Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GO4cU4WMvbl8LikTu7MovAGw8LA.roa
File: GO4cU4WMvbl8LikTu7MovAGw8LA.roa (raw, json)
Hash identifier: QIs1zKevGPOcBdH+H+rSpy9EfN6r8ngB9VXf1H8GEHk=
Subject key identifier: 18:EE:1C:53:85:8C:BD:B9:7C:2E:29:13:BB:B3:28:BC:01:B0:F0:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019270D184DE09F7E333CB91BF59E221F892
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GO4cU4WMvbl8LikTu7MovAGw8LA.roa
Signing time: Wed 09 Oct 2024 10:27:12 +0000
ROA not before: Wed 09 Oct 2024 10:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61311
IP address blocks: 31.57.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:d1:84:de:09:f7:e3:33:cb:91:bf:59:e2:21:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 10:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18ee1c53858cbdb97c2e2913bbb328bc01b0f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:35:e1:53:b3:87:a1:df:ec:be:07:18:13:
cc:33:37:11:0c:77:4a:7a:4a:e7:f6:51:43:3c:44:
0a:c2:d1:ee:9f:ec:e2:13:59:94:e3:58:df:f0:78:
1c:4c:2f:78:ba:bb:f8:60:55:bf:bb:c0:4d:cd:0d:
60:3d:d0:51:b5:a1:6f:48:95:67:a7:e4:97:34:76:
89:a7:af:17:36:92:b8:f1:1a:b4:72:79:dd:85:8f:
52:29:04:7c:42:ff:44:9c:de:36:53:82:cf:7a:6f:
98:06:2d:62:f1:e4:6e:07:9c:d7:c7:b6:b6:34:9c:
e6:1c:65:55:cd:e6:1c:e3:91:f5:f9:fa:22:e1:1e:
b9:f5:d6:18:ea:80:c2:b1:77:21:47:53:ac:49:cc:
6e:6b:c5:60:75:2f:ff:8a:19:ae:8e:c7:23:5d:43:
92:ce:83:96:15:fd:2b:cf:c6:88:a9:4e:9d:e0:34:
4d:1f:48:0f:aa:5d:d0:cb:b1:9c:74:a5:bb:c1:5b:
52:a2:d0:4c:56:2e:cd:e6:87:da:ac:17:68:6d:4b:
b3:c1:bd:db:c6:df:8b:18:71:4d:f5:ec:43:89:12:
28:7b:a6:12:47:9c:e2:ee:39:e2:dd:65:1a:d8:1b:
34:94:19:75:96:aa:ad:f8:e1:e5:9a:4c:f3:29:be:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:1C:53:85:8C:BD:B9:7C:2E:29:13:BB:B3:28:BC:01:B0:F0:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GO4cU4WMvbl8LikTu7MovAGw8LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c8:fb:76:87:11:b6:38:1e:31:c1:f3:c7:c6:66:9c:de:fd:
14:72:b9:55:9e:b8:8c:fc:95:b5:fd:ab:59:e0:48:46:b5:6d:
7b:17:5b:81:c4:db:f8:02:40:07:a1:cc:b8:7b:21:bb:71:33:
fb:58:cb:76:a2:3d:62:69:2f:99:ee:83:e3:1c:54:54:e6:32:
8e:7c:ed:2e:7e:97:ca:b9:6e:0f:84:2b:64:be:ac:48:f8:5f:
5c:ae:58:58:f4:2f:16:3a:61:ff:32:08:a6:32:7f:a7:61:66:
ff:28:50:63:e0:18:4e:90:c6:5e:00:7b:e5:05:22:80:d0:fe:
2a:e6:00:13:b3:39:bb:15:f3:fb:a9:b3:37:67:b5:61:e7:14:
b7:c9:27:61:e6:80:f6:c0:89:66:34:5a:3c:af:ce:21:3b:92:
80:04:b4:70:c2:b3:f0:1f:c2:e0:2b:48:7d:68:b7:56:aa:2f:
f3:2b:dd:b1:2a:e1:e9:55:44:f9:33:68:36:01:50:3e:f2:e0:
82:89:97:cb:2c:e9:15:04:6c:c7:ba:1a:c9:8c:c8:d5:ef:19:
14:9b:38:f2:2e:b5:12:9d:b6:1b:79:31:92:e9:d4:1d:5a:fe:
dd:f7:62:93:e3:7c:d1:19:ea:bd:29:55:47:5c:f8:b2:60:7f:
01:49:43:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJw0YTeCffjM8uRv1niIfiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDA5MTAyNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGVlMWM1Mzg1OGNiZGI5N2MyZTI5MTNiYmIzMjhiYzAxYjBmMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHA14VOzh6Hf7L4HGBPMMzcRDHdK
ekrn9lFDPEQKwtHun+ziE1mU41jf8HgcTC94urv4YFW/u8BNzQ1gPdBRtaFvSJVn
p+SXNHaJp68XNpK48Rq0cnndhY9SKQR8Qv9EnN42U4LPem+YBi1i8eRuB5zXx7a2
NJzmHGVVzeYc45H1+foi4R659dYY6oDCsXchR1OsScxua8VgdS//ihmujscjXUOS
zoOWFf0rz8aIqU6d4DRNH0gPql3Qy7GcdKW7wVtSotBMVi7N5ofarBdobUuzwb3b
xt+LGHFN9exDiRIoe6YSR5zi7jni3WUa2Bs0lBl1lqqt+OHlmkzzKb4K4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBjuHFOFjL25fC4pE7uzKLwBsPCwMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR080Y1U0V012Ymw4TGlrVHU3TW92QUd3OExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmDMA0G
CSqGSIb3DQEBCwUAA4IBAQB7yPt2hxG2OB4xwfPHxmac3v0UcrlVnriM/JW1/atZ
4EhGtW17F1uBxNv4AkAHocy4eyG7cTP7WMt2oj1iaS+Z7oPjHFRU5jKOfO0ufpfK
uW4PhCtkvqxI+F9crlhY9C8WOmH/MgimMn+nYWb/KFBj4BhOkMZeAHvlBSKA0P4q
5gATszm7FfP7qbM3Z7Vh5xS3ySdh5oD2wIlmNFo8r84hO5KABLRwwrPwH8LgK0h9
aLdWqi/zK92xKuHpVUT5M2g2AVA+8uCCiZfLLOkVBGzHuhrJjMjV7xkUmzjyLrUS
nbYbeTGS6dQdWv7d92KT43zRGeq9KVVHXPiyYH8BSUMx
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org