Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyLUTd9kyn8BZdiVshi4AIe4V2U.roa
File: gyLUTd9kyn8BZdiVshi4AIe4V2U.roa (raw, json)
Hash identifier: aWHcz4TmzxzQp1NdHA9siEdvChyTCFpWlID+tAwzDUg=
Subject key identifier: 83:22:D4:4D:DF:64:CA:7F:01:65:D8:95:B2:18:B8:00:87:B8:57:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192FBCBAA7D78D18425B02E2246A49C94AB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyLUTd9kyn8BZdiVshi4AIe4V2U.roa
Signing time: Tue 05 Nov 2024 10:08:01 +0000
ROA not before: Tue 05 Nov 2024 10:08:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.147.0/24 maxlen: 24
31.59.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:cb:aa:7d:78:d1:84:25:b0:2e:22:46:a4:9c:94:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 10:08:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8322d44ddf64ca7f0165d895b218b80087b85765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:56:28:71:1c:95:83:e0:9d:11:27:1f:46:
6b:1c:a7:53:94:cf:f9:e2:9a:a9:89:96:88:45:eb:
e5:82:bf:2e:5a:47:12:d5:94:17:52:1c:8a:16:4b:
e8:4b:2e:a6:73:99:f2:9d:13:0b:48:97:3d:24:ad:
4a:d4:87:6e:d9:8c:1b:7c:df:2b:cb:5d:38:e1:2e:
8d:f7:7d:86:f9:cf:a8:00:11:5d:c4:14:30:46:da:
26:25:41:84:f6:4a:e4:60:05:ae:6b:96:9f:af:06:
fb:38:e8:e2:0d:f1:96:09:05:81:90:13:41:84:60:
f5:d5:6b:52:16:54:7e:78:90:48:00:b5:e1:58:52:
a6:20:ae:a0:59:11:06:87:39:1c:68:17:d6:ff:fe:
e5:ed:7e:b8:e3:c0:fb:a4:21:99:09:6b:5d:e4:9f:
bf:ac:e2:ae:74:b9:b9:2f:ab:90:24:dc:8c:0e:8c:
a8:71:80:8a:e3:8b:02:0f:2b:c9:54:5d:32:58:e8:
50:32:d1:16:78:0d:7c:e5:d4:18:e1:54:c3:28:3b:
cf:b0:e7:74:6d:64:7c:f1:33:81:22:46:88:85:4a:
2e:98:cd:68:b5:9f:ba:69:38:ea:3b:2b:e7:1f:c9:
98:b1:9f:e1:80:37:d3:a0:16:e3:82:15:31:85:e6:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:22:D4:4D:DF:64:CA:7F:01:65:D8:95:B2:18:B8:00:87:B8:57:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gyLUTd9kyn8BZdiVshi4AIe4V2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.58.34.0/23
31.58.147.0/24
31.59.107.0/24
Signature Algorithm: sha256WithRSAEncryption
99:20:7b:07:8b:ab:b1:b3:ee:43:7b:6c:4e:b0:3f:85:71:a5:
3c:e5:08:03:11:bf:aa:31:ed:d9:da:fd:7a:4b:33:d1:24:70:
93:c3:c9:11:84:88:0f:7e:d4:d1:d4:8f:7e:9c:c0:fe:af:ed:
b1:15:e5:04:a5:67:cb:fb:4c:9e:e9:fd:cf:d8:f5:ca:ea:4c:
9c:32:13:44:3e:12:c1:a8:81:92:f2:1b:37:5d:95:4b:75:32:
72:a7:6e:75:02:94:76:20:9b:89:95:8e:4e:d3:45:c1:ed:d1:
28:35:88:5c:e3:8b:23:f6:63:63:c1:ca:64:c0:26:52:cf:e7:
5c:c2:c0:46:16:23:94:8c:67:59:c3:a3:a8:d2:84:d0:87:71:
cb:b1:b3:85:53:e7:eb:30:a9:85:19:52:08:10:2f:3c:66:47:
fb:5c:0b:43:02:ed:2b:64:be:0e:9b:e4:49:bf:b4:ff:6f:ab:
37:c8:dc:11:29:4f:90:68:19:7d:68:44:ab:68:4e:98:cb:c7:
e8:d2:6a:6b:ca:30:f6:be:e5:2b:c3:20:99:ac:19:1a:0d:19:
e4:80:a1:1e:5d:b5:93:0e:da:a2:47:29:0f:e3:e1:39:77:ab:
5a:90:fa:8a:76:02:5c:99:d9:59:08:d5:bd:bd:0b:a5:d8:d7:
3a:ec:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:03:59 2024 by rpki-client on console-fra.rpki-client.org