Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ehxeq4lpWtIx7TuMIfycQOHUOw8.roa
File: ehxeq4lpWtIx7TuMIfycQOHUOw8.roa (raw, json)
Hash identifier: WPBVkDFn70Cc+RPgnx5PwoevUhjl2VJdXgvulT9Qoks=
Subject key identifier: 7A:1C:5E:AB:89:69:5A:D2:31:ED:3B:8C:21:FC:9C:40:E1:D4:3B:0F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01929E8C7236B3615B25E6EDBC4A7875DA59
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ehxeq4lpWtIx7TuMIfycQOHUOw8.roa
Signing time: Fri 18 Oct 2024 07:34:17 +0000
ROA not before: Fri 18 Oct 2024 07:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137517
IP address blocks: 31.58.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9e:8c:72:36:b3:61:5b:25:e6:ed:bc:4a:78:75:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 18 07:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a1c5eab89695ad231ed3b8c21fc9c40e1d43b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:83:53:b1:30:ae:ef:b9:e8:d5:d2:e8:1d:
2a:a4:a7:d7:47:66:cb:62:d6:08:f2:4e:3f:b3:67:
09:2c:17:18:8a:dd:bf:12:03:73:8e:e0:d2:84:a6:
dd:48:be:9b:7c:17:87:78:7e:88:a6:0c:d6:2c:2d:
33:93:5a:0a:ee:a1:92:a0:e4:92:a1:cf:81:17:38:
43:20:3e:8a:86:59:d0:08:dd:f0:16:42:e5:c9:fc:
1c:17:c1:dd:89:f1:99:44:ac:7e:ca:07:45:63:0c:
66:45:59:b3:81:25:aa:ef:63:b9:6c:80:84:47:c0:
fa:cf:ea:2c:66:bc:80:9b:0d:d8:32:0a:9c:8a:49:
51:c3:ae:bf:f2:91:7b:b3:4b:e2:ce:cc:49:a6:43:
f1:ad:f9:58:1f:c0:12:d8:e5:84:8c:ce:52:51:fa:
70:6d:52:4d:33:4c:50:f2:5d:2a:be:a4:5d:7c:17:
ae:59:42:1a:a7:f7:17:8a:4e:7b:00:75:e5:f7:8e:
20:45:eb:32:9c:65:d5:5c:38:83:e2:c8:15:92:18:
80:37:68:f3:da:5c:3a:75:39:45:0d:cd:51:7f:04:
ab:25:c7:75:31:f1:8a:4d:91:dc:39:80:16:fd:61:
5c:21:31:07:a5:29:97:fb:d0:e0:47:16:66:68:82:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:5E:AB:89:69:5A:D2:31:ED:3B:8C:21:FC:9C:40:E1:D4:3B:0F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ehxeq4lpWtIx7TuMIfycQOHUOw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:65:b7:65:a7:da:a2:fb:d1:31:12:83:0f:10:29:76:8f:22:
35:9a:67:58:fd:95:74:58:d8:7b:c9:6c:d0:cb:73:7c:97:1f:
e5:7b:23:a1:30:e4:b0:66:25:3c:ed:aa:33:a4:a9:e0:4c:38:
e8:1f:41:74:53:08:4f:44:2d:a3:21:8b:91:46:f5:63:ce:d6:
51:6c:1a:b2:19:3b:c4:41:df:17:d5:45:95:86:0c:60:46:a9:
c0:2e:f2:19:f3:d2:0a:76:cd:a8:ea:f2:e6:47:7a:04:9e:13:
d1:f4:86:13:19:37:1d:45:f4:14:fb:db:3c:e6:74:c5:9f:79:
94:5f:4d:f4:65:e3:66:d1:85:14:42:7b:74:67:af:86:ac:e5:
2d:ca:82:d0:5d:8d:2f:72:6e:1f:d9:fe:72:61:6f:05:32:d7:
e8:e4:4e:8b:cc:bc:b2:0e:c7:87:80:99:51:5e:6e:30:54:78:
1c:51:05:33:a3:0d:ce:d1:7e:58:1b:d3:b8:e1:7c:48:d3:7b:
09:49:7c:24:9e:33:7f:47:8a:7e:c5:78:48:05:93:cf:74:1a:
dc:79:fe:ff:b6:2e:70:f4:0e:d9:b8:29:cd:1a:c8:11:85:ec:
33:c8:f1:06:f1:9b:fb:57:ff:22:b1:66:15:3d:0f:4e:3f:e7:
39:80:12:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKejHI2s2FbJebtvEp4ddpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMDE4MDczNDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFjNWVhYjg5Njk1YWQyMzFlZDNiOGMyMWZjOWM0MGUxZDQzYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RuDU7Ewru+56NXS6B0qpKfXR2bL
YtYI8k4/s2cJLBcYit2/EgNzjuDShKbdSL6bfBeHeH6IpgzWLC0zk1oK7qGSoOSS
oc+BFzhDID6KhlnQCN3wFkLlyfwcF8HdifGZRKx+ygdFYwxmRVmzgSWq72O5bICE
R8D6z+osZryAmw3YMgqciklRw66/8pF7s0vizsxJpkPxrflYH8AS2OWEjM5SUfpw
bVJNM0xQ8l0qvqRdfBeuWUIap/cXik57AHXl944gResynGXVXDiD4sgVkhiAN2jz
2lw6dTlFDc1RfwSrJcd1MfGKTZHcOYAW/WFcITEHpSmX+9DgRxZmaIKsSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHocXquJaVrSMe07jCH8nEDh1DsPMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZWh4ZXE0bHBXdEl4N1R1TUlmeWNRT0hVT3c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzooMA0G
CSqGSIb3DQEBCwUAA4IBAQBsZbdlp9qi+9ExEoMPECl2jyI1mmdY/ZV0WNh7yWzQ
y3N8lx/leyOhMOSwZiU87aozpKngTDjoH0F0UwhPRC2jIYuRRvVjztZRbBqyGTvE
Qd8X1UWVhgxgRqnALvIZ89IKds2o6vLmR3oEnhPR9IYTGTcdRfQU+9s85nTFn3mU
X030ZeNm0YUUQnt0Z6+GrOUtyoLQXY0vcm4f2f5yYW8FMtfo5E6LzLyyDseHgJlR
Xm4wVHgcUQUzow3O0X5YG9O44XxI03sJSXwknjN/R4p+xXhIBZPPdBrcef7/ti5w
9A7ZuCnNGsgRhewzyPEG8Zv7V/8isWYVPQ9OP+c5gBJC
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:43 2024 by rpki-client on console-fra.rpki-client.org