Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vs6_UW_ik-YnPfqN3XuTNJjuGaY.roa
File: Vs6_UW_ik-YnPfqN3XuTNJjuGaY.roa (raw, json)
Hash identifier: NFWjZlUwZl8cT5fPQgJeDm/WU2YJk0pM8/xZsroczIk=
Subject key identifier: 56:CE:BF:51:6F:E2:93:E6:27:3D:FA:8D:DD:7B:93:34:98:EE:19:A6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192F1177E43443E290375C308B5C9E31CDC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vs6_UW_ik-YnPfqN3XuTNJjuGaY.roa
Signing time: Sun 03 Nov 2024 08:15:01 +0000
ROA not before: Sun 03 Nov 2024 08:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204174
IP address blocks: 31.58.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:17:7e:43:44:3e:29:03:75:c3:08:b5:c9:e3:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 08:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56cebf516fe293e6273dfa8ddd7b933498ee19a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:28:39:e5:25:1a:85:38:fd:43:a1:33:77:
17:06:35:12:a4:03:8b:ee:62:0b:f5:0e:9a:25:19:
26:1d:8c:cc:d4:d6:a9:5d:3b:2f:15:a7:fb:ec:93:
74:90:ac:f1:58:dd:b1:97:d2:9b:a6:2d:9d:b3:d2:
52:d8:ae:8e:c0:da:20:f6:1e:6c:08:7d:e4:c0:f6:
f4:ab:f0:8a:22:5a:1c:a2:ab:be:79:45:fc:cc:ec:
ca:53:3e:ad:e6:b7:b7:4d:10:b7:cd:51:94:6b:fc:
6a:15:9e:66:d1:a0:bd:2b:9c:8a:86:2d:81:97:f9:
c3:9c:fe:7e:1f:87:8d:49:05:90:ea:31:48:7b:1e:
bd:b1:12:9d:2b:fd:7e:c4:ad:cd:83:ee:7c:4e:36:
69:ad:b8:64:ff:bd:54:b0:f6:9a:c2:23:77:25:32:
5d:f4:65:a5:20:9f:35:a4:15:5c:3b:20:34:75:95:
fe:21:fd:64:28:14:ec:5d:60:6c:75:11:e1:51:da:
aa:3a:8c:42:5e:05:77:fa:41:46:1f:8e:35:32:36:
ce:76:02:58:9a:75:47:a6:75:ec:c6:58:19:d6:62:
6e:6d:29:96:0b:f6:0a:06:b0:56:de:2d:82:e9:4e:
db:84:6e:f4:7c:cc:47:2c:2d:4e:59:9e:bf:5e:5d:
1c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CE:BF:51:6F:E2:93:E6:27:3D:FA:8D:DD:7B:93:34:98:EE:19:A6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vs6_UW_ik-YnPfqN3XuTNJjuGaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.157.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5e:76:c0:e0:74:c8:4b:6d:88:ea:b4:ab:2a:73:01:76:04:
ec:7a:d4:57:47:65:c3:f4:28:37:9c:68:33:fd:57:11:7b:3b:
75:63:c2:9a:4c:15:e6:74:dc:a6:ba:0b:d6:21:b7:cc:bf:f5:
da:6e:92:13:dc:de:c6:33:03:61:0d:fa:7f:ef:ea:4a:7d:ab:
7e:33:dd:40:35:8e:bd:53:42:f7:02:a3:d0:12:31:4f:ac:f1:
4e:7b:c1:f6:77:d7:2c:fc:f3:ba:92:a9:34:bf:33:2f:6b:9e:
19:92:99:de:5e:20:db:3d:b2:a1:5e:9b:46:bb:b8:c1:b8:25:
af:e5:d7:bc:f4:2b:53:f6:5f:e1:c4:02:b4:d0:ed:c7:02:80:
95:cc:db:17:56:fb:90:40:6d:76:dc:1d:ab:1d:13:02:d6:01:
b1:eb:6c:71:2c:ff:87:2c:e9:f5:99:9b:11:87:38:5c:a5:5e:
1c:28:ad:84:21:f9:13:1a:e2:e5:ae:4c:55:99:2f:47:58:1b:
b7:97:74:52:a6:4f:af:06:ca:3d:a8:dd:0e:8a:30:4e:2f:9a:
45:da:72:3c:93:1a:ac:e3:80:54:f9:d5:ec:10:a0:15:22:3d:
66:60:6c:98:49:04:85:24:f4:06:89:91:8f:e2:07:00:3a:52:
1f:88:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:22 2024 by rpki-client on console-fra.rpki-client.org