Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxOD5eIcyTONXrIs0aLvxTSELYA.roa
File: PxOD5eIcyTONXrIs0aLvxTSELYA.roa (raw, json)
Hash identifier: 0ie6JQCujiYm51feY2GbQg7TfGZklGdxZuwky8/QtUM=
Subject key identifier: 3F:13:83:E5:E2:1C:C9:33:8D:5E:B2:2C:D1:A2:EF:C5:34:84:2D:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019299AF5585E967D3A70ABA65DBDC7711DE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxOD5eIcyTONXrIs0aLvxTSELYA.roa
Signing time: Thu 17 Oct 2024 08:54:17 +0000
ROA not before: Thu 17 Oct 2024 08:54:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400529
IP address blocks: 31.59.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:af:55:85:e9:67:d3:a7:0a:ba:65:db:dc:77:11:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 08:54:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f1383e5e21cc9338d5eb22cd1a2efc534842d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:7b:7d:f2:ad:29:2b:cc:91:38:66:3f:1b:
5e:33:a0:4d:88:7f:1d:dc:10:7d:cf:51:55:15:a2:
a4:e2:5f:73:e5:c8:50:c5:04:82:5c:0c:bb:d1:d6:
de:0c:4c:c7:d4:4d:fa:07:b7:f4:3b:51:5a:01:fc:
3c:1d:2a:2a:ec:6b:b1:71:e4:c5:89:b4:bc:a8:1f:
56:f8:10:c5:92:d8:7d:ff:05:ae:4a:ad:66:70:65:
83:7c:4c:89:16:2d:ef:9f:9a:9c:73:ea:01:02:50:
3a:14:69:ac:6a:d3:c2:bf:f2:79:f8:f6:9f:45:53:
c9:71:7d:64:ff:8a:5d:8a:91:e0:44:8f:1b:02:83:
54:db:db:b5:da:85:5d:b1:2c:20:2c:f1:ee:2e:fb:
7f:8c:59:14:b6:00:99:79:01:fd:e6:8f:27:d3:91:
14:a8:6f:2f:90:25:e5:97:87:f0:e0:67:a3:d5:c4:
a7:6e:de:44:e1:bb:9f:85:93:04:f7:f2:c8:21:64:
d1:3e:a6:03:e7:67:9e:01:52:ca:b9:62:b4:df:03:
f4:0e:78:02:4a:6a:bd:3d:b9:e9:8d:62:ff:67:ce:
7a:c1:be:b4:9e:8d:68:1c:bd:cf:ab:7c:29:ff:74:
3c:43:f6:58:3f:0d:47:98:11:34:25:ef:f2:37:de:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:83:E5:E2:1C:C9:33:8D:5E:B2:2C:D1:A2:EF:C5:34:84:2D:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PxOD5eIcyTONXrIs0aLvxTSELYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:6b:d9:e2:b3:8a:3a:73:73:7e:f4:10:f6:5e:e8:f4:b8:
2b:05:14:87:7a:91:12:81:7f:ec:a8:16:31:b8:bd:71:f3:0a:
ca:b5:83:1d:77:14:2a:ad:b4:a2:3b:d8:97:a2:39:a3:e1:de:
e8:f3:d8:22:f1:ec:40:d4:3b:f8:1b:52:b3:1e:ec:8a:19:a7:
46:01:a2:45:a0:ba:7c:87:e0:18:9f:c7:39:6d:ea:fc:f2:3a:
bb:68:22:2f:a1:76:68:b7:9e:14:3b:48:e2:b6:56:30:c5:f7:
a7:27:99:9d:8e:b8:c2:c4:ac:7b:2e:bb:13:3e:ea:c9:df:0d:
ba:76:1f:85:0b:60:44:28:a3:ee:d2:c2:bf:ac:5a:5f:49:34:
75:99:26:6d:67:c6:aa:be:f0:7d:63:14:7d:fe:f4:61:67:f6:
62:87:1b:b2:d4:d7:a7:a3:70:e5:b2:b1:94:40:c2:45:33:20:
b3:77:33:55:d2:a9:c5:92:f9:81:ad:22:75:37:68:9c:53:79:
98:7e:10:6f:e8:d9:26:37:9f:9b:e8:79:00:82:3a:7d:62:d6:
88:7f:ce:59:01:90:44:a9:37:79:14:04:13:a4:0a:29:e0:5c:
19:a2:56:cf:76:93:86:d6:a1:36:b1:83:7b:18:e6:62:36:55:
76:d4:e4:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKZr1WF6WfTpwq6ZdvcdxHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE3MDg1NDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjEzODNlNWUyMWNjOTMzOGQ1ZWIyMmNkMWEyZWZjNTM0ODQyZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfx7ffKtKSvMkThmPxteM6BNiH8d
3BB9z1FVFaKk4l9z5chQxQSCXAy70dbeDEzH1E36B7f0O1FaAfw8HSoq7GuxceTF
ibS8qB9W+BDFkth9/wWuSq1mcGWDfEyJFi3vn5qcc+oBAlA6FGmsatPCv/J5+Paf
RVPJcX1k/4pdipHgRI8bAoNU29u12oVdsSwgLPHuLvt/jFkUtgCZeQH95o8n05EU
qG8vkCXll4fw4Gej1cSnbt5E4bufhZME9/LIIWTRPqYD52eeAVLKuWK03wP0DngC
Smq9PbnpjWL/Z856wb60no1oHL3Pq3wp/3Q8Q/ZYPw1HmBE0Je/yN94xrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8Tg+XiHMkzjV6yLNGi78U0hC2AMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUHhPRDVlSWN5VE9OWHJJczBhTHZ4VFNFTFlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzs7MA0G
CSqGSIb3DQEBCwUAA4IBAQBfxmvZ4rOKOnNzfvQQ9l7o9LgrBRSHepESgX/sqBYx
uL1x8wrKtYMddxQqrbSiO9iXojmj4d7o89gi8exA1Dv4G1KzHuyKGadGAaJFoLp8
h+AYn8c5ber88jq7aCIvoXZot54UO0jitlYwxfenJ5mdjrjCxKx7LrsTPurJ3w26
dh+FC2BEKKPu0sK/rFpfSTR1mSZtZ8aqvvB9YxR9/vRhZ/Zihxuy1Neno3DlsrGU
QMJFMyCzdzNV0qnFkvmBrSJ1N2icU3mYfhBv6NkmN5+b6HkAgjp9YtaIf85ZAZBE
qTd5FAQTpAop4FwZolbPdpOG1qE2sYN7GOZiNlV21OTJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org