Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOxxsnWF6sr7Dn2ULHeJ20CEzaM.roa
File: JOxxsnWF6sr7Dn2ULHeJ20CEzaM.roa (raw, json)
Hash identifier: iZmKU4uSB8rluQHonEhnXwrBBNUB3Zr7S83BBJVT95I=
Subject key identifier: 24:EC:71:B2:75:85:EA:CA:FB:0E:7D:94:2C:77:89:DB:40:84:CD:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193AD4E31747F219BF061324599822604D0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOxxsnWF6sr7Dn2ULHeJ20CEzaM.roa
Signing time: Mon 09 Dec 2024 21:23:23 +0000
ROA not before: Mon 09 Dec 2024 21:23:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.58.96.0/22 maxlen: 24
31.58.116.0/22 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.52.0/22 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 04:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:4e:31:74:7f:21:9b:f0:61:32:45:99:82:26:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 9 21:23:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ec71b27585eacafb0e7d942c7789db4084cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:21:a4:d9:9e:2e:54:3b:72:4c:6b:5b:42:
c3:80:47:a3:40:03:70:f6:0d:76:a6:c3:46:fb:9c:
05:ae:9a:1c:9a:f7:cd:69:96:e7:6b:13:59:fc:3a:
42:7e:c5:b7:e9:cb:8a:9b:e2:d0:42:88:d2:a5:75:
0a:75:d6:af:43:37:3a:c2:15:4f:a5:f2:e5:4c:dc:
92:44:db:c9:34:bb:02:b6:3c:3c:1a:8f:07:96:1c:
ba:0f:cd:5e:42:27:86:20:64:8c:48:06:33:18:7a:
e5:1d:d9:d0:81:41:99:7b:2b:e0:4b:2a:1e:7e:33:
c3:ab:11:90:4d:a6:f0:35:05:e7:d9:cf:ad:26:77:
48:73:8d:ae:2a:9f:01:45:b4:3d:93:1e:58:fd:f2:
91:a9:70:b8:d7:75:33:57:7a:bb:70:65:c0:78:68:
61:c1:e5:df:24:c0:6e:f4:bc:ee:0d:9e:f0:11:80:
2d:85:bc:bc:2a:59:07:7e:9e:19:a8:0f:76:88:b8:
e3:15:40:a1:c9:3b:27:db:d4:be:f5:90:b5:1b:83:
51:cb:c3:e7:4f:3f:75:3f:54:b3:2b:5f:a1:2e:df:
de:86:f7:0d:02:e8:9f:99:e2:d2:0a:a8:f3:43:b6:
89:d3:98:72:37:65:35:c1:3a:7e:7c:69:08:86:19:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:71:B2:75:85:EA:CA:FB:0E:7D:94:2C:77:89:DB:40:84:CD:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JOxxsnWF6sr7Dn2ULHeJ20CEzaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.119.0/24
31.56.128.0-31.56.137.255
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.58.96.0/22
31.58.116.0/22
31.59.0.0-31.59.9.255
31.59.52.0/22
31.59.246.0/23
Signature Algorithm: sha256WithRSAEncryption
50:30:d5:72:f6:08:06:19:51:0a:1e:8e:a1:07:1d:bd:40:ef:
97:fe:88:9e:d2:2c:44:85:9c:8a:ed:ba:cf:e1:99:a6:b4:98:
f7:63:71:6e:7f:fe:bb:af:37:74:95:47:95:79:10:7b:a7:d9:
ed:df:22:4f:bb:83:e8:f7:09:b8:3e:68:e8:f9:bf:cd:2a:2f:
38:6b:10:bf:b8:4e:69:33:6e:e4:3d:26:93:6e:42:90:b4:a6:
ac:ff:fe:c9:ce:e3:51:e8:f4:6c:da:7c:75:9f:dd:82:d3:6a:
92:73:b5:bd:3c:d5:c9:74:34:b5:3c:16:c6:10:b9:0d:a1:96:
7f:83:af:67:36:69:bb:3f:bd:8b:5c:7f:88:f2:cd:52:3c:87:
d0:55:93:e9:4a:43:fc:4a:21:bb:ae:c9:68:6e:12:b9:bf:47:
01:01:92:a2:9b:85:7d:25:11:f4:8f:58:03:b0:4e:92:ee:cf:
01:09:20:d8:cc:f8:af:ac:94:01:bd:2a:49:ce:eb:73:aa:82:
b3:ff:0b:1d:51:e7:66:fb:13:37:69:b4:4b:13:8a:ce:1a:d0:
b8:bd:a2:c5:31:e5:1f:46:6e:9c:8c:17:eb:a2:40:07:60:31:
45:cd:dd:09:b8:cf:b2:e2:82:72:f9:80:62:78:79:08:70:c7:
7c:47:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 13:31:47 2024 by rpki-client on console-ams.rpki-client.org