Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiAIfe9MvtGwZscp0mAau83jpvI.roa
File: UiAIfe9MvtGwZscp0mAau83jpvI.roa (raw, json)
Hash identifier: kR3W7CYUmh+1vthsDnnBjdiS3dbVeKNfoz2kl7ypZno=
Subject key identifier: 52:20:08:7D:EF:4C:BE:D1:B0:66:C7:29:D2:60:1A:BB:CD:E3:A6:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193406CC52BAF941E9537FB5330F0FAE55F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiAIfe9MvtGwZscp0mAau83jpvI.roa
Signing time: Mon 18 Nov 2024 17:58:10 +0000
ROA not before: Mon 18 Nov 2024 17:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 31.57.89.0/24 maxlen: 24
31.58.11.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.25.0/24 maxlen: 24
31.58.27.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.59.12.0/24 maxlen: 24
31.59.16.0/24 maxlen: 24
31.59.17.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.26.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:40:6c:c5:2b:af:94:1e:95:37:fb:53:30:f0:fa:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 18 17:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5220087def4cbed1b066c729d2601abbcde3a6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:25:9d:ad:bf:9b:7e:fe:10:be:c5:f0:44:
48:8f:20:60:2a:07:49:c7:fe:56:87:10:fc:47:0b:
89:4e:df:75:a6:74:db:7b:8e:5c:d8:b2:fb:ec:8e:
91:41:e6:93:b4:e7:d1:ea:cb:ee:4a:4c:8a:1d:77:
81:92:b9:e5:6a:ad:8f:30:28:19:97:c4:3e:dd:80:
a5:00:22:4c:50:ed:b7:95:52:30:c4:d7:85:14:78:
e2:e1:b0:d4:2c:0b:54:4d:b3:02:a9:43:e8:48:b4:
f1:04:95:7b:d4:80:71:75:88:64:19:e0:92:2b:2f:
8d:57:7f:25:3e:bc:73:4f:fe:3f:af:2f:f3:87:7a:
5b:a1:d8:5a:a1:d3:61:5e:d4:da:c4:9a:fe:8b:89:
6b:1f:52:e7:3f:94:8d:82:a6:58:d8:7d:a9:96:13:
a6:0b:2f:7e:71:e5:31:4c:31:c8:ae:b6:cc:03:95:
14:9d:e4:e7:d7:60:4a:e1:dc:78:ba:74:c7:48:97:
f5:65:35:39:8e:ce:e7:fe:5a:2a:e2:8d:31:93:ce:
db:6e:41:a8:de:20:47:63:74:ba:ed:c6:f4:89:de:
81:a3:f8:d9:c9:a5:27:bf:37:25:3e:e1:dd:d5:c8:
5d:24:10:0d:c6:8d:42:62:f4:f3:71:5c:b5:03:7d:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:08:7D:EF:4C:BE:D1:B0:66:C7:29:D2:60:1A:BB:CD:E3:A6:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UiAIfe9MvtGwZscp0mAau83jpvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.89.0/24
31.58.11.0/24
31.58.17.0/24
31.58.25.0/24
31.58.27.0/24
31.58.31.0/24
31.59.12.0/24
31.59.16.0/23
31.59.23.0/24
31.59.26.0/24
31.59.31.0-31.59.32.255
Signature Algorithm: sha256WithRSAEncryption
08:e4:fc:05:41:54:01:62:4d:7b:fd:41:1b:b1:2c:c5:c4:65:
98:2a:09:be:54:32:e8:be:86:66:af:7c:f5:48:62:f8:43:82:
18:62:c3:2c:bb:00:d4:fb:f8:ff:cd:e4:4e:6d:8f:a8:15:5f:
92:5e:77:e8:62:bf:d1:fb:53:d2:bf:db:51:57:02:37:52:8d:
5b:b9:fa:5a:94:59:48:f0:fe:88:82:b7:9a:78:f0:0c:09:65:
dd:ec:48:8b:a6:c5:c0:ab:11:cf:85:26:61:43:26:72:d6:38:
3e:4d:58:22:23:be:d7:26:ab:34:66:3a:10:9c:65:e6:84:61:
b8:ec:f3:6a:7e:10:67:0d:cb:a0:0f:69:52:58:33:2c:5f:5f:
56:a7:07:9f:96:aa:62:7d:c9:07:70:86:14:d3:72:59:2a:1a:
be:78:02:7a:5c:64:d8:8c:3d:a7:dc:38:3d:38:0b:fe:3b:3c:
86:37:f3:76:23:67:5c:34:c4:9a:2b:f8:53:8f:fc:6c:de:42:
a9:f6:ae:ed:af:90:01:50:ad:0e:55:3f:6b:b8:f7:f0:67:77:
64:a3:86:5f:6f:fe:ce:cd:67:fd:42:9c:91:12:1a:1b:fb:50:
ee:fd:08:1d:72:b8:66:04:94:ac:15:ad:88:46:b3:60:a7:88:
b5:a7:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:31:48 2024 by rpki-client on console-ams.rpki-client.org