a:c7:05:aa:7d:
1b:9a:3c:0f:21:e3:f6:4d:27:79:2e:ef:bc:8f:e8:
35:de:2e:e6:48:33:a9:e8:e2:b8:4d:3e:78:ad:2e:
5d:a2:be:d7:c5:84:22:f6:4a:f7:57:f0:91:85:9c:
db:83:0d:ca:1a:5e:f9:41:b5:27:0e:db:1f:c4:c8:
6c:75:73:ad:67:e6:ae:1b:e8:69:b0:7e:01:be:e1:
19:9c:c1:ec:32:ac:03:a8:95:79:2b:20:b0:a6:c5:
95:db:f3:ff:2a:1b:1c:e0:0a:05:3b:bf:e3:c9:b5:
d7:24:9a:89:63:90:a1:b8:17:f9:6d:55:7a:73:69:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:72:3B:05:A8:5E:DD:7F:22:88:A7:E6:7D:26:CF:29:0A:E0:5E:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHI7Bahe3X8iiKfmfSbPKQrgXhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.57.196.0/23
31.57.199.0/24
31.57.238.0/24
31.58.150.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4c:5c:79:94:ee:b4:1e:7b:64:9b:3f:c4:3d:95:a9:28:09:
c2:51:a0:96:50:86:4a:13:e8:3d:9f:13:85:0f:32:5a:69:81:
fc:6f:2c:40:50:36:38:91:b2:4f:86:ca:aa:8e:96:82:ea:cc:
7a:50:b4:bd:08:f8:ca:19:9e:a0:fb:80:47:20:57:f3:fd:3d:
56:64:f8:64:c2:49:dd:d0:63:67:a4:69:1e:f0:59:db:7a:57:
a6:46:a9:7e:f6:a0:8d:47:82:c7:31:36:f7:cc:66:9d:9b:4e:
e3:00:df:41:3d:8f:ec:f8:2b:00:d7:e5:38:19:2a:3f:00:82:
df:04:f1:13:14:aa:2d:1c:f1:f2:cf:83:4d:7e:bf:f3:b1:9f:
20:82:7c:39:39:8b:b1:cd:a1:1a:c1:b1:e9:ce:9d:fd:df:60:
b1:32:c3:ac:c8:d0:73:b9:e3:b6:54:7d:69:4c:3a:b7:bb:88:
04:89:c6:12:0a:06:3b:ec:35:f4:6f:5c:42:17:fe:38:ac:c8:
72:bc:46:81:de:5a:cf:a6:65:e5:54:4c:d0:30:6c:3a:c6:ff:
51:44:6a:d3:a8:e0:35:2c:c1:e0:b7:c4:5f:22:64:bc:60:8d:
84:0f:dd:a5:8d:10:dd:ab:0b:b5:b5:22:61:17:f0:0d:a6:3d:
b0:e2:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org