Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HA0l2ktC86Tl0-20CLnF_OnEnnk.roa
File: HA0l2ktC86Tl0-20CLnF_OnEnnk.roa (raw, json)
Hash identifier: TzQZmuWlYy4fRmr0aILYqqXxGaD9Ulhz17YEOC+zQdc=
Subject key identifier: 1C:0D:25:DA:4B:42:F3:A4:E5:D3:ED:B4:08:B9:C5:FC:E9:C4:9E:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01930B35973B4A176BEF76394262A447B3D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HA0l2ktC86Tl0-20CLnF_OnEnnk.roa
Signing time: Fri 08 Nov 2024 09:58:01 +0000
ROA not before: Fri 08 Nov 2024 09:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214677
IP address blocks: 31.56.7.0/24 maxlen: 24
31.58.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:35:97:3b:4a:17:6b:ef:76:39:42:62:a4:47:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 8 09:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c0d25da4b42f3a4e5d3edb408b9c5fce9c49e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:05:08:48:fe:8d:19:2c:dc:67:67:6d:b2:
30:24:2b:b6:fa:82:0e:2f:1a:4e:71:e3:bc:a9:b2:
57:b6:e3:fd:fe:75:f7:94:fc:b4:87:8a:96:9a:f4:
da:1a:d7:42:bf:5d:29:bf:9c:e1:22:16:a5:01:b4:
50:0d:11:ec:00:ac:be:3a:9b:9f:0c:37:7b:49:e3:
53:f2:36:4f:37:f7:90:cc:a6:fd:d4:4d:60:5c:67:
4d:5e:2f:ca:c0:3d:a2:d7:84:3b:93:48:07:f7:f7:
ea:57:2a:a4:ba:ee:40:6b:00:66:8d:f2:fe:ba:69:
db:7f:f0:80:28:30:d7:0b:85:45:f3:27:b0:31:e8:
c4:6d:8a:50:49:dc:f9:a3:f9:aa:0c:d3:a3:d3:02:
80:c6:38:26:e8:83:07:56:53:16:57:ee:c3:cb:0f:
98:b4:f6:af:0e:9f:0e:e0:ad:11:6c:e7:f4:b6:a0:
37:c3:39:5f:93:16:8f:07:50:c3:0b:74:5e:3d:6c:
75:cb:b7:6b:3d:55:07:ac:0d:55:c1:f9:ad:9d:6f:
9c:4f:41:58:bd:d7:2a:0b:44:e4:44:1b:2f:1f:77:
d0:5a:df:91:b5:2b:4a:f4:1e:04:fc:a1:5d:78:3d:
e7:6d:50:93:14:f8:24:2e:32:ab:e3:1c:b3:e9:8f:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:25:DA:4B:42:F3:A4:E5:D3:ED:B4:08:B9:C5:FC:E9:C4:9E:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HA0l2ktC86Tl0-20CLnF_OnEnnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.7.0/24
31.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e7:a3:82:13:9c:59:e4:8c:96:93:d5:bb:c1:d7:55:b7:bc:
7f:5c:76:39:25:d0:f6:e3:1b:e5:01:e3:15:0d:b7:eb:51:08:
aa:51:26:1b:5a:82:9c:d0:85:e5:39:b2:59:24:d7:74:17:e8:
28:0e:92:95:a1:4b:58:8d:5f:43:d8:80:43:ac:ac:03:bb:9c:
ea:58:e7:ba:f0:9c:b5:b3:28:78:dd:45:27:1f:1d:12:17:e2:
76:66:9e:c0:43:d7:46:f5:88:d5:3a:33:b2:6f:bd:0e:0a:a1:
da:b2:de:43:8a:ca:1a:94:3e:db:ac:50:df:fb:79:77:ff:41:
bd:88:99:03:ee:f9:de:5d:ce:c8:f6:3f:5e:79:d0:ef:58:fd:
0c:00:02:ba:87:c1:e4:4f:f0:45:28:42:b1:23:cd:94:8f:36:
36:b4:4d:52:7f:3a:30:a1:00:7f:f4:85:11:62:cf:b0:dd:3f:
6a:e9:57:5c:7e:9e:5d:4e:93:03:8e:8b:e6:fd:06:19:e9:f1:
8c:e9:92:4c:27:86:71:23:d7:e7:01:4b:16:f4:d4:b6:a1:ef:
51:85:db:76:9d:51:60:36:5d:d4:a4:fb:0c:50:7d:51:31:41:
9d:f0:04:be:04:a8:90:f1:c8:41:ac:be:e5:31:5c:ae:e6:01:
97:b6:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org