Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hRA78e6jlAB7rXKdOtjO2ErvZ0M.roa
File: hRA78e6jlAB7rXKdOtjO2ErvZ0M.roa (raw, json)
Hash identifier: RLYEKH/yCOWSXCvC0whLOtdSPMT01esd8mcBWLK0IoA=
Subject key identifier: 85:10:3B:F1:EE:A3:94:00:7B:AD:72:9D:3A:D8:CE:D8:4A:EF:67:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019317E14FA2348BA30913DE2CC8F8D9E4C9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hRA78e6jlAB7rXKdOtjO2ErvZ0M.roa
Signing time: Sun 10 Nov 2024 21:01:02 +0000
ROA not before: Sun 10 Nov 2024 21:01:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:17:e1:4f:a2:34:8b:a3:09:13:de:2c:c8:f8:d9:e4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 21:01:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85103bf1eea394007bad729d3ad8ced84aef6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:61:82:e0:a5:73:60:2d:b8:da:9e:c0:e5:
a6:b9:13:ba:0f:41:7a:4d:ba:8f:c5:8d:34:1e:19:
88:bc:18:59:c0:b5:49:40:0d:e4:ae:f8:9c:ac:16:
34:70:9a:e0:70:3d:ae:99:3b:bc:a0:31:c7:0f:62:
b9:c1:b1:b1:e8:3b:2a:41:78:b1:b9:88:a9:e7:e2:
a3:be:2e:5b:67:29:0b:19:33:3e:f0:15:f5:b1:77:
32:97:d2:fc:63:07:7b:d7:f2:25:11:81:70:c2:2c:
95:54:57:24:a5:a5:42:b9:8a:7c:31:d8:98:e3:80:
8d:0c:3c:db:06:2a:94:c7:10:ff:e4:f7:f6:02:da:
93:6b:3a:ba:f5:6b:8e:69:e9:5a:bf:3e:91:bd:62:
d8:96:9c:b4:ec:4e:99:49:eb:a2:9b:16:73:b6:b1:
10:d6:76:0a:83:e5:2c:82:5a:78:9d:ee:aa:5d:49:
80:8d:7f:cb:14:49:cf:bc:67:06:d0:c5:56:95:f8:
b4:6f:a7:73:30:c7:ef:e3:69:0c:39:15:a9:29:16:
e7:06:27:cf:fc:91:34:f1:f4:0a:47:8f:26:7e:c1:
dd:ea:10:3d:40:3e:26:0f:e0:c6:a7:e3:78:c1:4b:
27:91:57:ce:7a:ab:37:f8:69:43:b6:76:ac:4a:4c:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:3B:F1:EE:A3:94:00:7B:AD:72:9D:3A:D8:CE:D8:4A:EF:67:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hRA78e6jlAB7rXKdOtjO2ErvZ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:fd:0b:e4:06:e2:38:cd:02:12:33:2f:9d:6f:70:6f:7e:4c:
be:45:f9:df:fd:b7:89:05:32:7b:80:dc:62:20:c6:55:45:7e:
03:80:42:4a:24:b6:cd:77:e3:28:99:45:87:0a:37:0e:e0:67:
2b:f3:60:4a:3b:b3:a4:fe:80:4b:ff:3c:20:5d:55:e0:ca:79:
cd:af:16:f7:69:7d:67:38:f1:dd:6d:43:38:ae:40:c9:17:01:
2f:4b:10:b5:2d:73:3d:9d:6a:55:14:af:07:d6:76:5b:82:ff:
fe:49:24:95:13:c2:dc:4a:67:6f:7a:24:41:8d:2a:3a:10:24:
66:83:1d:7b:9c:3b:b7:e0:e1:79:9c:13:e8:c1:59:1d:07:bc:
c9:75:2f:4d:88:27:c5:5c:87:d1:d0:92:fa:06:91:66:ec:e4:
0c:ad:53:ee:46:4c:2b:ee:cd:45:c4:61:b8:fb:19:f7:91:d5:
be:a8:81:cb:71:15:b0:08:c3:fb:92:01:04:79:d3:45:85:44:
79:ac:0f:bd:4b:c2:d3:2c:f0:24:24:4f:49:38:87:23:01:15:
58:98:fe:60:6c:76:e1:fc:ba:d3:32:03:4e:0b:c6:f7:20:0b:
6b:f0:19:7d:af:d6:99:21:af:43:ab:9c:d4:52:78:a2:7b:3d:
b6:92:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:30:55 2024 by rpki-client on console-ams.rpki-client.org