Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/30LoVtWz9Widtd-mG2qyp6ygZG8.roa
File: 30LoVtWz9Widtd-mG2qyp6ygZG8.roa (raw, json)
Hash identifier: //Cz1edicCUz76tClwNT7FMOAvdUDkJTjOyEjdjCdfk=
Subject key identifier: DF:42:E8:56:D5:B3:F5:68:9D:B5:DF:A6:1B:6A:B2:A7:AC:A0:64:6F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE1C558FA6DD5D87A0AF9973885E5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/30LoVtWz9Widtd-mG2qyp6ygZG8.roa
Signing time: Thu 02 Jan 2025 05:49:33 +0000
ROA not before: Thu 02 Jan 2025 05:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62331
IP address blocks: 31.148.205.0/24 maxlen: 24
95.47.189.0/24 maxlen: 24
95.47.191.0/24 maxlen: 24
95.47.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e1:c5:58:fa:6d:d5:d8:7a:0a:f9:97:38:85:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df42e856d5b3f5689db5dfa61b6ab2a7aca0646f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:be:34:f3:e3:8c:76:f0:f2:76:70:0c:3d:
5d:dc:9a:01:ef:73:52:22:27:63:a3:52:4a:a5:18:
60:b4:4d:7e:1e:97:e1:08:5d:15:39:fa:9a:0f:18:
c2:22:76:f0:13:1f:da:f6:04:25:16:fd:6b:53:b3:
35:ac:35:8a:a0:19:62:99:ac:e9:f2:d1:13:40:22:
31:6f:1d:d7:8a:af:23:17:f0:43:04:3b:fb:b4:6c:
38:36:25:39:46:36:fa:ba:ff:6f:62:cf:f2:52:ec:
b3:fa:ec:03:ec:7e:91:8a:91:77:4d:15:10:1c:89:
68:64:49:77:06:4f:3b:61:bb:bc:45:e2:af:2e:7c:
9a:8a:c6:e0:4d:7f:ec:f2:b9:db:27:78:33:80:49:
1e:a4:28:83:57:56:04:cb:45:30:ed:6f:86:d0:1d:
49:3c:bf:b9:f3:c2:43:fe:17:75:7d:21:78:94:92:
f1:e7:77:96:3d:ef:5d:3c:c3:e1:c1:9f:92:e8:81:
a9:ba:ab:6a:91:7b:3b:58:0c:0b:77:57:73:96:25:
6c:d3:fc:54:96:4e:62:d3:50:fe:0b:33:ba:91:4a:
53:86:c6:82:da:0f:ea:aa:a7:c7:c7:85:fc:5b:36:
ce:a9:22:da:18:b9:71:61:36:f1:69:1c:74:f9:56:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:E8:56:D5:B3:F5:68:9D:B5:DF:A6:1B:6A:B2:A7:AC:A0:64:6F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/30LoVtWz9Widtd-mG2qyp6ygZG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.205.0/24
95.47.189.0/24
95.47.191.0/24
95.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c2:b6:87:38:6c:22:80:1c:c2:ff:37:61:9c:1b:53:4e:3e:
02:ba:5b:5f:00:75:29:3f:8a:9e:85:eb:bc:cc:43:67:8d:1d:
7d:dd:ac:66:08:b4:89:b7:d3:3a:69:b0:7f:27:b2:52:ee:d2:
71:87:ab:f7:49:e4:07:14:8c:f6:e2:c2:f7:e7:f4:39:06:2f:
a5:13:ed:2f:f2:a4:b0:a3:cb:f7:1d:60:b9:02:e0:59:37:7d:
e5:0f:33:15:d2:a4:17:70:8e:de:f6:f8:73:36:13:38:8b:45:
12:07:58:41:77:db:d2:f0:95:b9:8c:93:f0:cf:3d:77:87:84:
79:4e:e3:cd:6e:8e:5e:bf:a3:71:ee:ce:2a:6c:bb:73:63:3f:
94:bf:88:1d:79:d5:6b:a1:d6:76:a8:ca:d1:52:8a:19:44:2c:
0f:fc:aa:54:db:43:4b:32:fd:cb:e2:bf:dd:a1:cc:98:7f:2c:
98:86:6f:4c:b4:c6:47:a5:fa:f1:90:13:db:41:1a:2d:e7:a1:
57:7e:f0:cd:fe:ee:42:fc:77:08:4b:4f:f7:18:d3:8b:f8:bf:
e3:f0:c8:a3:f2:77:60:20:1b:56:10:92:c5:cb:d0:81:0e:41:
62:ca:98:e1:ce:b5:a1:1b:04:2f:21:e2:7f:2f:fc:2c:0e:a2:
9e:62:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:22 2025 by rpki-client