Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiAaKWctQR1a22l2OtSoyeCUA4g.roa
File: iiAaKWctQR1a22l2OtSoyeCUA4g.roa (raw, json)
Hash identifier: dkm2VCLlE+b5dtiocqMu948fsbKKmOQejPiOZgo9BEo=
Subject key identifier: 8A:20:1A:29:67:2D:41:1D:5A:DB:69:76:3A:D4:A8:C9:E0:94:03:88
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0191FE51A403B02A9646751896B83FCFE057
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiAaKWctQR1a22l2OtSoyeCUA4g.roa
Signing time: Tue 17 Sep 2024 04:50:48 +0000
ROA not before: Tue 17 Sep 2024 04:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60504
IP address blocks: 31.56.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 07:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:51:a4:03:b0:2a:96:46:75:18:96:b8:3f:cf:e0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 04:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a201a29672d411d5adb69763ad4a8c9e0940388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:85:07:9b:6a:6a:f1:48:56:74:04:eb:f5:
cb:2d:0f:fa:98:2a:37:03:94:0d:b2:af:cf:9c:85:
62:72:f2:9b:e5:40:43:5a:fd:6f:c5:a6:c6:42:06:
b1:a5:69:d3:db:43:a8:f0:8c:c8:b9:bb:83:00:f4:
80:37:6a:e7:cc:df:4d:89:e8:93:4f:42:4b:7d:07:
7c:4a:46:c5:8c:05:4b:2f:0f:0a:3a:02:42:6e:61:
02:b1:c8:e8:69:26:04:ee:e6:50:63:20:9f:01:02:
b8:5f:d8:77:61:64:c7:fe:5b:3a:a2:25:43:60:59:
36:6a:2b:23:54:6e:7f:7d:88:bd:8a:f4:73:05:a0:
19:0c:7c:c6:4b:a5:7a:52:5a:05:59:44:40:35:fe:
94:62:94:29:bd:79:cb:95:09:70:09:02:8d:ae:32:
29:d7:3a:f0:4c:9b:4a:e4:01:c7:2e:eb:0b:c3:13:
08:f2:d5:c0:0c:b8:5b:ac:4b:dc:1a:16:49:5c:9a:
7c:bc:65:ea:86:18:b9:98:f1:63:9e:ec:bd:0b:f2:
6d:9e:51:94:6d:b9:03:e8:ae:1a:34:39:59:45:eb:
22:9a:27:8b:d8:4c:36:d9:4f:f3:8f:a3:26:16:20:
9a:ca:58:bd:b6:e8:92:3f:a4:0f:6a:39:1e:98:8d:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:1A:29:67:2D:41:1D:5A:DB:69:76:3A:D4:A8:C9:E0:94:03:88
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iiAaKWctQR1a22l2OtSoyeCUA4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9a:f4:5b:a8:31:64:e1:8f:ba:60:d9:dd:f7:64:b6:0b:ba:
c5:77:dc:45:47:3e:c3:1d:01:e7:4d:36:69:32:06:49:8f:e7:
59:4b:46:79:b1:cd:f5:da:66:41:87:59:2b:a6:15:7c:dc:29:
29:cf:44:04:c3:29:5c:17:ca:17:90:55:e5:ff:57:b0:96:6c:
d7:05:dc:a7:34:df:c6:fc:15:ce:e6:53:bc:74:95:07:bb:58:
e8:21:52:80:6a:cd:0a:cb:c0:f0:55:44:b7:07:7a:92:68:9a:
7b:2f:96:57:da:c3:1f:7e:23:fe:42:fa:80:bf:f4:70:2b:74:
3d:39:9a:08:8c:aa:0b:4b:13:c9:20:46:eb:57:57:fa:9f:a1:
24:2a:b5:f6:d7:36:7a:f4:08:af:3b:c6:8d:ea:03:39:26:1d:
62:57:aa:55:f7:dd:04:1b:47:9c:2b:bd:16:a6:a7:19:90:82:
12:24:ac:ec:ef:fd:10:61:90:e2:11:6b:0f:4b:fb:dd:30:6e:
30:db:b6:37:20:f4:f5:c2:a6:cb:28:2f:eb:40:23:ce:98:00:
18:ab:23:d1:2f:c1:f9:2f:c2:35:f1:c2:49:c8:86:9d:57:c0:
0e:b6:f5:41:6a:a4:8d:3b:cf:c2:ff:61:77:d2:57:3b:74:47:
dc:a9:3f:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH+UaQDsCqWRnUYlrg/z+BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwOTE3MDQ1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTIwMWEyOTY3MmQ0MTFkNWFkYjY5NzYzYWQ0YThjOWUwOTQwMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtmFB5tqavFIVnQE6/XLLQ/6mCo3
A5QNsq/PnIVicvKb5UBDWv1vxabGQgaxpWnT20Oo8IzIubuDAPSAN2rnzN9NieiT
T0JLfQd8SkbFjAVLLw8KOgJCbmECscjoaSYE7uZQYyCfAQK4X9h3YWTH/ls6oiVD
YFk2aisjVG5/fYi9ivRzBaAZDHzGS6V6UloFWURANf6UYpQpvXnLlQlwCQKNrjIp
1zrwTJtK5AHHLusLwxMI8tXADLhbrEvcGhZJXJp8vGXqhhi5mPFjnuy9C/JtnlGU
bbkD6K4aNDlZResimieL2Ew22U/zj6MmFiCayli9tuiSP6QPajkemI0d6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIogGilnLUEdWttpdjrUqMnglAOIMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaWlBYUtXY3RRUjFhMjJsMk90U295ZUNVQTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgvMA0G
CSqGSIb3DQEBCwUAA4IBAQAumvRbqDFk4Y+6YNnd92S2C7rFd9xFRz7DHQHnTTZp
MgZJj+dZS0Z5sc312mZBh1krphV83Ckpz0QEwylcF8oXkFXl/1ewlmzXBdynNN/G
/BXO5lO8dJUHu1joIVKAas0Ky8DwVUS3B3qSaJp7L5ZX2sMffiP+QvqAv/RwK3Q9
OZoIjKoLSxPJIEbrV1f6n6EkKrX21zZ69AivO8aN6gM5Jh1iV6pV990EG0ecK70W
pqcZkIISJKzs7/0QYZDiEWsPS/vdMG4w27Y3IPT1wqbLKC/rQCPOmAAYqyPRL8H5
L8I18cJJyIadV8AOtvVBaqSNO8/C/2F30lc7dEfcqT/F
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:51:31 2024 by rpki-client on console-ams.rpki-client.org