Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tczczv4pr-DlmAXyMKlRAaTf1h4.roa
File: Tczczv4pr-DlmAXyMKlRAaTf1h4.roa (raw, json)
Hash identifier: GLZbvyi1v05I2rWq+5jM8VotKrK5VfeTXlLcKR6VCT4=
Subject key identifier: 4D:CC:DC:CE:FE:29:AF:E0:E5:98:05:F2:30:A9:51:01:A4:DF:D6:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192D949FBCA1AA87146D65A1847C7F6B957
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tczczv4pr-DlmAXyMKlRAaTf1h4.roa
Signing time: Tue 29 Oct 2024 17:19:17 +0000
ROA not before: Tue 29 Oct 2024 17:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211407
IP address blocks: 31.56.78.0/24 maxlen: 24
31.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:49:fb:ca:1a:a8:71:46:d6:5a:18:47:c7:f6:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 17:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dccdccefe29afe0e59805f230a95101a4dfd61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:35:21:55:24:36:87:3a:86:9c:78:85:83:
f6:48:60:df:65:3c:99:ad:36:3d:6e:09:7d:fb:30:
5c:0e:df:2e:e7:ea:e4:7e:45:89:71:bf:ad:14:db:
9d:0b:79:f5:16:62:a0:00:07:4e:22:a2:7f:40:79:
eb:bc:e0:2e:7d:b9:3c:6e:de:f9:0f:8f:b7:96:31:
e2:93:49:c0:4f:98:43:15:40:13:8c:42:19:b6:ff:
42:49:8b:61:5a:36:4b:1e:c2:e1:8e:dc:89:1a:93:
b8:66:03:ff:db:55:55:2b:64:d7:08:7c:bb:b4:de:
73:52:93:81:11:0f:96:ad:fb:cd:6f:f6:71:03:7a:
29:80:88:2f:fe:d2:ca:b3:40:b8:65:c0:c5:e7:7f:
98:ba:46:2a:64:a5:50:11:fe:53:07:80:4c:a9:29:
97:db:62:05:b4:4e:7a:b8:6e:b0:eb:a5:29:31:e8:
f0:90:c5:49:be:dd:80:00:0f:54:a0:12:63:9c:4f:
9e:76:68:9d:b0:04:e5:57:ef:83:b0:17:03:d1:7c:
49:3f:2f:c7:25:17:10:79:c0:5a:86:eb:7d:38:4b:
be:1f:9f:87:a5:fb:98:60:c5:61:e9:b2:85:0a:70:
9f:c0:3e:bd:83:a2:3d:ed:0d:d5:b0:0f:52:fc:0c:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:DC:CE:FE:29:AF:E0:E5:98:05:F2:30:A9:51:01:A4:DF:D6:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Tczczv4pr-DlmAXyMKlRAaTf1h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.78.0/24
31.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ab:23:e3:72:b4:5f:16:13:b9:f9:7c:7c:2f:3b:a4:eb:27:
f0:3b:df:c8:68:d8:8f:12:90:62:f6:4a:43:8a:c8:d3:b3:2e:
49:63:f9:3b:21:b6:02:88:94:2d:49:d3:8f:5a:ca:96:79:fa:
9a:63:ff:d4:26:41:35:0f:17:26:b9:13:17:32:56:d7:68:2f:
a9:68:7c:40:b3:eb:29:84:77:94:b5:7e:c8:49:78:25:12:26:
7c:21:04:65:28:cd:96:7b:9e:e1:31:aa:33:45:c2:5d:38:e4:
42:22:8d:1b:7e:54:33:95:af:a5:57:90:3b:4f:13:cb:1e:79:
ad:36:be:be:ad:22:14:76:71:a3:b8:7a:e9:88:bb:59:75:03:
37:96:f5:b4:96:da:6e:43:c3:58:13:83:08:11:6a:62:fe:4b:
10:dd:93:f6:24:85:53:9f:c2:ff:ce:e5:13:74:a3:4b:d9:27:
25:74:33:11:0a:02:d9:da:56:f8:4a:41:8b:10:11:da:b7:14:
19:7c:c8:7d:c0:21:d2:98:ad:e6:8c:49:36:a4:83:a0:f5:8f:
03:50:b3:20:a2:79:67:ac:be:75:ad:7f:7f:01:62:bd:20:59:
3c:d9:8b:0f:39:cd:45:19:8f:83:0a:d9:db:00:d2:50:d8:50:
35:91:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:42 2024 by rpki-client on console-fra.rpki-client.org