Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t5RTaPfpdLb4kaEpxlBCy3hSGyY.roa
File: t5RTaPfpdLb4kaEpxlBCy3hSGyY.roa (raw, json)
Hash identifier: tt71Ri8QBJ0xRz3DxmUASwkquuL2uAsjiDKgI5Ut5fU=
Subject key identifier: B7:94:53:68:F7:E9:74:B6:F8:91:A1:29:C6:50:42:CB:78:52:1B:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192F11868F45068634734509B53C7A76CBA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t5RTaPfpdLb4kaEpxlBCy3hSGyY.roa
Signing time: Sun 03 Nov 2024 08:16:01 +0000
ROA not before: Sun 03 Nov 2024 08:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18186
IP address blocks: 31.56.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:18:68:f4:50:68:63:47:34:50:9b:53:c7:a7:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 08:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7945368f7e974b6f891a129c65042cb78521b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:ca:f3:64:3f:47:f6:19:66:63:27:81:9a:
f7:96:a6:3f:b5:18:74:49:94:77:f6:7f:8b:a4:3d:
35:c6:9c:09:80:07:8c:57:77:86:14:e6:7e:c5:b7:
19:45:3a:a9:0b:9e:16:0c:dd:ef:0a:26:d7:a6:63:
60:1b:db:ce:e0:fd:6c:ca:6a:e5:08:c7:16:56:8f:
b2:80:81:fe:a6:06:9d:9a:1a:fd:54:0b:de:37:66:
7b:08:b3:6d:96:3b:f7:b9:2d:9d:66:19:c4:9c:22:
93:34:1b:5a:eb:1c:97:7b:42:f6:4e:97:33:f0:9c:
1a:61:21:5c:21:77:74:5b:cb:e9:5f:e8:a2:aa:0f:
26:92:2c:8a:8e:e1:a2:09:e2:d5:74:8c:94:79:5e:
bf:09:aa:6b:78:9b:d4:90:b7:29:3c:ce:b7:7b:7c:
6c:12:25:f6:80:94:24:68:9a:bc:ca:6c:19:52:a1:
95:4e:07:ce:06:ad:d5:88:2e:be:1a:1c:3e:30:34:
ff:59:3e:b8:d3:16:a0:da:8f:8c:5b:6a:24:2a:3a:
0a:24:03:d5:98:c3:3f:2b:80:13:46:4a:41:5f:14:
65:1f:cc:df:4e:ec:1f:7a:b2:ee:ff:4e:a7:75:53:
4f:b3:4d:a8:74:44:ac:0f:d3:d6:2c:58:34:ac:ea:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:53:68:F7:E9:74:B6:F8:91:A1:29:C6:50:42:CB:78:52:1B:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/t5RTaPfpdLb4kaEpxlBCy3hSGyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4f:2e:d9:87:65:4a:0d:cb:6e:e8:cc:e3:6a:13:d3:5e:57:
84:2b:60:06:5b:48:ba:f2:16:f6:7c:56:2d:e8:e4:40:54:80:
61:7e:aa:57:66:f7:84:33:e0:3c:a6:27:67:99:41:b4:17:4e:
7a:7c:8b:31:44:ce:7a:dd:54:1d:5a:f3:10:52:c0:a9:a6:df:
5b:d5:e5:f4:5c:0c:a2:3e:56:18:e2:0c:3d:bc:de:6b:1e:3e:
69:8c:95:a2:76:8b:9b:fa:92:d6:c8:87:3a:34:16:0f:67:5f:
68:72:fc:db:2c:b4:b5:28:18:f8:83:e5:b9:61:65:c4:42:00:
69:f4:9e:e1:81:6e:78:25:a7:f4:62:24:8a:31:a6:dc:d7:a0:
e4:ad:86:71:e3:25:3d:0c:db:fc:74:de:74:26:63:db:8c:8f:
f3:b8:9e:b2:89:d3:aa:73:d1:f5:d8:f1:98:31:16:f1:80:05:
61:3f:78:c8:e6:92:0c:81:89:9e:f4:72:d9:93:79:2a:b4:20:
c9:2b:fb:20:cc:01:c7:70:1a:eb:6d:23:cb:a7:a3:d5:6d:f8:
16:05:5b:ff:35:29:46:55:5c:5d:26:77:fa:d6:92:3b:36:34:
d8:62:93:40:23:36:5f:f9:ce:96:0b:97:e1:89:d4:65:72:cf:
78:73:7e:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLxGGj0UGhjRzRQm1PHp2y6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQxMTAzMDgxNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzk0NTM2OGY3ZTk3NGI2Zjg5MWExMjljNjUwNDJjYjc4NTIxYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOnK82Q/R/YZZmMngZr3lqY/tRh0
SZR39n+LpD01xpwJgAeMV3eGFOZ+xbcZRTqpC54WDN3vCibXpmNgG9vO4P1symrl
CMcWVo+ygIH+pgadmhr9VAveN2Z7CLNtljv3uS2dZhnEnCKTNBta6xyXe0L2Tpcz
8JwaYSFcIXd0W8vpX+iiqg8mkiyKjuGiCeLVdIyUeV6/CapreJvUkLcpPM63e3xs
EiX2gJQkaJq8ymwZUqGVTgfOBq3ViC6+Ghw+MDT/WT640xag2o+MW2okKjoKJAPV
mMM/K4ATRkpBXxRlH8zfTuwferLu/06ndVNPs02odESsD9PWLFg0rOqu5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeUU2j36XS2+JGhKcZQQst4UhsmMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdDVSVGFQZnBkTGI0a2FFcHhsQkN5M2hTR3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzglMA0G
CSqGSIb3DQEBCwUAA4IBAQAeTy7Zh2VKDctu6MzjahPTXleEK2AGW0i68hb2fFYt
6ORAVIBhfqpXZveEM+A8pidnmUG0F056fIsxRM563VQdWvMQUsCppt9b1eX0XAyi
PlYY4gw9vN5rHj5pjJWidoub+pLWyIc6NBYPZ19ocvzbLLS1KBj4g+W5YWXEQgBp
9J7hgW54Jaf0YiSKMabc16DkrYZx4yU9DNv8dN50JmPbjI/zuJ6yidOqc9H12PGY
MRbxgAVhP3jI5pIMgYme9HLZk3kqtCDJK/sgzAHHcBrrbSPLp6PVbfgWBVv/NSlG
VVxdJnf61pI7NjTYYpNAIzZf+c6WC5fhidRlcs94c37v
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:23 2024 by rpki-client on console-fra.rpki-client.org