Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w_wOcIWrnxM5_O0NAi4J2iOgEbY.roa
File: w_wOcIWrnxM5_O0NAi4J2iOgEbY.roa (raw, json)
Hash identifier: bIhnf6o+k2pk/8GoZHpFdhUXoFiffjuKsDHwrGClo5o=
Subject key identifier: C3:FC:0E:70:85:AB:9F:13:39:FC:ED:0D:02:2E:09:DA:23:A0:11:B6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01928711035E69B137167DA7181A83BB4285
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w_wOcIWrnxM5_O0NAi4J2iOgEbY.roa
Signing time: Sun 13 Oct 2024 18:08:11 +0000
ROA not before: Sun 13 Oct 2024 18:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 31.57.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:87:11:03:5e:69:b1:37:16:7d:a7:18:1a:83:bb:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 13 18:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3fc0e7085ab9f1339fced0d022e09da23a011b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:68:58:46:58:f6:de:95:f9:37:01:ae:36:
d3:4f:31:75:42:6b:b5:e4:0d:c5:23:16:da:e2:88:
01:d9:25:7c:24:1d:96:27:ba:78:fc:ff:dd:b3:06:
d3:6c:17:a5:37:b8:b9:33:d0:da:1b:fd:56:3d:98:
c5:d3:d0:41:f3:5f:0f:1c:6d:34:9e:38:0b:5f:65:
ce:32:27:dc:d9:03:9f:e3:0a:86:b3:d7:20:a9:fb:
7c:3f:5c:36:c8:36:0c:0b:d7:ad:80:32:10:1d:7c:
ba:03:d1:45:7a:e1:6e:a3:85:c9:15:6f:55:68:a2:
ef:cd:20:c6:ee:72:54:bc:93:97:82:ad:d0:c9:b8:
aa:ce:f8:fc:b5:18:8d:1e:88:57:2e:64:b9:0d:88:
89:1f:eb:d2:9f:57:3c:6a:5b:92:ca:b8:21:8a:9f:
85:f0:38:d3:38:a1:8e:9c:07:e5:86:c4:0d:e8:87:
d9:09:7d:1a:4a:d4:2c:6e:1b:00:45:47:82:61:be:
ac:af:ff:c0:45:ec:d8:b6:d9:47:bc:8e:4b:77:8b:
19:fd:2a:5f:e5:c2:94:51:f5:11:0f:ab:2c:6e:ae:
40:c3:07:c4:3e:de:09:11:6a:80:e5:d6:de:62:ab:
09:0e:5a:b9:c6:cc:07:91:99:eb:30:93:e0:25:6d:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FC:0E:70:85:AB:9F:13:39:FC:ED:0D:02:2E:09:DA:23:A0:11:B6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w_wOcIWrnxM5_O0NAi4J2iOgEbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:88:f9:ad:33:c8:ab:3d:5e:6b:ab:52:ff:97:f7:e7:fc:c8:
b1:b1:73:da:d6:75:38:01:3a:a6:fe:1e:70:f6:3c:02:d9:e8:
2a:ba:41:a5:e8:de:0d:e4:94:e5:70:0a:53:93:a2:bd:d9:42:
ef:5b:a5:2a:a9:a4:42:ed:c6:6e:e1:5b:a6:b2:61:3e:6a:6d:
3b:e5:dd:42:46:75:cb:ad:3e:d5:42:b7:32:a8:13:4d:63:40:
1a:4d:da:3a:d1:a0:41:96:c8:11:f0:c0:d0:bf:b8:f3:b4:ed:
7b:2d:1f:9b:8a:97:8e:44:28:9f:68:c6:49:b4:d3:bb:d3:83:
49:70:5e:0e:b0:e6:4f:37:12:a0:bd:d2:40:ac:5c:4a:e3:8a:
22:b5:8d:f2:9a:05:26:44:69:a1:56:51:6e:5d:c3:22:c6:8e:
47:c2:e7:f4:20:5e:bc:58:c2:2d:7c:e4:98:51:30:43:23:ac:
c3:c1:13:79:a6:25:4e:36:5e:1e:fa:e7:f6:33:ca:3c:48:66:
1e:d3:fa:fd:34:30:90:b8:d6:3b:8d:76:a8:35:6c:68:7d:af:
3f:09:1d:95:98:89:ca:a2:ee:9b:ef:7e:34:5e:d4:2f:5b:31:
31:32:fa:bd:db:28:1a:30:94:0e:70:83:f5:b9:1f:ba:d9:7f:
9e:14:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:15 2024 by rpki-client on console-ams.rpki-client.org