Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wL_ZMnijAdc2kiReEB86Edfzdpk.roa
File: wL_ZMnijAdc2kiReEB86Edfzdpk.roa (raw, json)
Hash identifier: OzUfAxdHWVAZdxlGwnun3JQ2wRELvvREp99PUOXNGGw=
Subject key identifier: C0:BF:D9:32:78:A3:01:D7:36:92:24:5E:10:1F:3A:11:D7:F3:76:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0192E161948750675FCA2C7D4BFECD706864
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wL_ZMnijAdc2kiReEB86Edfzdpk.roa
Signing time: Thu 31 Oct 2024 07:02:01 +0000
ROA not before: Thu 31 Oct 2024 07:02:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56594
IP address blocks: 31.58.137.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:61:94:87:50:67:5f:ca:2c:7d:4b:fe:cd:70:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 07:02:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0bfd93278a301d73692245e101f3a11d7f37699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:80:c6:6d:d1:e0:4f:5a:32:c5:45:fc:a8:
cb:aa:76:cb:c1:ed:8e:16:55:38:28:87:5c:0e:9f:
a5:41:77:a6:71:fe:68:8f:61:61:05:de:6d:d6:1b:
da:9c:38:f2:cf:9c:12:b9:a2:97:e9:42:5d:10:92:
84:4f:70:99:11:d0:26:cd:51:c6:77:12:41:7b:7f:
26:d5:60:10:3c:0e:37:a9:e4:d6:0d:a1:ce:33:2b:
7b:0f:ad:26:43:9a:38:06:68:89:40:d8:b1:63:07:
bb:d8:ff:c7:e1:46:0b:fb:35:18:46:1b:1e:2f:06:
ec:c0:99:b1:ab:f0:b9:4f:3f:10:04:8e:5d:fb:f2:
98:10:7b:44:11:b6:03:9e:68:7e:f4:a2:11:cd:63:
8d:2a:05:60:56:6f:bf:28:33:4d:55:a7:79:e0:7e:
70:c6:e9:37:2d:7b:aa:29:70:8c:0f:08:6f:19:4b:
05:90:b3:a9:7e:2e:57:d5:7a:6e:5f:b1:46:c5:84:
9f:46:17:b8:12:d3:4a:4b:2f:3c:fe:e1:1a:b2:a5:
b0:26:8b:18:0a:3e:07:b5:95:cc:37:3d:eb:d2:fa:
cb:97:ff:cd:97:69:ac:d0:0a:9b:9e:36:bb:07:46:
ea:e6:cd:7d:55:fd:52:f8:51:98:6c:43:3b:86:47:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:D9:32:78:A3:01:D7:36:92:24:5E:10:1F:3A:11:D7:F3:76:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wL_ZMnijAdc2kiReEB86Edfzdpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.137.0/24
31.58.141.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7e:44:f9:78:9c:4c:fb:69:45:49:b9:ef:38:ae:42:28:fa:
9a:31:b1:02:c9:ae:28:86:c1:16:3c:34:44:9c:37:29:b1:d9:
00:4c:a2:e3:65:c7:21:2c:fa:17:36:a8:33:8f:eb:58:5b:78:
70:ef:3a:e8:66:3b:bb:4f:c0:eb:27:c4:07:17:bb:58:4a:49:
7b:a7:e0:72:b2:d7:b6:39:35:2b:10:94:7a:7a:68:05:5d:97:
ab:06:74:e0:4c:94:9e:c5:08:5a:e3:b7:a9:79:ac:6d:3c:95:
71:28:34:a3:3a:29:cb:28:4e:f7:13:fc:00:15:44:64:12:84:
fc:b8:33:0a:72:c8:27:4a:fa:10:44:c3:8c:de:87:e9:ca:9b:
5a:cd:26:bc:2f:a1:b9:94:30:2a:80:a1:ec:b9:93:4d:79:2d:
0b:d8:8b:54:ca:ae:fc:14:31:72:34:4c:6e:65:3f:3d:cb:9f:
cb:a3:6a:0a:82:c5:fa:50:03:84:3b:c7:6c:9a:74:de:07:6f:
65:e5:b2:e9:b4:ea:5d:f2:96:d9:fd:fe:64:98:a0:aa:44:60:
fc:c0:55:67:31:13:8c:4b:cb:10:94:39:ef:7f:0a:3d:6b:b2:
87:ff:87:73:34:51:4f:21:c0:84:45:25:6c:2f:bf:f1:b0:66:
41:34:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:19 2024 by rpki-client on console-fra.rpki-client.org