Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dZNJOUJgGE5Kcm0jJxEsqZGN5nw.roa
File: dZNJOUJgGE5Kcm0jJxEsqZGN5nw.roa (raw, json)
Hash identifier: T6eU4QsUjXXR7/nEIEQag4asZW9iqDcCgCeR5WZgjew=
Subject key identifier: 75:93:49:39:42:60:18:4E:4A:72:6D:23:27:11:2C:A9:91:8D:E6:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01925044F2D131FBF076DE4DDB33B733AB41
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dZNJOUJgGE5Kcm0jJxEsqZGN5nw.roa
Signing time: Thu 03 Oct 2024 02:45:48 +0000
ROA not before: Thu 03 Oct 2024 02:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57142
IP address blocks: 31.57.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:50:44:f2:d1:31:fb:f0:76:de:4d:db:33:b7:33:ab:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 02:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759349394260184e4a726d2327112ca9918de67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:df:00:94:d2:7b:79:90:44:bd:a1:82:e1:
ab:c0:af:2f:82:80:e5:9e:0d:5d:55:18:f8:fe:89:
eb:5d:6b:ae:39:2c:20:81:22:e4:11:44:e1:f1:60:
89:1f:b1:c2:99:b6:92:1c:c2:43:7a:ef:f3:25:9d:
db:9a:ab:46:ef:be:e6:0b:8a:42:59:1b:34:15:a5:
de:51:8f:32:40:06:6e:25:4e:78:16:93:ab:8d:2b:
3f:04:21:3f:7c:1c:89:9d:d0:c8:9f:f7:63:89:1a:
78:77:94:af:be:f7:40:12:78:e9:0f:24:de:c3:6b:
0a:fc:0f:9f:fb:51:91:cf:c4:a7:89:f3:81:68:50:
da:cf:b9:da:e2:e6:3e:53:f5:b2:b9:fd:fe:0a:0e:
1a:38:47:ba:88:52:cd:52:5b:ab:a9:6c:d6:40:96:
56:e1:65:cc:a1:01:a4:6e:7b:99:02:ae:37:b7:f7:
3e:bd:6b:00:b5:9d:be:26:ea:6f:77:a4:2a:5c:06:
d0:d0:ca:96:b2:c0:2d:64:8c:eb:67:16:ed:51:3b:
d4:2e:c0:9b:02:04:62:4c:99:ba:19:a1:7e:cd:22:
e3:df:15:e9:d0:d1:86:0f:89:fa:22:c4:88:28:5e:
5c:3e:03:27:bf:72:b3:10:76:2b:20:09:7b:40:54:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:49:39:42:60:18:4E:4A:72:6D:23:27:11:2C:A9:91:8D:E6:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dZNJOUJgGE5Kcm0jJxEsqZGN5nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.198.0/24
Signature Algorithm: sha256WithRSAEncryption
32:22:45:34:2a:f8:98:2a:c7:00:35:4a:da:04:a0:de:98:6a:
30:09:57:25:f9:b2:6f:de:b2:0c:e8:b1:32:c7:b9:78:de:5a:
92:dd:1f:d1:d9:34:4f:28:6a:1f:c7:5e:cc:52:1f:a7:8c:30:
b9:f7:bb:f0:88:04:4c:af:aa:5d:84:b0:24:60:3e:b9:68:bc:
10:45:1f:86:14:9b:ce:d1:85:b1:ca:b8:b3:de:29:f5:67:27:
20:b9:39:be:7d:1b:53:7e:dd:1c:82:22:0a:d4:f2:38:a1:33:
e4:16:2b:d2:1a:9b:50:f8:b5:cb:8f:d6:97:e1:1a:1f:4e:ea:
a5:11:48:81:65:8c:78:ae:07:fd:08:8a:c6:29:d0:3a:3f:3b:
b2:b2:9f:7c:94:87:55:c5:da:be:75:52:61:02:db:ae:5a:a4:
6a:4a:1a:b0:81:55:a8:44:11:d8:81:0a:ac:16:dd:81:63:21:
b1:de:9b:aa:f3:ab:ae:f3:06:ac:bd:2f:89:d5:69:07:18:52:
81:47:b9:cb:c9:9c:c4:c2:55:c4:a8:55:b2:05:63:34:31:71:
75:0c:1c:d6:d1:a3:85:04:94:ae:67:89:a3:17:45:b8:4c:61:
61:e5:4c:9b:70:62:0f:18:8b:49:85:07:6b:78:99:96:4a:b1:
d0:c1:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:54 2024 by rpki-client on console-fra.rpki-client.org