Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/STlU18BQDmT9Gye4LMXbhPvhXeQ.roa
File: STlU18BQDmT9Gye4LMXbhPvhXeQ.roa (raw, json)
Hash identifier: 6lep6po2Pbd8njKQ3Qh3XP4CcC16cZ3mM1tBJB8CNyQ=
Subject key identifier: 49:39:54:D7:C0:50:0E:64:FD:1B:27:B8:2C:C5:DB:84:FB:E1:5D:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01915C70D101157BB341F4761AEA9DB46C09
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/STlU18BQDmT9Gye4LMXbhPvhXeQ.roa
Signing time: Fri 16 Aug 2024 18:26:22 +0000
ROA not before: Fri 16 Aug 2024 18:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138156
IP address blocks: 31.56.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5c:70:d1:01:15:7b:b3:41:f4:76:1a:ea:9d:b4:6c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 18:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=493954d7c0500e64fd1b27b82cc5db84fbe15de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:30:e5:4a:75:75:b5:22:d2:ef:fb:85:aa:
55:a8:5f:57:55:89:6d:b8:69:c6:26:c3:14:c7:80:
54:56:e9:a9:cb:05:ee:9b:07:cb:48:77:11:06:b3:
98:e7:e1:63:82:e0:84:79:93:64:8c:03:33:6e:d1:
61:0f:28:d1:98:33:f7:5d:8c:b2:78:41:a8:07:57:
77:89:e0:9e:55:e2:47:0c:fb:fa:13:11:8e:dc:5a:
75:09:37:2a:3a:46:79:47:d4:d0:1f:42:a3:f0:5c:
4f:09:5d:6a:26:a1:2e:a9:f8:ee:bc:b7:6c:13:83:
12:78:c0:c3:4e:61:07:77:b4:92:d5:59:eb:7c:83:
56:89:5a:e9:ad:de:00:90:d7:a7:e8:38:91:c3:b8:
8e:a6:1a:ef:66:3e:29:8a:1f:bb:fc:22:7e:90:1a:
a4:d6:de:2e:6b:90:ee:64:35:75:b2:d3:1a:0f:75:
11:43:73:d2:d4:a7:e8:40:24:97:1a:93:2e:d8:30:
7a:3c:6b:b6:25:f7:7c:57:41:50:e5:b1:37:4a:76:
80:36:72:1b:30:29:f0:1e:fc:ea:dc:db:44:45:d0:
ce:39:b6:66:d3:ac:be:35:9e:f7:43:b6:21:28:6c:
fc:8f:e9:99:ce:45:17:f2:74:d1:cf:2e:7d:e2:71:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:54:D7:C0:50:0E:64:FD:1B:27:B8:2C:C5:DB:84:FB:E1:5D:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/STlU18BQDmT9Gye4LMXbhPvhXeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.79.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fc:17:e1:ab:bd:49:f8:81:56:e8:91:e2:e1:d7:a1:ab:ca:
fd:20:e5:c9:8f:09:7f:20:35:70:0c:ed:ef:52:8d:55:cc:bf:
74:f1:48:6e:4e:a7:85:f4:3f:1f:93:be:50:45:74:8b:5b:b4:
8f:cc:9b:8a:5d:9a:6c:0e:d7:4f:6c:b1:50:fd:b8:f5:f4:53:
8c:60:79:1d:0a:50:c6:c1:c6:4d:f1:16:5b:0f:68:a6:80:8c:
71:0f:f1:91:83:dc:f6:bc:b6:a9:10:e2:9c:b8:37:ea:cc:e4:
a5:57:03:09:4a:00:05:d1:cd:58:90:d2:e8:2f:7e:d8:69:56:
f3:ec:06:43:a5:4e:65:e7:fb:5e:96:c5:fd:a5:c4:74:08:42:
b0:cf:0c:9f:ed:d0:1a:4a:63:ae:0e:01:ef:4c:8c:41:2a:fd:
3c:37:61:5d:33:96:53:f9:4a:78:94:8b:bb:08:f9:5a:d7:02:
84:e6:e8:a2:31:19:68:40:28:00:38:f1:73:91:dc:32:aa:9b:
c0:9e:06:b0:35:29:71:09:2a:6a:2e:e8:88:72:56:0b:90:cd:
3f:89:0b:3a:0e:15:7d:65:dc:2c:58:22:3b:b1:fd:ac:c1:a1:
dc:0a:90:eb:43:7c:c4:ed:30:06:ac:70:f8:36:b0:08:18:23:
a5:7d:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:38:12 2024 by rpki-client on console-fra.rpki-client.org