Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FvQ_goqPHeXTw4n6IQonQBP5rs0.roa
File: FvQ_goqPHeXTw4n6IQonQBP5rs0.roa (raw, json)
Hash identifier: 03sD9U9HVkAAGKBlQh13u0jAmCxn3RX0d9RMq+jqmJ8=
Subject key identifier: 16:F4:3F:82:8A:8F:1D:E5:D3:C3:89:FA:21:0A:27:40:13:F9:AE:CD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01923A3CB1B2B3D644CC7C11E73228A470A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FvQ_goqPHeXTw4n6IQonQBP5rs0.roa
Signing time: Sat 28 Sep 2024 20:05:09 +0000
ROA not before: Sat 28 Sep 2024 20:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 31.57.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:3c:b1:b2:b3:d6:44:cc:7c:11:e7:32:28:a4:70:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 20:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16f43f828a8f1de5d3c389fa210a274013f9aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:d2:0a:f7:c5:cc:a9:fb:a9:44:78:63:f6:
54:d5:f7:31:de:7c:da:b8:1c:e5:e4:15:f2:08:27:
a3:c9:22:2d:68:99:34:8d:3e:41:33:45:43:58:00:
96:dc:89:ef:17:f2:1f:cf:f2:d4:66:16:1b:f5:8e:
49:4e:89:f7:1a:ea:1a:1e:4e:f8:09:3f:56:dc:30:
1c:bc:1a:89:04:83:dc:5f:04:92:b3:7f:19:7e:f4:
84:b6:7d:6d:89:e3:13:64:4d:e2:c3:1a:61:95:e7:
0e:7e:69:55:3b:6b:24:8e:43:0e:fd:26:3c:b5:33:
d0:d3:86:32:b0:55:d6:33:b6:2b:e2:89:ec:d9:9a:
7a:4f:1d:38:7c:91:db:f7:3c:0b:40:af:0e:10:36:
7c:9e:de:3f:9c:9e:37:ab:dd:02:8b:40:eb:e1:ba:
da:5a:3b:26:6e:03:57:f4:f3:9c:78:60:74:87:56:
b9:3b:63:f8:88:12:dd:5e:dc:ec:bb:4c:ec:e3:87:
5f:90:9d:ff:8b:37:28:63:db:fa:6d:14:8a:57:ac:
49:6d:29:41:ec:22:5b:03:10:14:72:b8:a6:07:c5:
29:92:68:f3:90:de:09:54:3e:47:ab:7c:95:76:37:
3a:05:c6:12:f1:88:c8:63:28:78:56:0b:c0:ed:dd:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:3F:82:8A:8F:1D:E5:D3:C3:89:FA:21:0A:27:40:13:F9:AE:CD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FvQ_goqPHeXTw4n6IQonQBP5rs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c6:05:72:11:e8:e7:9b:2a:d1:32:0e:d9:31:fe:44:08:87:
ff:0f:e7:75:37:61:9d:45:4b:32:4e:89:44:2a:10:35:9e:6f:
d5:db:d1:2d:6b:6d:ef:7d:9c:c5:e3:93:aa:63:58:81:bb:20:
9d:39:1b:0f:4d:85:f3:2e:18:04:cc:d0:02:22:b6:5d:28:43:
13:28:6f:c0:5c:83:59:4f:df:55:f9:65:36:ef:7c:4e:81:a6:
d5:82:f3:43:35:be:11:12:0d:db:05:09:e6:80:a2:5c:37:e6:
27:ec:f3:5f:8f:e5:ae:b6:f1:05:f9:81:86:76:bf:42:44:8b:
1e:a4:99:a7:d0:58:89:40:1e:2e:5c:0e:c0:6a:2a:6a:6f:70:
e0:aa:4b:ca:64:0f:77:ef:29:fa:4b:f9:a8:69:8c:1a:0a:54:
4a:d5:e8:7e:dd:d9:05:ec:ea:d1:3b:96:4a:84:7a:fe:a3:55:
9e:f5:85:14:56:90:a2:4d:3f:ad:51:e0:f9:58:2e:48:8b:3f:
81:a4:e2:9d:43:22:58:bf:82:a6:b4:c0:19:b4:ff:2b:e3:fa:
ea:2c:62:6c:ba:09:11:ce:c5:63:92:a8:58:4c:cc:38:38:10:
82:a4:e8:f0:0b:96:73:3d:26:67:36:ae:8c:b1:2a:a2:24:81:
30:d0:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:18 2024 by rpki-client on console-fra.rpki-client.org