Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-eQyc2RJ07WlGfmSuNr640IYFE.roa
File: t-eQyc2RJ07WlGfmSuNr640IYFE.roa (raw, json)
Hash identifier: 3dAijkBqn2J1mPX5rciebXsctBKQPk+Jq+wbeOytG3Q=
Subject key identifier: B7:E7:90:C9:CD:91:27:4E:D6:94:67:E6:4A:E3:6B:EB:8D:08:60:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192FD2128FB3A22B8B3FD25397875C3A2CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-eQyc2RJ07WlGfmSuNr640IYFE.roa
Signing time: Tue 05 Nov 2024 16:21:01 +0000
ROA not before: Tue 05 Nov 2024 16:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18450
IP address blocks: 31.56.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:21:28:fb:3a:22:b8:b3:fd:25:39:78:75:c3:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 16:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7e790c9cd91274ed69467e64ae36beb8d086051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:f0:76:f0:8b:de:af:4f:55:86:2d:c7:7a:
da:ff:89:db:40:01:e1:5f:07:ca:03:fb:27:a4:34:
e3:62:e5:1a:9a:1e:a1:dc:9b:6c:d0:49:88:ec:90:
e2:68:e7:03:8b:17:ab:52:43:31:66:e4:bb:79:a0:
c3:d6:1e:22:ef:dc:e8:fc:f8:45:a9:6f:f5:1c:3d:
a9:e7:29:44:a6:f4:3d:f6:53:55:1f:c1:cf:a5:9b:
5c:0e:4d:fe:36:8d:fb:08:ab:54:25:70:cf:64:5d:
aa:cc:88:f0:1a:8b:18:ef:b8:70:50:f2:8c:b8:39:
2c:e4:64:d1:71:b7:db:3f:4b:53:ad:94:61:2a:68:
78:bb:e6:76:d6:87:e3:5a:04:3b:88:b7:8c:94:ce:
03:63:55:d4:29:80:66:de:09:4d:95:4a:3a:5d:df:
dd:ea:63:c1:8a:53:2c:7d:ad:ce:0d:43:2f:2d:cc:
db:dc:9a:5c:26:99:a6:ff:22:dd:f9:7b:ae:2c:58:
ab:21:c7:4c:8d:6c:27:34:11:4b:e8:48:7b:2d:12:
c8:77:91:56:2c:11:b6:8c:f7:01:1e:8d:2c:61:06:
f3:3f:82:99:c1:93:aa:22:4d:47:cc:d8:98:0a:b5:
88:46:08:c3:b6:0b:0b:26:fb:fc:ad:46:8b:05:ec:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:90:C9:CD:91:27:4E:D6:94:67:E6:4A:E3:6B:EB:8D:08:60:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t-eQyc2RJ07WlGfmSuNr640IYFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:95:23:62:ee:9f:00:b5:63:57:58:49:35:c8:c5:d2:9b:3b:
e0:a6:7b:dc:5b:d2:60:80:2d:d6:f4:8d:dd:2e:07:55:84:db:
d8:b2:28:d7:03:b9:49:db:09:27:64:1f:df:66:a4:ea:c7:9c:
98:ed:4a:12:04:b2:72:2a:36:8c:e1:f6:6c:03:0b:68:4d:03:
4c:01:d0:8c:c9:71:02:9f:12:28:75:01:02:d5:bd:8a:b0:fe:
98:9a:24:03:63:6d:50:8e:0f:30:02:c6:44:0b:e3:5f:cc:83:
3d:be:ae:e2:6e:a6:bf:29:21:0e:cc:e2:f7:18:5c:8b:ec:a4:
6c:d4:f3:9f:f3:2d:4f:e0:1a:29:5e:aa:4d:3a:73:0c:11:7a:
c6:35:83:3a:7d:0a:c5:42:81:3a:ec:a2:62:75:34:c7:6e:22:
44:16:5b:99:3c:4e:36:21:de:2d:47:36:5c:09:af:78:d7:69:
2e:31:f6:1a:c0:5f:33:5b:44:5b:8f:8f:28:5e:36:04:f7:f2:
56:43:c7:1b:ac:9b:b8:11:b0:44:05:6f:ce:ee:8d:83:4d:8e:
20:bf:b4:b3:db:18:ad:8b:81:d8:09:46:32:cf:67:c7:0f:61:
f8:9b:33:a3:99:7a:92:9b:99:6b:a1:f4:24:82:08:ea:1d:92:
1c:2a:28:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL9ISj7OiK4s/0lOXh1w6LLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTA1MTYyMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2U3OTBjOWNkOTEyNzRlZDY5NDY3ZTY0YWUzNmJlYjhkMDg2MDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5TwdvCL3q9PVYYtx3ra/4nbQAHh
XwfKA/snpDTjYuUamh6h3Jts0EmI7JDiaOcDixerUkMxZuS7eaDD1h4i79zo/PhF
qW/1HD2p5ylEpvQ99lNVH8HPpZtcDk3+No37CKtUJXDPZF2qzIjwGosY77hwUPKM
uDks5GTRcbfbP0tTrZRhKmh4u+Z21ofjWgQ7iLeMlM4DY1XUKYBm3glNlUo6Xd/d
6mPBilMsfa3ODUMvLczb3JpcJpmm/yLd+XuuLFirIcdMjWwnNBFL6Eh7LRLId5FW
LBG2jPcBHo0sYQbzP4KZwZOqIk1HzNiYCrWIRgjDtgsLJvv8rUaLBeyHrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfnkMnNkSdO1pRn5krja+uNCGBRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdC1lUXljMlJKMDdXbEdmbVN1TnI2NDBJWUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzicMA0G
CSqGSIb3DQEBCwUAA4IBAQBOlSNi7p8AtWNXWEk1yMXSmzvgpnvcW9JggC3W9I3d
LgdVhNvYsijXA7lJ2wknZB/fZqTqx5yY7UoSBLJyKjaM4fZsAwtoTQNMAdCMyXEC
nxIodQEC1b2KsP6YmiQDY21Qjg8wAsZEC+NfzIM9vq7ibqa/KSEOzOL3GFyL7KRs
1POf8y1P4BopXqpNOnMMEXrGNYM6fQrFQoE67KJidTTHbiJEFluZPE42Id4tRzZc
Ca9412kuMfYawF8zW0Rbj48oXjYE9/JWQ8cbrJu4EbBEBW/O7o2DTY4gv7Sz2xit
i4HYCUYyz2fHD2H4mzOjmXqSm5lrofQkggjqHZIcKij4
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:54 2024 by rpki-client on console-fra.rpki-client.org