Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UfCBjTL2OLaJrfbKBA0q8dzatng.roa
File: UfCBjTL2OLaJrfbKBA0q8dzatng.roa (raw, json)
Hash identifier: rDKgWbAr1lj5A1/a0NGc61w356Mm19sUdf1laXgHN9w=
Subject key identifier: 51:F0:81:8D:32:F6:38:B6:89:AD:F6:CA:04:0D:2A:F1:DC:DA:B6:78
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192EBB59FE11780A2065E374EF623712FFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UfCBjTL2OLaJrfbKBA0q8dzatng.roa
Signing time: Sat 02 Nov 2024 07:10:01 +0000
ROA not before: Sat 02 Nov 2024 07:10:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214819
IP address blocks: 31.58.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:b5:9f:e1:17:80:a2:06:5e:37:4e:f6:23:71:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 07:10:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51f0818d32f638b689adf6ca040d2af1dcdab678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:c6:08:f5:61:d0:a9:dd:2c:24:7d:67:c0:
71:95:00:4f:1f:bc:d7:9a:84:b2:c8:f6:0f:cd:ed:
04:11:2e:05:5a:24:d6:fe:ea:73:42:ca:9f:8d:63:
fc:a6:69:fa:1b:43:36:87:e2:5c:48:7e:b6:3d:8e:
51:db:b5:fd:ba:18:6b:96:4a:83:3d:08:26:90:1c:
dd:db:71:d8:0d:42:3e:69:62:4f:f6:f1:c4:34:c1:
f5:80:7f:5f:81:8a:22:2a:64:ef:96:19:72:e4:81:
31:e1:b2:87:6a:70:c2:f1:2c:07:b8:9a:60:8a:db:
0f:25:b6:ba:1e:4f:30:71:e1:4a:60:70:af:9a:89:
c0:cf:ad:b7:15:f1:42:e8:8b:3f:be:4e:3d:df:ce:
f3:23:78:88:2d:92:69:39:a4:c6:d7:2d:92:b4:e1:
b7:91:63:f4:78:3f:4f:ff:6d:aa:67:f1:7b:68:cf:
7c:d4:cd:20:fb:7e:fc:bc:12:77:23:2f:8b:67:59:
e8:e8:21:50:79:e8:a8:0e:d3:32:c9:be:ad:fb:0f:
e2:e0:3f:a9:71:02:17:48:bc:81:a2:42:0b:fe:97:
b4:d3:07:ed:e3:75:95:fe:8c:20:25:da:e8:61:35:
e3:da:02:97:57:34:1a:b0:4b:5f:c4:3e:e6:42:e1:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:81:8D:32:F6:38:B6:89:AD:F6:CA:04:0D:2A:F1:DC:DA:B6:78
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UfCBjTL2OLaJrfbKBA0q8dzatng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8b:81:e1:55:c5:d8:d8:2e:63:2b:99:07:80:60:0d:e2:6b:
f7:fe:7a:b6:f1:7e:64:76:0e:bf:79:95:5e:71:04:32:96:13:
22:62:87:36:13:f5:c1:56:5f:52:dc:8e:e8:a9:f9:0b:15:19:
46:2f:b7:22:67:c5:df:e1:69:0b:2b:8e:37:92:f6:f5:ea:88:
aa:e3:29:88:2c:e9:7c:4d:02:dd:c4:c2:4d:f2:c8:77:c6:96:
b2:c6:07:7d:f9:63:fa:bf:f9:d7:9d:c6:fd:25:2d:be:34:26:
78:dd:e8:34:03:0b:be:bd:c8:00:fe:51:a5:b7:86:2c:7d:8e:
41:a0:22:d6:3a:40:e4:b3:a3:4d:a9:87:ed:ef:07:3b:89:97:
d4:c1:ef:3b:ee:f4:3a:44:71:e0:2c:b8:c8:42:c8:31:1d:07:
c5:10:9f:d2:6b:48:5a:71:1a:68:20:73:9f:48:d2:80:27:34:
a5:47:3e:51:13:94:0d:b9:fa:28:bc:6a:db:20:2d:1a:6b:c0:
69:87:4a:15:d8:ac:f8:54:27:15:c6:5f:c6:bd:84:5b:a7:e7:
65:94:cb:f8:3d:e3:6e:32:8c:25:f6:2b:6e:6b:b8:6d:74:c5:
ec:e4:ec:06:18:32:14:41:b1:07:b3:57:9e:57:90:5c:09:17:
01:17:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org