Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TLFwPaGlcv3EHvZjlQuJdFYZnSI.roa
File: TLFwPaGlcv3EHvZjlQuJdFYZnSI.roa (raw, json)
Hash identifier: zABHqtyWpb1M0/E3RHVzRTBa7rkhpFPRMvyKhkR4Sco=
Subject key identifier: 4C:B1:70:3D:A1:A5:72:FD:C4:1E:F6:63:95:0B:89:74:56:19:9D:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192383AC6205DDB31653391F012FB34E9A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TLFwPaGlcv3EHvZjlQuJdFYZnSI.roa
Signing time: Sat 28 Sep 2024 10:43:48 +0000
ROA not before: Sat 28 Sep 2024 10:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53107
IP address blocks: 31.57.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 07:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:3a:c6:20:5d:db:31:65:33:91:f0:12:fb:34:e9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 10:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb1703da1a572fdc41ef663950b897456199d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:06:bd:1c:32:c9:12:3e:d3:b1:08:73:cf:
27:7e:dd:ba:b7:3c:ef:12:d6:ff:19:e0:be:b2:9d:
00:76:58:c2:5d:e0:0c:13:3b:65:c0:1c:55:32:36:
44:45:49:78:23:82:12:d9:60:ab:a0:dc:fc:a7:cf:
50:c6:bb:a5:ff:a5:8c:7d:c8:e9:68:ca:0f:1b:6e:
ec:ee:c7:38:fb:74:97:99:9a:8c:81:71:8e:4a:1a:
a8:d1:44:40:6b:08:67:fa:1d:f7:c6:83:1d:5f:5d:
bb:da:43:61:ad:31:3b:1a:28:0b:8d:66:aa:e5:eb:
57:26:e0:f9:ea:70:92:b2:b3:85:8f:75:0e:9b:12:
d2:14:c4:eb:b3:c0:ac:89:44:fd:ca:65:59:07:58:
98:75:f7:0e:1a:10:b7:65:4d:bc:86:57:13:a9:85:
00:29:93:6a:f8:ea:51:35:28:f0:8b:e0:f2:f9:b9:
0a:75:d0:69:fe:52:ea:f8:a1:74:15:67:cd:76:4a:
19:13:2f:45:69:68:6e:7e:71:f1:40:3a:87:8f:98:
6c:25:a7:66:8b:9d:74:e9:15:46:ca:81:bf:da:9a:
67:67:79:24:16:ed:70:bd:2d:95:a7:14:44:8d:98:
79:04:d0:86:c4:e5:07:3d:96:67:25:ef:3c:51:8c:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:70:3D:A1:A5:72:FD:C4:1E:F6:63:95:0B:89:74:56:19:9D:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TLFwPaGlcv3EHvZjlQuJdFYZnSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.237.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6f:cc:a6:2d:b6:50:1e:0a:da:a7:96:8d:f7:5c:30:78:bb:
c7:49:3b:1b:9a:b1:bd:94:1d:dc:19:d6:6c:d1:fe:c6:ce:cf:
ef:47:fc:5b:0e:4c:79:13:4c:c2:20:a5:ab:fc:71:ed:90:66:
b7:a2:8d:e3:14:c1:fc:7d:f5:fb:44:5e:4a:18:59:59:62:3b:
1d:76:35:4f:ba:39:fa:2f:7a:eb:ef:9a:9a:4e:59:6b:94:90:
61:98:da:39:98:40:59:42:99:fe:f8:b6:91:9b:f8:9a:d6:78:
1a:7d:b8:8d:81:43:c1:87:90:37:c3:bc:30:ef:2e:cf:bf:59:
f7:ca:1b:4d:76:20:07:32:6e:07:58:31:82:a0:fe:c1:13:5d:
0d:22:9a:c4:d8:4c:b2:4f:1c:d6:62:7b:c9:ff:85:e3:e6:00:
2a:9a:fc:c9:18:c1:53:9f:05:9f:8d:f6:fa:ce:b4:26:7d:f8:
40:1c:17:d5:88:b7:6e:ed:81:a3:f1:4e:e2:1c:75:1f:f2:a7:
c1:b6:af:59:e0:3b:1f:30:5b:ab:23:87:70:5e:51:75:8a:35:
32:a3:8f:5c:49:58:fa:0a:b9:ba:a3:27:7e:10:91:a3:4e:b3:
70:6f:09:20:83:fb:29:2b:ec:52:7b:86:52:44:f0:3e:6a:5c:
aa:0f:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:51:30 2024 by rpki-client on console-ams.rpki-client.org