Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/BEBiIFhite7xZ0bNEP-JA8QrqMg.roa
File: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (raw, json)
Hash identifier: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=
Subject key identifier: 04:40:62:20:58:62:B5:EE:F1:67:46:CD:10:FF:89:03:C4:2B:A8:C8
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019423D7F33BA574A3BEB855D1CFEF18FB37
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/BEBiIFhite7xZ0bNEP-JA8QrqMg.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.14.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f3:3b:a5:74:a3:be:b8:55:d1:cf:ef:18:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044062205862b5eef16746cd10ff8903c42ba8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:02:78:30:f3:25:b4:a0:34:1b:21:43:f1:
fc:e4:7e:2c:97:7b:e8:35:15:e2:f5:40:db:de:25:
6b:97:64:60:5e:22:34:df:8f:93:2e:b7:0f:58:bc:
20:f6:d1:f6:24:d3:60:59:e5:9b:ac:fa:20:37:c9:
88:cb:f9:da:6a:1c:aa:8e:62:73:50:72:aa:4e:8c:
1b:47:8e:84:87:d7:19:ff:c1:72:aa:3a:31:94:2c:
e4:bf:fa:8e:20:86:a0:1d:4a:0c:fa:e4:1a:a9:8c:
51:56:e5:6f:25:04:2d:54:8f:11:9f:60:75:ba:8d:
f2:a1:52:5d:1c:eb:9f:6d:03:e1:2f:57:04:e7:78:
be:ed:12:a8:22:1a:27:2f:51:b7:87:ba:4d:68:e2:
22:cf:c9:d4:ca:60:58:96:88:31:65:e1:7e:50:cd:
dc:02:2a:09:23:45:0d:cb:13:6a:46:42:d2:9a:8f:
08:5e:de:d5:67:2e:37:37:63:d8:28:83:c3:9e:5e:
53:c3:be:b7:90:44:73:68:e2:9c:04:02:ee:2c:71:
35:c7:00:79:6e:28:2c:23:11:61:f6:68:5e:ca:a1:
1e:78:9a:dd:df:8c:48:3b:8f:40:8a:5e:01:20:48:
09:12:20:a3:b5:02:b8:a1:bb:66:ab:57:3e:86:ea:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:62:20:58:62:B5:EE:F1:67:46:CD:10:FF:89:03:C4:2B:A8:C8
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/BEBiIFhite7xZ0bNEP-JA8QrqMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f1:0b:7f:f7:ae:34:ab:f8:6a:c3:58:91:a4:a9:70:75:b3:
ce:0a:1e:5a:69:62:aa:c2:5c:c7:9d:8b:ea:1d:46:15:c8:94:
70:34:d3:be:09:68:e5:1d:b5:d9:48:ba:a8:53:f1:1f:ea:7e:
67:45:80:16:40:57:b5:a3:2a:bc:1e:d2:63:98:8c:6a:e1:f1:
bb:c4:93:fd:0c:48:68:27:69:b0:dc:a6:3a:dc:dc:f8:3f:68:
25:61:f7:5e:ad:d0:38:60:ed:11:7d:b1:22:bd:f6:c2:17:b2:
69:9f:83:44:78:fc:7f:91:74:e7:ad:ce:e5:7a:3d:36:be:5e:
d9:58:2b:7e:3d:04:9b:d0:e2:d9:0f:a2:cb:b1:d1:d3:87:66:
de:84:19:d1:b5:41:49:d3:f2:35:2a:c1:ce:9a:ff:2f:a8:37:
d0:94:bb:93:6c:a2:61:19:8b:67:ea:b1:ff:05:ab:12:86:e2:
87:99:2f:22:b2:72:6e:91:19:a2:46:ab:85:5d:46:59:40:e2:
b8:bd:4c:8f:82:f4:80:5b:d4:08:71:c3:1e:de:f8:d8:9a:9f:
b2:dc:4d:38:fc:87:1b:4f:fd:a6:2b:b9:d7:9b:b3:d0:ca:c2:
a3:43:bf:e9:b6:02:8c:de:53:50:35:2c:5a:0d:71:1c:6f:df:
a5:1f:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:33 2025 by rpki-client