Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YZ0yg-cCRl-lVOAe_P_R9ZHTwdo.roa
File: YZ0yg-cCRl-lVOAe_P_R9ZHTwdo.roa (raw, json)
Hash identifier: bIYrB5KUyU6routPFDk8LCl6lG4Z/CH5PIGeRtt7u3Y=
Subject key identifier: 61:9D:32:83:E7:02:46:5F:A5:54:E0:1E:FC:FF:D1:F5:91:D3:C1:DA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01932EBC9229CEA2982E1F7C86BE6EC475E1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YZ0yg-cCRl-lVOAe_P_R9ZHTwdo.roa
Signing time: Fri 15 Nov 2024 07:32:10 +0000
ROA not before: Fri 15 Nov 2024 07:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.1.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:bc:92:29:ce:a2:98:2e:1f:7c:86:be:6e:c4:75:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 07:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=619d3283e702465fa554e01efcffd1f591d3c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:1c:f7:7a:e0:34:10:aa:f7:47:a2:25:c9:
c1:ba:cb:cc:1c:33:83:d8:a7:33:62:15:4c:10:43:
a6:64:f6:b2:a5:06:8b:9f:08:43:f5:7a:26:b9:dd:
4d:cf:ec:34:98:2f:51:f9:c3:b5:88:08:80:e5:d1:
fa:16:3c:20:e4:7e:9c:a0:ba:4a:a0:34:76:a7:ea:
98:8a:0d:d5:9c:76:3f:78:76:bd:37:41:96:26:a9:
60:12:34:c9:d3:fd:c8:e3:98:a3:ad:22:45:f9:ff:
12:3a:44:05:10:a6:37:ee:ce:8f:ea:6a:f0:80:13:
d7:2f:b4:0f:b1:00:3d:fb:e6:c0:5b:16:49:a7:75:
98:ed:45:bf:96:0f:38:e2:62:9d:92:d8:53:5a:4c:
a8:a7:5e:63:a0:71:58:58:47:93:52:c1:e8:45:ed:
2d:ae:ca:5c:75:c4:be:e8:1e:0d:d3:01:f3:8b:b6:
dc:ca:cf:36:06:ed:88:3e:e9:16:d5:90:f2:58:0b:
e2:dd:79:b2:2e:64:6f:83:cf:16:6f:a0:6b:18:9f:
93:b0:2e:f5:50:15:04:3a:c9:46:e8:19:c9:3f:be:
f5:9f:72:f0:b6:3f:7c:a5:c9:e1:33:7d:d4:c1:60:
40:21:76:00:2f:a8:f4:74:fa:be:d1:c1:f0:48:30:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:32:83:E7:02:46:5F:A5:54:E0:1E:FC:FF:D1:F5:91:D3:C1:DA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YZ0yg-cCRl-lVOAe_P_R9ZHTwdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.57.144.0/24
31.57.231.0/24
31.58.230.0/23
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f6:d4:47:60:f2:e3:36:9b:af:87:d9:b4:a9:6d:2e:0a:4b:
df:0f:36:f2:4f:b8:fe:b1:58:4c:31:c4:1d:92:79:53:bf:98:
4b:3a:47:f8:55:11:11:80:e6:ff:01:84:57:c9:eb:2c:21:40:
ee:17:d0:71:25:91:a7:46:8a:58:09:cd:90:b4:1a:60:36:a9:
75:81:9a:78:73:83:4a:2b:46:10:a2:25:c4:95:51:a0:ab:05:
6a:1b:25:b0:ec:b8:90:50:a7:4e:10:09:b8:25:b6:c0:30:a3:
1d:a6:5c:72:3d:ab:34:38:d5:eb:c4:f5:b6:a3:39:23:0b:0e:
4f:09:a1:0f:7d:05:76:eb:85:41:4b:13:01:58:6d:6b:b1:09:
4b:49:5e:10:7a:00:89:ab:4d:c9:5d:86:b3:7b:14:51:7b:e7:
a6:24:fb:b8:39:0a:bb:98:7d:29:3b:74:6c:3c:9b:5c:f3:76:
db:72:d2:17:c0:e9:ad:06:d0:61:a1:43:ec:97:9a:63:25:26:
a1:35:80:6b:69:4a:0b:69:22:e2:48:9c:03:b4:23:2e:7a:31:
4c:b9:c5:70:8d:65:cd:dd:c8:41:20:5b:cf:9c:d3:cd:4e:9c:
92:54:10:c3:f0:41:e8:c2:c3:3a:48:55:61:67:f9:1d:b1:01:
92:66:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:19 2024 by rpki-client on console-fra.rpki-client.org