Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/98--VYzYQvmDhok_sN0s894_jjs.roa
File: 98--VYzYQvmDhok_sN0s894_jjs.roa (raw, json)
Hash identifier: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=
Subject key identifier: F7:CF:BE:55:8C:D8:42:F9:83:86:89:3F:B0:DD:2C:F3:DE:3F:8E:3B
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 0194F27FAA790CD9BE66106869F3C45972A6
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/98--VYzYQvmDhok_sN0s894_jjs.roa
Signing time: Tue 11 Feb 2025 00:54:00 +0000
ROA not before: Tue 11 Feb 2025 00:54:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30893
IP address blocks: 31.22.91.0/24 maxlen: 24
31.22.92.0/24 maxlen: 24
31.22.94.0/24 maxlen: 24
185.231.100.0/22 maxlen: 24
195.47.238.0/24 maxlen: 24
2a0c:5700::/29 maxlen: 48
2a0c:5700:3133::/48 maxlen: 48
2a0c:5700:5353::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f2:7f:aa:79:0c:d9:be:66:10:68:69:f3:c4:59:72:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Feb 11 00:54:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7cfbe558cd842f98386893fb0dd2cf3de3f8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:af:28:e2:54:90:2b:42:e5:50:49:fa:0e:
d1:a4:96:22:3b:12:7b:7d:86:8d:33:0a:76:c3:81:
0d:14:7a:ec:e6:4c:9b:f8:70:db:98:12:c4:8b:45:
d3:05:37:7f:3d:b5:88:b9:5f:14:cf:c3:d9:bd:3a:
93:c5:a0:3b:82:69:6a:93:12:aa:23:55:0b:5c:39:
10:00:50:cc:c9:27:ba:50:ad:fd:f2:5e:60:a7:89:
66:b7:de:d8:7b:cc:49:56:f8:6f:8c:52:5c:65:77:
f7:6e:51:29:b1:34:bc:d5:b3:76:b7:ae:0e:c3:42:
4c:54:72:82:49:bc:fe:44:02:4a:5e:7d:5c:b3:2b:
ec:ae:b7:f9:d3:42:2b:a7:74:76:2f:53:ae:2e:15:
50:98:a0:33:81:77:62:df:58:67:53:ce:c4:95:48:
68:d7:b9:53:11:bb:45:2f:44:0f:b8:dc:a8:a4:82:
d2:c2:c7:51:5d:0f:f4:d1:e6:66:1a:2b:ee:28:24:
e7:c2:a1:c0:bf:91:75:fb:82:9c:36:28:2d:a9:bf:
8e:18:94:9e:f3:84:05:60:cf:10:82:e2:f2:c5:dd:
4f:83:28:3f:11:dc:52:fd:f6:56:bc:4b:9a:d2:47:
a6:48:6b:4f:45:56:2c:63:7c:98:e5:c7:d6:ff:4f:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:BE:55:8C:D8:42:F9:83:86:89:3F:B0:DD:2C:F3:DE:3F:8E:3B
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/98--VYzYQvmDhok_sN0s894_jjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.91.0-31.22.92.255
31.22.94.0/24
185.231.100.0/22
195.47.238.0/24
IPv6:
2a0c:5700::/29
Signature Algorithm: sha256WithRSAEncryption
3c:9d:06:a5:66:83:a6:39:87:28:c9:36:39:3b:0d:f6:0d:c3:
fd:cf:bb:5b:1f:b7:70:0f:21:5c:12:e2:20:33:ca:1e:39:5f:
43:d2:a5:2f:9a:ba:62:cf:4b:29:c8:29:e1:76:9e:1c:82:4e:
68:a1:87:77:0b:0d:00:0c:dd:96:25:c1:a8:48:8f:4f:4e:db:
e5:31:4a:25:7b:d8:a8:ee:c4:ae:a1:03:a6:3e:5f:e7:71:63:
ca:79:b3:f4:7c:ac:44:8a:bf:97:ba:35:5a:aa:85:1e:cd:c4:
03:86:73:1e:16:af:bf:6b:ea:45:aa:ea:78:09:be:fa:d0:d8:
a2:38:4e:63:4c:21:c8:8b:a5:de:62:fb:52:3d:03:13:e9:a5:
61:f7:c7:e5:8e:6e:8f:01:5e:49:ae:c2:42:8d:ed:88:02:02:
87:da:14:04:29:40:b0:a9:d3:23:3a:e2:82:6b:82:44:5f:37:
86:98:dc:8a:be:84:10:de:23:ca:07:57:0e:c1:b2:17:cd:7e:
be:97:6e:00:b1:b3:bf:a9:65:3f:7f:a3:76:3f:5c:32:db:96:
45:e9:b9:94:2f:eb:3b:cd:97:ad:e5:5d:6d:f5:70:29:19:62:
07:35:fb:31:3c:dc:08:66:2e:15:de:e3:02:3c:fd:56:32:a0:
3f:5d:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:37 2025 by rpki-client