Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MinINBoZua-S7pExQiwSv-cW3rw.roa
File: MinINBoZua-S7pExQiwSv-cW3rw.roa (raw, json)
Hash identifier: 3Y6jBdEaSOb8lesfT/HfIWlmybobUpPUcG78xP9v1jg=
Subject key identifier: 32:29:C8:34:1A:19:B9:AF:92:EE:91:31:42:2C:12:BF:E7:16:DE:BC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191DBB355890B346C2381CE55836127121D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MinINBoZua-S7pExQiwSv-cW3rw.roa
Signing time: Tue 10 Sep 2024 11:30:48 +0000
ROA not before: Tue 10 Sep 2024 11:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214375
IP address blocks: 31.56.46.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:b3:55:89:0b:34:6c:23:81:ce:55:83:61:27:12:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 11:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3229c8341a19b9af92ee9131422c12bfe716debc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:e9:5c:62:2d:4e:b2:47:a0:7f:a9:0c:4f:
fd:52:f0:eb:6a:7d:e8:05:ad:a0:ca:94:a0:35:16:
8c:b5:97:cf:ff:81:a2:d7:37:06:a6:30:13:7d:c9:
7e:44:ec:33:a7:a6:13:db:bd:af:4a:9a:8a:e7:1d:
fc:80:5c:c4:87:72:6c:92:08:01:ad:88:0d:5d:53:
e4:c1:13:fb:6d:e2:fc:af:55:88:ed:bf:70:4c:d4:
83:d2:45:df:5f:be:cd:b1:1b:61:58:a1:d4:15:aa:
15:3b:b8:c0:5a:53:e8:d6:4a:40:89:1c:d5:22:19:
34:a6:fb:48:10:3c:c9:df:c2:f1:96:13:a0:9c:b0:
74:34:63:d7:8a:a6:dd:50:a1:46:dc:68:bf:31:5f:
ab:06:e0:21:60:9a:03:05:17:aa:9e:b2:4a:e1:9d:
b3:e5:c6:f6:a3:14:a9:24:02:85:86:d3:ea:29:f5:
aa:a4:d2:bc:94:ed:eb:39:c0:96:5f:62:30:30:b3:
7b:d7:4d:79:51:70:0f:fc:2d:85:dd:34:69:63:24:
ed:fb:97:76:d0:b3:51:20:61:99:0e:fc:ae:6b:33:
1b:15:6c:10:7e:ed:34:aa:9b:7f:1a:26:a4:8f:6b:
10:0c:b8:a5:4a:49:a5:56:2a:34:b7:f1:a1:1f:f7:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:C8:34:1A:19:B9:AF:92:EE:91:31:42:2C:12:BF:E7:16:DE:BC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MinINBoZua-S7pExQiwSv-cW3rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.57.157.0-31.57.158.255
Signature Algorithm: sha256WithRSAEncryption
63:5c:1a:d9:ea:c4:80:a1:10:ca:b7:3a:c7:1e:9f:12:b4:e1:
02:80:32:cc:17:bd:e1:0a:ab:f6:e3:29:b8:6f:a3:37:b3:39:
27:26:52:4f:43:85:c4:66:2b:78:93:32:aa:84:7f:1c:d8:89:
45:40:19:33:2b:1a:e4:27:8b:3c:05:32:e3:ec:f8:c4:9b:e0:
40:2c:bf:a3:5d:1a:7f:6e:eb:3a:5e:c3:c3:be:70:51:58:82:
47:bd:eb:c8:20:93:86:a2:81:eb:10:b6:6a:2e:bd:61:bd:8a:
ce:77:82:d7:50:0a:ee:cb:d5:ae:0e:c1:72:46:58:27:32:b0:
6d:af:aa:96:72:d8:d3:e6:c8:7e:01:22:e8:e9:d3:9c:43:f6:
b4:6e:b1:9d:39:70:51:a6:5e:e2:9d:99:7a:f5:55:38:c2:08:
4c:75:3a:b0:6a:17:f8:46:0c:52:62:4b:2e:00:64:58:76:e6:
bc:0b:65:2e:b6:66:2e:dc:77:1c:e7:1b:c9:94:f8:ab:c6:73:
9f:3e:cb:00:e4:77:19:3a:bb:f7:ae:8e:d5:eb:d7:95:3b:fb:
af:18:8b:9e:4a:78:d0:a2:43:59:81:70:4c:1d:00:f8:96:84:
a8:92:1b:01:d7:f5:53:0e:81:7b:4d:e5:bf:85:da:a5:77:e4:
8b:05:48:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org