Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ct9-GOzk6drhazk5x2WowU2HEE4.roa
File: ct9-GOzk6drhazk5x2WowU2HEE4.roa (raw, json)
Hash identifier: 77oYE2Quqz9T4Dk2EULkvWbrF4gSyIoWY/FTw4eRB5o=
Subject key identifier: 72:DF:7E:18:EC:E4:E9:DA:E1:6B:39:39:C7:65:A8:C1:4D:87:10:4E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191513DF0FC2FBD7164DE898441EC865CF1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ct9-GOzk6drhazk5x2WowU2HEE4.roa
Signing time: Wed 14 Aug 2024 14:14:59 +0000
ROA not before: Wed 14 Aug 2024 14:14:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.2.0/24 maxlen: 24
31.56.23.0/24 maxlen: 24
31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.34.0/24 maxlen: 24
31.56.36.0/24 maxlen: 24
31.56.38.0/24 maxlen: 24
31.56.40.0/24 maxlen: 24
31.56.58.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Aug 2024 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:3d:f0:fc:2f:bd:71:64:de:89:84:41:ec:86:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 14 14:14:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72df7e18ece4e9dae16b3939c765a8c14d87104e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:e7:79:d6:25:f7:39:bc:d8:cb:18:8c:c4:
0c:ec:a2:04:d5:e6:80:d8:d5:fb:5e:95:70:85:cb:
2f:4b:68:ef:db:37:9d:11:b0:40:09:91:5c:6e:75:
18:bd:89:a8:75:cf:73:38:1d:4a:69:21:1e:b7:4f:
4c:9d:be:a4:15:1c:dd:84:3f:c6:68:18:c9:8d:52:
ac:83:13:c1:1e:4c:c7:ab:a3:a4:15:d3:49:2e:58:
36:9a:d5:58:90:d2:22:36:60:5e:7f:3e:47:4d:cd:
9b:47:c6:00:b3:bb:d1:14:d9:0f:0f:53:87:16:9b:
a3:78:40:be:9a:16:1f:c4:49:92:5c:0b:c3:b3:df:
95:ce:e5:06:bd:55:48:9d:23:8c:77:1e:42:6b:e4:
e4:cf:96:b8:a2:2f:3f:eb:cc:d2:58:26:e9:1a:e8:
5f:8e:dc:a2:d5:a0:08:d3:93:7b:ba:34:b2:af:ab:
25:a2:f2:46:46:68:fe:37:21:27:30:44:aa:23:2c:
36:c9:00:61:53:c6:89:55:2b:f2:71:69:c8:54:70:
47:3a:d1:24:6a:42:e7:11:87:05:22:48:80:0b:fb:
1f:b9:a1:fa:68:03:5b:fb:c6:31:bb:51:9e:66:ab:
6e:b4:8c:0a:41:4c:3b:56:ff:14:3b:10:e1:2d:a4:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:7E:18:EC:E4:E9:DA:E1:6B:39:39:C7:65:A8:C1:4D:87:10:4E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ct9-GOzk6drhazk5x2WowU2HEE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0-31.56.2.255
31.56.23.0/24
31.56.25.0/24
31.56.27.0-31.56.32.255
31.56.34.0/24
31.56.36.0/24
31.56.38.0/24
31.56.40.0/24
31.56.58.0/24
31.56.61.0/24
31.56.68.0/24
31.56.70.0/23
31.56.73.0-31.56.75.255
31.56.80.0/22
31.56.92.0-31.56.111.255
Signature Algorithm: sha256WithRSAEncryption
c0:36:c4:f3:1c:83:d4:40:d8:b3:58:9b:43:00:73:f1:61:9f:
e7:89:fe:d0:55:d4:80:d3:e8:a9:b0:f0:26:df:c0:c3:56:1f:
41:1f:7e:9e:74:dd:3f:e2:e8:02:19:2c:ff:9f:e2:a3:5d:13:
66:0d:f8:e7:b4:e2:a5:54:06:ab:15:85:8b:8e:4f:7d:2f:2b:
51:fa:ed:f1:26:5c:00:4d:9b:4c:63:9c:2e:c6:79:a5:fa:de:
f2:18:4e:3f:db:5e:05:79:3d:04:e4:7f:7d:1a:be:59:13:36:
5f:b2:1d:3d:1c:00:71:49:bf:2d:b6:8a:70:46:01:f8:b4:01:
2d:95:1f:cc:b5:53:d6:c1:b7:a9:3c:f0:9d:ea:6a:0f:5e:62:
11:e1:c2:97:4e:18:d1:09:ba:e9:89:97:9d:c2:77:13:ce:57:
89:e9:32:bb:66:6e:99:df:c2:c9:5c:df:e9:c8:1f:8c:10:f8:
36:95:60:c0:4f:bc:16:95:47:08:da:81:d7:11:ba:8b:23:e0:
f4:1c:53:f2:bd:08:39:83:20:a3:38:e9:67:80:2f:c8:66:98:
d6:8e:0e:fc:8d:23:ce:14:88:0c:cf:4e:c5:e3:ae:1a:dc:0d:
01:5b:76:fb:a9:8f:76:2a:64:ab:ea:04:e1:fe:ec:26:34:75:
5e:43:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 07:44:55 2024 by rpki-client on console-fra.rpki-client.org