Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZCjkk1talCtC6X--gMmpOE26Hzo.roa
File: ZCjkk1talCtC6X--gMmpOE26Hzo.roa (raw, json)
Hash identifier: aBr8LRXpsCwlVzC6gu7io0PIwHNdG0GtniTghSfW4n4=
Subject key identifier: 64:28:E4:93:5B:5A:94:2B:42:E9:7F:BE:80:C9:A9:38:4D:BA:1F:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192969F40A82EAC5B9C825926E0EEC99AA1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZCjkk1talCtC6X--gMmpOE26Hzo.roa
Signing time: Wed 16 Oct 2024 18:37:51 +0000
ROA not before: Wed 16 Oct 2024 18:37:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 31.58.18.0/24 maxlen: 24
31.58.22.0/24 maxlen: 24
31.58.28.0/24 maxlen: 24
31.58.32.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.20.0/24 maxlen: 24
31.59.21.0/24 maxlen: 24
31.59.27.0/24 maxlen: 24
31.59.28.0/24 maxlen: 24
31.59.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:9f:40:a8:2e:ac:5b:9c:82:59:26:e0:ee:c9:9a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 16 18:37:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6428e4935b5a942b42e97fbe80c9a9384dba1f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:fc:18:4d:9a:c4:e4:16:c0:34:56:0b:aa:
b9:be:8b:12:dc:c7:1b:f5:b8:46:67:f9:8e:59:9a:
6d:17:92:47:f4:b2:5c:b2:20:87:8e:21:33:d2:6b:
a5:0f:4a:7d:11:b4:a0:df:4d:43:1d:f4:bd:38:6d:
d7:e1:a7:35:26:51:f3:eb:9b:19:03:e1:db:9b:0a:
c9:3d:66:87:38:73:82:40:28:48:25:36:6d:ed:05:
46:43:b5:c8:e6:bf:57:9b:b1:48:2d:1f:e9:67:af:
17:93:36:7f:6b:c1:38:d0:2f:1a:02:c5:dc:f4:b3:
a5:97:78:a8:dc:00:07:43:ad:f8:ec:8a:94:ed:7c:
24:e4:b5:b5:f9:5f:58:52:14:98:bd:3d:9a:fa:81:
78:a8:bd:45:83:bb:9e:a2:f6:b2:ff:1e:fe:f3:e3:
e9:bc:30:ff:c1:7a:d5:7f:d9:12:a2:b2:4c:d6:c1:
70:29:40:be:d6:44:78:c3:a2:8b:a3:ef:67:73:2e:
93:b5:40:fc:ca:7b:1b:9c:9c:f6:04:7b:38:dd:74:
46:1c:89:74:d4:d6:6d:98:45:56:ff:e4:b3:70:f2:
7d:11:7d:10:42:65:88:00:dd:57:31:75:1d:c0:76:
34:31:8e:7f:ec:11:a7:77:44:76:af:76:73:69:dc:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:E4:93:5B:5A:94:2B:42:E9:7F:BE:80:C9:A9:38:4D:BA:1F:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZCjkk1talCtC6X--gMmpOE26Hzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.18.0/24
31.58.22.0/24
31.58.28.0/24
31.58.32.0/24
31.59.15.0/24
31.59.20.0/23
31.59.27.0-31.59.28.255
31.59.33.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9d:f5:ef:f9:7c:e5:14:32:45:9d:70:40:47:f9:2e:57:f8:
2a:dd:61:3a:86:14:c4:c4:7e:e0:71:d0:db:11:06:59:a8:46:
c1:d4:83:6e:73:6d:0e:4a:fe:92:6e:75:1b:18:d5:7e:58:99:
20:9c:f5:67:88:4c:50:43:53:6f:2b:fc:ec:51:ce:d2:0d:28:
da:f2:a9:0b:06:f9:32:a8:6d:58:f1:76:e0:ff:a7:c0:de:ef:
a7:f7:1f:28:18:61:29:39:7c:a4:34:9f:32:26:3b:a2:3d:00:
79:3b:76:2d:f2:7c:3a:60:15:08:91:a4:55:e4:42:1e:81:98:
66:2b:2a:61:96:df:a1:66:dd:55:7c:e8:aa:fe:94:b2:e9:2d:
46:0a:dd:2c:c4:de:8e:25:11:0a:69:a5:b2:89:f9:8f:36:15:
1d:e9:41:5c:d1:9e:5c:6e:c9:f7:5a:86:21:95:2a:0d:c3:25:
a3:94:53:dc:6b:69:d3:d9:96:05:77:08:0d:57:6d:c1:fe:5b:
b6:82:2d:5a:43:f8:1c:b2:43:dd:e1:ba:b0:28:69:34:ec:3b:
67:a0:49:08:dc:7c:58:e4:f5:f3:6a:c7:0c:dc:03:3a:ff:2c:
c6:e3:42:93:8b:16:2b:e7:b3:75:1a:62:a7:ec:10:b9:26:6e:
47:e3:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:15 2024 by rpki-client on console-ams.rpki-client.org