Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QswB6cO1GLvJ8G74Yk_-6nsgMPE.roa
File: QswB6cO1GLvJ8G74Yk_-6nsgMPE.roa (raw, json)
Hash identifier: cOF2TrACepirp58uCbFrRTjWXZVZkHLwVFlW3tEGswU=
Subject key identifier: 42:CC:01:E9:C3:B5:18:BB:C9:F0:6E:F8:62:4F:FE:EA:7B:20:30:F1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192C807A5CEFAC173E57A0F077EF4D4C303
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QswB6cO1GLvJ8G74Yk_-6nsgMPE.roa
Signing time: Sat 26 Oct 2024 08:53:17 +0000
ROA not before: Sat 26 Oct 2024 08:53:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214828
IP address blocks: 31.59.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:07:a5:ce:fa:c1:73:e5:7a:0f:07:7e:f4:d4:c3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 26 08:53:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42cc01e9c3b518bbc9f06ef8624ffeea7b2030f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:a2:73:52:a1:60:f1:21:4c:8e:17:06:9e:
ff:06:8e:7e:91:b2:09:73:6c:19:92:c2:90:54:ce:
b4:05:81:1a:0b:e9:fe:5f:65:4a:dc:83:77:43:b0:
76:07:34:ac:7d:58:80:11:d8:1b:b0:53:0e:c4:37:
5f:93:22:a8:8e:a4:a9:f7:dd:0b:70:9c:fc:3c:b2:
3c:02:ab:44:31:16:7d:08:b6:54:99:d9:e3:a7:9f:
ed:b4:de:ce:d4:02:18:5e:76:91:7e:4a:7e:d5:3b:
71:6b:e5:e7:6a:4b:79:82:cd:b7:fa:0d:a0:b4:89:
52:2a:d4:fd:64:37:dd:d9:c0:43:28:d7:2a:2b:0a:
e1:7e:22:f2:00:8a:f5:f3:33:6e:ba:d3:fd:ae:dd:
63:d9:10:86:d7:a7:eb:c7:52:6b:55:03:3a:89:b9:
91:bc:8f:fd:b2:ac:60:68:2e:a1:dd:5c:af:eb:c8:
bf:2d:2d:d6:98:80:ff:bb:a3:fa:8e:1c:0b:d6:fa:
a7:80:ad:d1:43:30:60:1d:92:64:3e:2b:d7:14:8a:
5d:4b:cb:2a:37:61:74:43:ff:cc:83:fe:0f:6c:a3:
4f:53:cc:30:c9:da:eb:bf:2c:31:e1:04:1a:58:04:
c8:c8:b5:3e:57:55:12:94:95:9c:61:01:03:c1:e9:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CC:01:E9:C3:B5:18:BB:C9:F0:6E:F8:62:4F:FE:EA:7B:20:30:F1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QswB6cO1GLvJ8G74Yk_-6nsgMPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:97:b3:7f:b6:98:50:e6:49:e1:5c:df:f3:88:cf:69:0b:00:
18:e7:93:51:c3:45:de:80:da:da:c9:3a:1c:47:0c:76:ba:d5:
d6:97:09:63:ae:9d:ec:c2:04:35:74:c7:eb:8c:ee:18:f0:99:
99:d3:9d:fd:0d:28:47:74:39:cc:2c:d6:01:e6:1a:7d:96:2b:
8c:ea:13:09:df:37:eb:27:ac:78:ab:7a:ab:ef:18:90:e3:bc:
9c:95:7a:5d:a1:fe:d9:69:72:fc:24:1e:01:fd:c1:33:14:04:
61:2b:e2:96:a2:1a:0e:95:ae:eb:be:4e:13:72:9e:4b:0e:6a:
06:2c:79:b1:83:78:3e:96:d5:b2:2c:b9:9d:df:c2:87:ae:d2:
fa:79:e3:43:64:9b:f7:c8:78:a2:9c:e2:4c:51:47:5b:e0:0a:
61:c3:ee:05:ef:ca:b6:cf:de:4a:00:20:a5:80:01:89:14:c8:
ce:09:3b:6a:cf:64:4c:54:00:df:1e:22:16:59:55:3c:4a:e6:
ff:60:1d:0d:0c:4d:3a:36:dd:20:fe:65:8b:30:e7:40:03:3c:
16:b6:a2:30:27:34:50:82:a8:95:70:2f:cf:80:09:9d:52:29:
79:eb:89:e6:73:70:7a:24:89:a8:4b:b1:7d:fa:58:dc:ec:ec:
1f:66:72:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org