Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EwbWEqnqiv-rGqu9ZZ8yVwFZooA.roa
File: EwbWEqnqiv-rGqu9ZZ8yVwFZooA.roa (raw, json)
Hash identifier: OCz3Iei4yP39mcKibKW4OFaEyq7gxOIqErMxloM9YcY=
Subject key identifier: 13:06:D6:12:A9:EA:8A:FF:AB:1A:AB:BD:65:9F:32:57:01:59:A2:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019340506349874FBBBD83DBE182786830C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EwbWEqnqiv-rGqu9ZZ8yVwFZooA.roa
Signing time: Mon 18 Nov 2024 17:27:10 +0000
ROA not before: Mon 18 Nov 2024 17:27:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 31.56.76.0/24 maxlen: 24
31.58.143.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:50:63:49:87:4f:bb:bd:83:db:e1:82:78:68:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 18 17:27:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1306d612a9ea8affab1aabbd659f32570159a280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:70:0c:14:d7:ca:51:34:e9:7e:e5:9f:e6:
f7:40:f0:a0:d9:9c:f8:72:60:ec:4d:69:00:b2:13:
f5:e1:40:c8:f9:88:1b:22:cd:b5:48:69:fd:d7:55:
6d:10:c8:84:03:c1:ad:68:c1:66:89:55:f2:e4:a9:
ad:ca:4b:a4:33:5f:cd:6b:fc:81:18:4f:75:df:26:
cb:6f:2e:f9:d5:8c:d8:84:9d:0e:38:dd:96:38:42:
83:3d:78:9a:ac:06:09:f8:16:74:b3:86:a5:d9:c8:
f8:76:46:3d:a5:8b:7c:00:d9:16:65:d5:ea:84:d4:
7c:e3:b9:47:10:71:91:ee:cb:34:d0:c5:7a:67:3c:
97:b0:bb:1e:ad:ba:c9:51:ca:6a:76:63:fc:f3:df:
40:f2:0d:f8:72:3d:e3:45:83:de:2c:68:ad:0f:4c:
ab:6f:95:b7:94:62:9b:e9:10:1d:b1:07:25:00:8e:
ae:63:28:60:53:96:95:2e:4b:ac:ab:98:2b:cb:1a:
dc:e1:7b:7d:53:e7:51:1c:4f:2d:35:24:69:35:ee:
7d:a6:51:48:36:ad:5c:fe:d0:21:9f:8d:83:86:de:
38:26:74:5b:69:3f:dd:92:d1:e0:4b:fa:79:44:b9:
70:23:6d:99:07:c8:e8:f3:95:9e:76:5e:1e:50:70:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:D6:12:A9:EA:8A:FF:AB:1A:AB:BD:65:9F:32:57:01:59:A2:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EwbWEqnqiv-rGqu9ZZ8yVwFZooA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.76.0/24
31.58.143.0/24
31.58.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0a:5d:b4:ba:5b:ad:f3:38:9f:e9:10:f5:71:2b:e9:a2:cd:
2c:8e:d1:46:5b:66:76:36:cb:31:a0:95:27:f3:94:fb:cd:0e:
16:a7:1b:1b:57:f5:91:8e:bb:86:dc:6b:01:87:1f:25:3f:8c:
f4:95:b0:3f:b7:85:11:34:92:79:21:04:7f:25:2f:25:1a:cd:
dc:1f:13:10:21:43:f2:66:3b:10:c0:9b:ae:20:c4:73:ca:43:
42:ae:57:0a:9d:d4:d2:95:c8:fd:24:9e:67:1a:0f:8d:a1:26:
0e:64:4f:b9:50:96:e5:89:16:25:54:ba:67:d6:07:46:f6:41:
23:e1:97:1b:1b:4f:76:01:b6:24:6d:73:f1:0c:04:c3:c2:d4:
6a:db:0b:1f:4a:6c:08:16:1e:8d:20:76:65:91:4d:1a:f1:36:
13:27:1f:c4:3d:1c:6b:c4:cc:ec:9f:d0:82:de:0d:bd:09:fc:
7e:f4:52:34:ba:8a:14:0e:c6:88:80:36:94:23:53:66:77:2f:
6f:f9:46:6d:15:8b:e0:11:3f:a6:00:8e:14:b3:d8:56:73:18:
91:3b:1f:84:0e:35:c3:d9:d9:0b:e5:c1:b0:d5:ca:1c:43:8a:
f6:97:c5:19:48:55:91:cf:2b:de:e0:6e:8b:d3:10:fb:f5:8f:
46:c9:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:36:59 2024 by rpki-client on console-ams.rpki-client.org