Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZHjnzh76OGmx1HcauhVY9Iv6GQU.roa
File: ZHjnzh76OGmx1HcauhVY9Iv6GQU.roa (raw, json)
Hash identifier: M3lxI1UQWmEFSxem2slkaOpRubg0WFdc7yBInIwmj9M=
Subject key identifier: 64:78:E7:CE:1E:FA:38:69:B1:D4:77:1A:BA:15:58:F4:8B:FA:19:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01927BFF769F9EEB6D52CF05EC6EE391FF57
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZHjnzh76OGmx1HcauhVY9Iv6GQU.roa
Signing time: Fri 11 Oct 2024 14:33:12 +0000
ROA not before: Fri 11 Oct 2024 14:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61138
IP address blocks: 31.57.72.0/22 maxlen: 24
31.58.12.0/22 maxlen: 24
31.59.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:ff:76:9f:9e:eb:6d:52:cf:05:ec:6e:e3:91:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 11 14:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6478e7ce1efa3869b1d4771aba1558f48bfa1905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:50:29:44:09:4c:85:2d:04:93:28:87:ef:
28:5d:0b:d3:ac:db:fc:1e:48:0e:97:5a:3e:cb:de:
9f:fc:03:89:0d:8b:dd:d8:7b:fa:24:51:b5:e1:2d:
50:26:2d:82:a4:e6:21:5e:3d:7e:1a:f4:a5:f7:dc:
aa:91:e4:d4:9a:d4:cc:de:b1:e0:ef:5a:28:06:00:
c4:7f:ed:86:86:35:07:75:0a:48:5d:29:f8:a0:6d:
fb:38:64:e9:b5:d5:ba:43:f4:ec:e6:37:97:d9:36:
47:cd:3f:91:6a:b4:a4:4d:a1:c9:86:5b:15:b8:c0:
9e:7a:78:6b:7f:65:34:cd:14:c2:47:ce:73:c3:14:
3d:7c:55:4e:63:b9:7b:83:31:68:5c:5d:0b:d1:f4:
e4:66:4c:18:2f:d6:8d:db:5e:26:61:d8:ee:df:91:
71:f0:9c:a4:0b:a9:b6:76:73:89:20:44:97:b7:c2:
d2:24:45:35:25:4b:b3:de:2f:ca:53:33:d9:77:2a:
58:75:07:16:5b:f9:fd:7b:0a:26:47:0c:9a:7c:a9:
6d:09:e8:04:8c:d6:63:3e:d7:5d:2c:a5:d8:99:2b:
98:f1:4a:a6:c0:3e:ae:65:68:8a:c7:58:3b:3c:02:
42:d6:fd:ea:d3:5e:a8:9f:ab:39:32:21:3c:a7:75:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:E7:CE:1E:FA:38:69:B1:D4:77:1A:BA:15:58:F4:8B:FA:19:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZHjnzh76OGmx1HcauhVY9Iv6GQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.72.0/22
31.58.12.0/22
31.59.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:6b:31:d7:3f:c7:0d:b3:d3:f9:ab:b6:09:40:af:4b:1e:1b:
65:7b:e3:fb:1d:52:bd:95:b0:cf:a7:06:d8:bd:aa:b6:26:d3:
f9:5b:57:50:26:36:c4:a0:3c:d1:04:6a:86:9e:00:b6:3d:07:
3c:11:b7:8e:33:33:0f:ed:a3:8f:93:4b:a6:be:39:80:bd:f8:
6d:a2:3e:59:71:c3:98:7e:ed:98:e3:64:71:a6:d8:45:4a:1c:
68:be:3f:df:9f:b0:a3:f1:90:54:74:9e:19:7b:13:e7:27:34:
9b:b1:20:a7:d7:03:bf:5d:0c:e2:70:90:27:c8:a4:c3:2c:e1:
bd:fe:72:a7:be:1a:39:89:ed:8c:e5:56:09:ce:fe:d2:00:6c:
26:0f:dc:ac:e5:33:fe:fc:97:10:c9:32:62:52:f7:31:4c:12:
98:f9:9b:23:0f:ea:60:e5:2f:06:b4:7d:12:09:08:77:3e:da:
83:b0:fd:80:87:c2:b3:a5:4c:5d:90:db:1b:42:d7:00:b9:e6:
ca:ed:fb:4c:4d:db:2c:b5:04:c6:9e:51:2d:51:a1:4a:3d:77:
67:90:8a:8f:2b:ef:44:e8:cb:5d:39:06:8f:ab:5d:3c:92:c2:
2f:ea:02:e5:f3:76:5e:56:60:a4:f0:9a:81:b4:48:fe:42:6d:
84:8f:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:08 2024 by rpki-client on console-ams.rpki-client.org