Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HSYRzqZN5tRSNr7udiit1REQSUc.roa
File: HSYRzqZN5tRSNr7udiit1REQSUc.roa (raw, json)
Hash identifier: b71IPNtLHf6uNBvvrwtHOREOA6eXZFEIbNXDwpr1vdo=
Subject key identifier: 1D:26:11:CE:A6:4D:E6:D4:52:36:BE:EE:76:28:AD:D5:11:10:49:47
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192F614A8386D33F4259C56FE43379E7405
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HSYRzqZN5tRSNr7udiit1REQSUc.roa
Signing time: Mon 04 Nov 2024 07:30:01 +0000
ROA not before: Mon 04 Nov 2024 07:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213929
IP address blocks: 31.59.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:14:a8:38:6d:33:f4:25:9c:56:fe:43:37:9e:74:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 4 07:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d2611cea64de6d45236beee7628add511104947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:79:af:fd:eb:7f:ac:fd:c7:f3:54:0a:03:
d3:b2:81:64:f6:65:7e:79:5a:fa:d3:cc:a4:4d:3e:
af:81:b4:d6:18:c1:5d:a7:9b:94:58:db:86:a3:84:
69:c5:3a:ba:4b:73:c7:13:d0:6b:21:8a:bc:70:d4:
04:53:85:07:8e:2f:2d:10:e2:21:3f:29:e5:ba:b7:
0f:a1:ad:22:b3:f5:73:f6:c4:1f:7d:43:20:9d:5e:
24:ba:9b:32:12:b8:45:4f:93:5b:43:eb:a7:da:19:
6b:23:86:04:dc:47:a9:43:dc:65:04:43:b8:4e:bd:
6a:0b:0d:2a:21:6a:9a:56:5c:35:af:7d:19:c3:e3:
cf:78:21:5f:2a:21:b6:5b:02:51:6e:42:d9:c9:e4:
01:45:85:34:49:ad:3c:43:d4:10:6c:2b:95:23:f6:
ae:1b:0d:66:3d:24:94:76:96:d5:fc:35:d9:09:96:
5a:4a:f9:93:1c:59:d2:55:72:7e:44:2b:81:61:49:
50:40:dd:9b:6e:89:e7:35:c0:93:90:e8:aa:58:7b:
8a:db:9f:d1:19:1c:fe:b2:52:a9:bb:a4:fe:91:86:
e4:d2:57:bb:83:e0:54:3a:30:bb:19:75:66:26:72:
4e:ba:25:30:8e:d8:5c:91:fc:cd:31:cb:c2:ae:58:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:11:CE:A6:4D:E6:D4:52:36:BE:EE:76:28:AD:D5:11:10:49:47
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HSYRzqZN5tRSNr7udiit1REQSUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3f:d2:6f:c4:bd:57:ea:70:e8:b3:45:b5:8d:fa:f9:c7:4e:
42:21:9e:ab:46:77:07:f7:0d:57:e9:18:82:a6:13:8f:ae:02:
c0:53:e1:e0:64:c2:a6:1b:32:16:68:b7:b2:19:58:33:78:bc:
8f:0d:56:39:6b:1f:10:f6:8e:6e:47:a4:bd:d5:c9:e2:d5:e8:
4c:39:c4:a8:14:a7:de:e5:57:a8:54:53:f9:b9:aa:dd:7d:4b:
f6:25:1d:88:cc:4a:22:44:e0:82:d6:9c:13:ec:bf:4a:4b:e3:
70:35:e3:90:d8:09:c2:7a:06:4a:ef:b2:dd:b0:ed:db:ef:90:
ff:56:5b:09:12:dc:48:dd:f0:2c:a5:4a:2e:ce:4f:c4:1d:b9:
ac:f5:8f:28:ad:82:d1:f1:cb:b6:59:21:0d:44:c6:7e:5e:d7:
4e:13:eb:90:78:62:c9:10:3e:7e:7c:1e:79:35:44:a3:87:d8:
54:e4:1a:a8:9c:ff:95:6c:c5:88:57:38:28:b0:ee:80:cf:94:
79:6f:f0:a1:17:f7:1e:5e:e0:23:b8:c1:4a:5c:b4:6b:61:b8:
18:92:71:b1:46:71:30:87:76:97:52:bc:e8:ff:17:21:35:b6:
73:d9:7d:d2:77:d7:2b:58:a3:03:ac:05:e4:d4:97:00:15:eb:
4e:7c:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org