Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Md3DjZygE5pkd1XSeu4CbdfMaGQ.roa
File: Md3DjZygE5pkd1XSeu4CbdfMaGQ.roa (raw, json)
Hash identifier: EM02wtYhxjv5qxxQ1U2+NgGV8CYzpjs7wLyCocWu+dY=
Subject key identifier: 31:DD:C3:8D:9C:A0:13:9A:64:77:55:D2:7A:EE:02:6D:D7:CC:68:64
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282496FE4FFA0D437B390920E364B887
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Md3DjZygE5pkd1XSeu4CbdfMaGQ.roa
Signing time: Thu 02 Jan 2025 17:51:14 +0000
ROA not before: Thu 02 Jan 2025 17:51:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61437
IP address blocks: 31.13.232.0/22 maxlen: 22
31.13.232.0/24 maxlen: 24
31.13.233.0/24 maxlen: 24
31.13.234.0/24 maxlen: 24
31.13.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 12:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:96:fe:4f:fa:0d:43:7b:39:09:20:e3:64:b8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31ddc38d9ca0139a647755d27aee026dd7cc6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:0b:7f:92:45:cd:48:6f:4a:17:39:ca:b9:
64:8b:d6:b5:0e:d8:6b:1f:92:bb:db:70:ba:f7:5e:
e2:64:f5:80:49:c4:54:dd:82:57:5e:35:4a:3a:af:
86:d9:2e:2b:58:3e:4a:8e:49:89:99:e9:ea:2c:84:
ba:68:b9:14:e8:cf:d7:28:f9:6a:99:d7:ca:71:91:
a2:f1:7b:14:74:fa:ac:79:d9:ed:74:01:03:22:83:
3d:4e:ee:d7:c4:b4:03:26:a3:01:eb:ae:67:17:02:
98:27:7b:40:09:42:e9:99:a0:49:30:29:7b:db:34:
04:e4:4f:82:db:5a:70:01:92:d6:5a:08:10:b7:a4:
52:ac:12:a8:44:4c:f8:b0:40:02:57:ee:05:fe:6e:
84:39:fb:57:68:d9:d4:08:00:27:df:62:67:bb:cf:
36:ca:5c:5c:ca:b4:6a:4c:a2:e2:5c:79:17:1e:51:
56:b3:f7:f0:8c:58:23:7f:61:09:97:eb:cb:16:7e:
47:26:ee:53:46:ef:e6:fd:b0:8c:96:de:d9:21:70:
d5:73:1b:c5:76:08:c1:69:29:9a:33:96:42:6d:c9:
9f:74:4e:b7:96:08:b1:db:f4:66:53:a3:7a:93:49:
21:51:92:44:f3:6d:d8:da:1a:11:56:03:b9:4a:c7:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:C3:8D:9C:A0:13:9A:64:77:55:D2:7A:EE:02:6D:D7:CC:68:64
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Md3DjZygE5pkd1XSeu4CbdfMaGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
00:7d:e1:9b:25:70:fa:c4:1d:c2:37:81:34:f2:34:af:3a:75:
85:41:68:fb:5c:ae:e0:58:29:5d:2d:23:c4:08:6e:b0:f6:69:
8d:ce:ec:ec:37:6e:e9:87:0f:93:72:b0:bd:91:69:8c:78:97:
67:e3:69:8f:0a:0b:a4:0d:63:8c:11:f3:4e:c1:c7:e6:d6:a5:
5f:60:56:29:f0:c6:53:84:94:6d:1e:14:6a:06:7a:8f:ec:c3:
2e:10:4f:c1:b2:47:9a:7e:c3:79:80:cc:60:c8:87:1b:0f:96:
60:29:38:e6:cf:2f:07:95:69:7f:2e:fb:08:0d:36:74:76:5f:
ad:0c:46:08:26:61:68:d7:94:46:d0:db:5a:23:f2:2d:25:ac:
7f:25:9e:6c:78:58:68:cb:f2:d3:02:9e:02:53:3b:0f:73:5c:
b4:87:e7:66:4c:f5:a6:ef:af:16:f1:56:80:52:a9:36:81:ce:
07:82:52:96:9b:5e:71:70:2b:18:cb:3c:2c:d3:8e:70:fe:5b:
7b:d9:a4:fb:eb:ab:55:ea:f6:50:ef:f5:26:2d:7b:ee:32:1d:
e0:fe:b1:f1:72:98:c4:4e:02:d0:88:52:47:84:79:f2:8a:48:
b4:66:cd:41:49:25:96:ae:8f:fb:b8:be:b6:1c:c4:74:f0:4e:
11:a0:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:08:01 2025 by rpki-client