Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lCS7uQpqo1aKplTX-MTiGX0qhAk.roa
File: lCS7uQpqo1aKplTX-MTiGX0qhAk.roa (raw, json)
Hash identifier: CoOBsi6AdJXfGV30BchocmQbZrAvVXEg0wdKelTsiQg=
Subject key identifier: 94:24:BB:B9:0A:6A:A3:56:8A:A6:54:D7:F8:C4:E2:19:7D:2A:84:09
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA91A9CA56CA7766D482C7D3A6DF8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lCS7uQpqo1aKplTX-MTiGX0qhAk.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44975
IP address blocks: 31.148.1.0/24 maxlen: 24
31.148.174.0/24 maxlen: 24
31.148.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:1a:9c:a5:6c:a7:76:6d:48:2c:7d:3a:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9424bbb90a6aa3568aa654d7f8c4e2197d2a8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f3:bd:67:e9:f3:84:87:58:b9:b8:b9:a1:27:
02:b2:34:b5:06:bb:59:72:70:13:da:af:b8:69:39:
48:f0:01:4e:4f:1f:14:cf:7a:2a:4a:a8:12:74:f0:
fe:44:69:e7:be:56:8f:9c:76:11:c2:78:ba:9e:24:
8d:c7:e9:a5:e1:b4:56:0b:0e:dc:35:55:89:b5:9e:
eb:8a:b8:64:c4:61:4b:b1:01:7d:51:45:88:24:77:
ff:95:86:58:e3:88:e8:4a:9a:70:af:5d:38:e9:64:
a8:82:d5:a7:29:69:1e:a9:5a:1e:1f:1b:48:cf:43:
6e:ea:55:b6:4a:88:4a:9b:51:0f:16:9d:7d:68:7e:
6e:4d:49:85:97:19:03:d4:b9:f3:ad:65:ca:ec:ac:
0c:b9:fa:92:5a:c0:36:da:bd:6d:83:2a:30:2a:a5:
26:ed:d0:68:c3:d9:a2:ae:97:30:a9:61:e2:71:d3:
20:52:52:e5:dc:d5:39:3b:28:0b:7d:54:a0:ca:5a:
d4:88:25:c4:8d:29:07:4b:cd:82:94:0a:cf:72:64:
f3:6a:eb:44:49:1e:ea:33:e0:40:fd:93:d4:cc:1f:
92:fd:36:96:23:31:d5:25:86:e1:7b:90:58:1e:c9:
30:f9:d9:73:83:13:a9:fd:01:a2:66:b4:39:87:6d:
ee:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:24:BB:B9:0A:6A:A3:56:8A:A6:54:D7:F8:C4:E2:19:7D:2A:84:09
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lCS7uQpqo1aKplTX-MTiGX0qhAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.1.0/24
31.148.174.0/24
31.148.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4b:c4:76:e2:7e:29:90:da:7a:f0:08:c4:9d:36:2b:28:04:
08:e5:75:fe:86:5b:0b:60:e7:9d:5b:df:b2:37:00:8e:3d:4e:
d9:c0:b8:c5:de:36:89:dd:5d:b4:59:67:78:e6:41:dd:b1:64:
4d:a6:ba:80:3a:83:ef:7e:55:99:3c:bf:cc:68:2b:13:de:53:
bc:5f:5f:5a:48:c4:20:a1:82:a5:15:b1:32:ea:72:09:e5:73:
4b:32:c0:4e:42:da:15:5a:e2:ef:df:03:21:30:5c:33:a7:e5:
aa:a3:c0:e4:28:82:1c:b4:c1:d2:c0:1a:c4:b0:c0:90:5c:21:
03:0f:13:9a:15:e4:34:32:c3:85:9c:44:2c:f6:f1:c3:51:3d:
6d:0f:9c:67:2d:09:e7:24:56:31:8d:75:24:1a:2f:0e:fd:f1:
c8:95:0d:8f:70:e8:a6:14:bb:84:24:ae:0a:71:0c:16:5f:0b:
1d:24:94:da:e2:67:3a:2e:cb:f7:d1:c0:a1:a3:33:a2:33:1b:
60:c7:46:22:16:e7:d0:40:6a:b9:50:50:57:fd:88:bb:f2:12:
b8:77:b8:12:1e:9f:a0:47:64:3a:32:23:40:e2:d2:7a:f2:a1:
83:44:19:d4:94:e8:23:86:52:b8:29:f2:48:5c:02:f9:c8:88:
19:99:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:54 2025 by rpki-client