Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOUO3NzguVIhCgNxzWq9UKEmxG0.roa
File: lOUO3NzguVIhCgNxzWq9UKEmxG0.roa (raw, json)
Hash identifier: 7dPDHrHWvfvW3/u6jHVp6r77tH5HdNB2nqBsAKXu8p4=
Subject key identifier: 94:E5:0E:DC:DC:E0:B9:52:21:0A:03:71:CD:6A:BD:50:A1:26:C4:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01930C59A4D5B1D8FB58FC46C16D6F8863C0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOUO3NzguVIhCgNxzWq9UKEmxG0.roa
Signing time: Fri 08 Nov 2024 15:17:01 +0000
ROA not before: Fri 08 Nov 2024 15:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.67.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.88.0/24 maxlen: 24
31.56.120.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.56.123.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.104.0/21 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.133.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.58.66.0/24 maxlen: 24
31.58.67.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:59:a4:d5:b1:d8:fb:58:fc:46:c1:6d:6f:88:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 8 15:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94e50edcdce0b952210a0371cd6abd50a126c46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:09:a3:30:fc:6a:fa:87:6e:e5:de:a6:58:
04:99:ff:09:8f:11:1b:7a:08:3c:d7:74:35:0f:34:
e5:43:6d:25:9e:1b:18:fc:ca:c7:2c:01:6d:d7:0c:
57:77:9b:76:2c:d2:e5:b5:66:39:fd:bc:b7:7b:da:
79:9f:6c:57:6e:f7:5a:ec:93:a4:30:41:9f:27:3c:
e6:42:b9:d2:55:a2:5a:92:c7:03:38:6c:e0:9b:00:
cc:04:a3:8f:fb:31:45:23:25:4e:ae:9b:2e:6f:0d:
f4:c7:17:c2:a2:c8:ed:c7:25:34:bc:ee:4b:ea:26:
9f:9a:25:5a:fa:05:d2:ba:04:3f:28:77:bd:d1:46:
60:6b:a8:48:ce:35:08:12:38:43:3e:53:d3:b9:1a:
a6:ff:b7:1c:a3:48:4f:2d:3d:47:ec:cc:dc:dc:96:
76:38:4d:8f:fd:5e:86:36:e0:c4:69:f7:a4:9b:b9:
78:37:e3:8b:2a:10:31:81:fc:16:ad:3b:85:e9:43:
3f:72:08:b5:56:1d:84:9a:64:f3:be:43:2e:2c:57:
2e:d3:ae:7a:5d:4d:68:62:7f:62:b3:b7:40:d9:3c:
ca:b6:93:45:65:ae:98:aa:08:86:38:b8:a6:93:4e:
e9:19:e5:7e:1b:93:f5:5b:f4:78:cc:75:7c:2d:42:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E5:0E:DC:DC:E0:B9:52:21:0A:03:71:CD:6A:BD:50:A1:26:C4:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lOUO3NzguVIhCgNxzWq9UKEmxG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.67.0/24
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.88.0/24
31.56.120.0/22
31.56.126.0/24
31.57.104.0/21
31.57.132.0/23
31.57.151.0-31.57.152.255
31.58.66.0/23
31.58.88.0/23
31.59.42.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e6:41:a2:c4:c2:72:18:6c:ee:a5:ca:f0:26:54:ae:5c:12:
24:d6:1e:76:9f:d5:34:35:b8:e4:93:e1:d3:01:53:6b:7a:69:
e1:78:fd:05:59:61:9e:83:14:59:71:b7:ad:18:a8:4e:55:0a:
c2:7d:6b:34:64:2c:32:d2:b7:46:3c:df:41:06:90:a7:7c:d4:
b9:30:06:ac:0d:e1:50:42:89:1a:9d:46:fe:db:08:10:50:49:
92:d7:7e:ce:bf:45:75:6a:ce:9d:46:f5:17:35:77:4a:3e:a5:
7d:31:1b:40:77:79:23:28:cf:0b:46:3d:ab:93:ed:65:5e:85:
b8:77:f4:21:67:13:b6:0d:1c:51:e4:71:8a:22:eb:9d:8f:15:
2d:86:1b:4a:33:32:39:d4:b9:cc:bb:bb:70:b8:94:7b:84:8f:
ab:4b:c8:8e:6e:39:99:d4:80:18:6c:7f:62:c0:3a:5e:3f:89:
41:c3:38:db:07:8e:cc:d9:88:af:3d:fd:ab:9d:ee:5e:d8:8d:
a2:e3:ed:ae:0f:51:4a:ff:29:1e:ba:83:2a:f4:38:78:05:6f:
88:e3:d2:92:7c:b2:e1:e9:0a:1a:20:5d:5d:82:9f:da:43:7f:
e7:50:0a:ed:36:24:88:ac:8b:0f:e4:8a:01:17:3d:a2:4a:b0:
e6:13:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:55:09 2024 by rpki-client on console-ams.rpki-client.org