Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhv96jfGjB1YugUsNUkGTfXvHMc.roa
File: fhv96jfGjB1YugUsNUkGTfXvHMc.roa (raw, json)
Hash identifier: 8As0x3AM/2QJNyhOK3F5mtSdIlEyUPjptuuC8GV1uVA=
Subject key identifier: 7E:1B:FD:EA:37:C6:8C:1D:58:BA:05:2C:35:49:06:4D:F5:EF:1C:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01935992C1ED288135B44E72FE8B225A9E46
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhv96jfGjB1YugUsNUkGTfXvHMc.roa
Signing time: Sat 23 Nov 2024 15:10:10 +0000
ROA not before: Sat 23 Nov 2024 15:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198361
IP address blocks: 31.58.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:92:c1:ed:28:81:35:b4:4e:72:fe:8b:22:5a:9e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 23 15:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e1bfdea37c68c1d58ba052c3549064df5ef1cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:40:17:13:70:a8:e7:26:9a:df:e5:d5:c8:
67:d2:69:0a:c7:a1:01:aa:a0:21:bd:a6:37:95:ca:
ae:53:a1:51:b8:e1:34:0c:0b:55:e5:5b:ff:bf:80:
67:7e:95:a6:d1:8a:a9:6f:db:07:0a:d9:dc:3c:85:
45:4a:b1:b6:ed:4d:f4:ee:f7:8f:c4:1b:a7:4a:e9:
cb:f1:1f:42:65:b1:94:78:9c:13:09:00:a2:04:d6:
2b:10:d9:c5:1b:75:9d:c5:49:fd:63:52:8d:93:e7:
25:3b:fb:96:3a:54:36:35:28:c3:0b:e1:72:2d:ea:
6c:14:5e:e4:99:7f:f2:78:74:b3:2c:af:93:39:70:
96:cf:94:0b:ce:60:83:bf:6a:b3:f0:41:6c:85:70:
36:74:b9:54:7f:39:65:f2:21:f6:71:30:93:f2:40:
07:c1:1d:b8:c7:fc:f7:ad:f0:3a:a1:1a:ad:28:ab:
c3:ae:44:79:e1:5d:a7:a9:ca:92:47:9c:e9:df:5d:
18:31:ef:e6:72:f1:1c:83:cc:36:ea:b3:f2:cd:e7:
67:c9:9d:42:07:e6:16:7d:b3:f1:0a:d7:0e:6a:1d:
ac:5d:e9:1c:0b:96:e0:e7:5d:38:24:2a:32:04:7a:
9e:d6:c5:09:24:dc:a3:8f:ba:36:cd:63:94:b8:c7:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:FD:EA:37:C6:8C:1D:58:BA:05:2C:35:49:06:4D:F5:EF:1C:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fhv96jfGjB1YugUsNUkGTfXvHMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.210.0/24
Signature Algorithm: sha256WithRSAEncryption
20:73:ba:17:bf:79:bd:22:55:00:bb:ec:39:4e:2d:a1:a1:3c:
b1:17:c2:8b:f7:b7:2c:8a:4f:4b:34:f4:2c:a4:9a:c2:80:63:
8e:27:ea:3f:8f:d0:ed:11:30:1a:c2:11:85:19:00:a1:20:c1:
16:0e:48:a5:03:6f:bd:70:07:df:f2:aa:c0:bb:36:1b:f1:14:
2b:26:35:99:25:26:b8:b0:37:eb:9b:9b:e9:9f:2d:fd:71:11:
c1:48:9b:67:20:f5:85:7a:ff:97:f1:3e:d7:b2:de:6d:24:98:
55:f4:cd:88:6b:fb:79:a8:45:35:9f:fb:ad:ea:07:74:bd:f5:
c7:4c:3f:c6:96:25:64:bc:d0:5d:52:25:ab:74:dd:e4:31:a8:
a0:fb:c2:fd:0a:35:56:f6:a3:da:88:1b:a1:95:fa:30:cb:1f:
cf:4a:b4:3a:64:50:7d:c2:43:69:4d:34:0f:8f:7a:ce:b9:7f:
28:21:f9:c8:fb:43:2e:e1:63:09:a1:af:91:fa:7d:36:40:5d:
38:07:58:29:ec:3b:4e:ff:79:99:a3:75:6d:f7:39:19:36:41:
91:77:eb:1c:15:cc:65:41:42:aa:ff:47:e9:9e:c5:89:da:72:
e8:6a:ed:f8:93:fa:8f:74:b4:65:6f:61:64:42:91:83:21:a5:
8b:ef:52:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNZksHtKIE1tE5y/osiWp5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTIzMTUxMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTFiZmRlYTM3YzY4YzFkNThiYTA1MmMzNTQ5MDY0ZGY1ZWYxY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVAFxNwqOcmmt/l1chn0mkKx6EB
qqAhvaY3lcquU6FRuOE0DAtV5Vv/v4BnfpWm0Yqpb9sHCtncPIVFSrG27U307veP
xBunSunL8R9CZbGUeJwTCQCiBNYrENnFG3WdxUn9Y1KNk+clO/uWOlQ2NSjDC+Fy
LepsFF7kmX/yeHSzLK+TOXCWz5QLzmCDv2qz8EFshXA2dLlUfzll8iH2cTCT8kAH
wR24x/z3rfA6oRqtKKvDrkR54V2nqcqSR5zp310YMe/mcvEcg8w26rPyzednyZ1C
B+YWfbPxCtcOah2sXekcC5bg5104JCoyBHqe1sUJJNyjj7o2zWOUuMeGPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH4b/eo3xowdWLoFLDVJBk317xzHMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZmh2OTZqZkdqQjFZdWdVc05Va0dUZlh2SE1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrSMA0G
CSqGSIb3DQEBCwUAA4IBAQAgc7oXv3m9IlUAu+w5Ti2hoTyxF8KL97csik9LNPQs
pJrCgGOOJ+o/j9DtETAawhGFGQChIMEWDkilA2+9cAff8qrAuzYb8RQrJjWZJSa4
sDfrm5vpny39cRHBSJtnIPWFev+X8T7Xst5tJJhV9M2Ia/t5qEU1n/ut6gd0vfXH
TD/GliVkvNBdUiWrdN3kMaig+8L9CjVW9qPaiBuhlfowyx/PSrQ6ZFB9wkNpTTQP
j3rOuX8oIfnI+0Mu4WMJoa+R+n02QF04B1gp7DtO/3mZo3Vt9zkZNkGRd+scFcxl
QUKq/0fpnsWJ2nLoau34k/qPdLRlb2FkQpGDIaWL71Lw
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:03:04 2024 by rpki-client on console-fra.rpki-client.org